Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/0tGlYdqlhG_21Tg8ayjyOJp3EIU.roa
File: 0tGlYdqlhG_21Tg8ayjyOJp3EIU.roa (raw, json)
Hash identifier: +N6J/sJ/BGccoIq3lJTiua1VgyKlJbUZJQKimifZzXQ=
Subject key identifier: D2:D1:A5:61:DA:A5:84:6F:F6:D5:38:3C:6B:28:F2:38:9A:77:10:85
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01828CC2A23BD4E222CBD6D5B00E01600BAE
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/0tGlYdqlhG_21Tg8ayjyOJp3EIU.roa
Signing time: Thu 11 Aug 2022 11:55:41 +0000
ROA not before: Thu 11 Aug 2022 11:55:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 163.5.215.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:8c:c2:a2:3b:d4:e2:22:cb:d6:d5:b0:0e:01:60:0b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 11 11:55:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d2d1a561daa5846ff6d5383c6b28f2389a771085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f1:67:b2:23:c3:1a:8e:81:57:fa:5c:63:a5:
ca:0c:4a:57:cb:bf:50:2e:1b:f3:26:e1:85:00:45:
a7:57:62:c4:d4:53:bb:af:1c:1b:3e:79:5d:ae:07:
88:74:87:66:b8:6f:59:03:45:82:4f:e2:8c:3f:f7:
cc:9e:f1:b3:5b:0e:eb:7f:5f:18:5f:39:7b:97:79:
59:5f:bf:3a:37:64:d9:fd:18:75:41:12:0d:14:75:
e8:d2:7c:15:58:93:00:56:48:98:15:be:c8:a3:16:
12:53:b5:f9:6a:0a:90:91:0c:55:69:0a:42:2c:3f:
5c:05:45:41:96:51:d9:c9:ed:55:c5:2c:9c:df:56:
63:8c:b3:59:0c:55:e9:0f:98:33:ec:9b:6e:3e:a1:
f8:26:ec:48:ad:08:ec:b8:18:63:82:c0:f7:70:6b:
49:22:27:6d:43:65:08:c1:81:74:64:62:3c:ba:6c:
47:b3:ca:d1:ed:bb:65:3f:44:ab:57:2f:ea:fb:0c:
18:5c:89:d2:d5:70:c3:91:3a:5e:4d:8f:ae:ca:1f:
f1:b8:ef:f5:73:c2:b5:cc:55:42:1d:b9:dd:83:98:
53:db:67:f4:fa:34:ef:0f:0f:d8:c2:fc:d8:03:56:
49:25:ad:ab:55:a5:02:0f:24:4a:38:aa:9f:ea:7a:
c5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D1:A5:61:DA:A5:84:6F:F6:D5:38:3C:6B:28:F2:38:9A:77:10:85
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/0tGlYdqlhG_21Tg8ayjyOJp3EIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.128.0/24
163.5.163.0/24
163.5.215.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:89:d0:a0:a3:a6:a2:91:7a:b7:44:90:8a:aa:01:a2:ee:cd:
80:92:33:e2:18:84:11:41:6a:68:f3:72:86:b7:4d:23:57:be:
43:78:78:72:13:32:b5:bf:6f:af:b2:bf:93:40:d7:42:bf:2c:
ba:5a:19:39:c5:87:cd:a5:0d:88:ac:02:f5:50:31:0d:59:42:
1a:1f:af:41:e8:44:7f:89:13:2d:15:af:f5:81:7d:d6:6a:0d:
57:5a:4a:fa:a6:12:5e:27:05:33:0c:22:ef:ac:3c:58:9e:1b:
48:d4:5c:6f:78:f4:5f:a7:67:a2:93:60:b1:65:7a:f2:80:0d:
fb:c5:43:94:80:93:f7:ad:74:10:ab:12:1c:ba:f1:88:43:0d:
b9:52:46:cf:38:7c:7b:d6:47:02:8c:54:06:2b:f2:4e:b1:02:
39:1b:6f:1a:c0:27:5b:0e:59:bf:73:d9:31:eb:65:5a:17:fd:
e2:e4:fa:06:b5:61:cd:20:36:27:a3:49:d5:ea:2b:f7:e4:1e:
6b:b0:48:b4:a7:bd:63:1e:ac:f9:ba:c1:3d:1c:e7:12:6b:d3:
52:77:56:ca:60:56:a6:80:6d:d9:e6:34:6a:3b:b9:b8:ad:40:
97:30:96:f2:33:30:75:0e:a1:35:4c:37:7f:d4:6c:73:28:7d:
e1:40:cb:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:08 2023 by rpki-client on console-ams.rpki-client.org