Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1-DaJl1kx9tUutPjzq2sjPcHpG5s.roa
File: 1-DaJl1kx9tUutPjzq2sjPcHpG5s.roa (raw, json)
Hash identifier: GgvrzzhwPEr4NgOSCslV7A+SdlcPyLYmRukI5UmkCWA=
Subject key identifier: F8:36:89:97:59:31:F6:D5:2E:B4:F8:F3:AB:6B:23:3D:C1:E9:1B:9B
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01840E1F3C9E13CD2FF3F3E3CDB2B30F1604
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1-DaJl1kx9tUutPjzq2sjPcHpG5s.roa
Signing time: Tue 25 Oct 2022 07:50:38 +0000
ROA not before: Tue 25 Oct 2022 07:50:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 396356
IP address blocks: 163.5.70.0/24 maxlen: 24
163.5.74.0/24 maxlen: 24
163.5.76.0/24 maxlen: 24
163.5.72.0/24 maxlen: 24
163.5.78.0/24 maxlen: 24
163.5.75.0/24 maxlen: 24
163.5.77.0/24 maxlen: 24
163.5.98.0/24 maxlen: 24
163.5.96.0/24 maxlen: 24
163.5.92.0/24 maxlen: 24
163.5.93.0/24 maxlen: 24
163.5.243.0/24 maxlen: 24
163.5.245.0/24 maxlen: 24
163.5.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0e:1f:3c:9e:13:cd:2f:f3:f3:e3:cd:b2:b3:0f:16:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 25 07:50:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f83689975931f6d52eb4f8f3ab6b233dc1e91b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e9:07:5e:71:c4:8d:dc:01:19:88:6a:6e:ea:
06:ef:0d:77:6d:69:a2:a7:b5:ba:46:9e:fc:30:91:
e2:1b:ee:29:d5:49:f3:76:78:7a:ec:88:c8:84:e3:
40:7f:37:4b:f0:19:ed:11:24:b9:2b:62:5f:58:97:
fd:4e:f4:77:91:38:9d:d1:32:97:c8:90:8a:6a:ad:
48:51:42:7c:49:dd:89:8f:a3:37:83:df:59:56:de:
35:04:c8:75:f6:20:76:7a:d5:68:b3:0a:19:6a:31:
4a:3e:c8:0f:59:5e:90:f7:68:56:b8:3f:5d:2c:16:
77:30:4c:ba:24:0e:db:e5:d3:fe:60:5c:9d:e2:76:
08:b5:32:22:2e:36:9a:8d:c9:7d:fc:06:c3:89:1e:
e1:1d:0d:b2:e4:c3:d8:22:98:0f:33:c0:a1:f7:db:
d2:12:09:db:71:e6:8e:a1:6b:c3:e4:5c:22:6a:4a:
33:31:3f:6b:d6:3c:09:93:89:bf:be:99:9a:2a:86:
c1:d1:6a:7f:d5:77:82:25:fe:dc:26:86:66:04:ac:
73:94:9d:f2:e5:5d:1f:f0:b6:32:ac:39:d8:fb:90:
d3:1a:e4:1c:44:48:f2:67:c5:6c:51:95:34:87:eb:
a0:79:24:9c:84:35:19:a7:1e:52:c0:d0:3f:03:e3:
5d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:36:89:97:59:31:F6:D5:2E:B4:F8:F3:AB:6B:23:3D:C1:E9:1B:9B
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1-DaJl1kx9tUutPjzq2sjPcHpG5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.70.0/24
163.5.72.0/24
163.5.74.0-163.5.78.255
163.5.92.0/23
163.5.96.0/24
163.5.98.0/24
163.5.187.0/24
163.5.243.0/24
163.5.245.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:db:c6:a7:66:27:dd:77:05:60:87:c5:be:db:22:36:cb:fb:
cf:12:20:d5:1c:7a:ce:c5:0a:46:81:71:d5:19:b7:a2:be:cf:
58:af:f1:99:76:d6:21:b2:35:47:85:4f:34:19:73:7d:6e:81:
4f:70:86:c4:78:99:a2:50:7f:59:b3:45:72:5c:8c:e5:6b:87:
f6:16:94:ca:c8:83:4e:f0:0a:5d:c1:ee:f1:44:3f:f0:0a:00:
35:fb:13:07:2c:ef:73:92:9f:d8:e5:37:5d:12:d7:bb:b3:ee:
bf:1e:d2:d2:03:1d:ee:23:51:12:7a:b6:d2:ca:e4:42:9b:10:
c3:ba:82:06:9b:33:00:05:1d:04:c1:f0:df:b9:7b:ca:cf:b4:
4b:4c:31:78:fa:53:6d:ee:1b:c2:d4:15:7b:0b:38:94:16:0a:
bf:0d:51:0f:63:d6:69:c3:3f:44:01:48:02:2f:4e:2a:b9:df:
6b:82:eb:6d:2a:a6:8d:8e:95:14:de:9e:5f:f7:b4:a7:af:4f:
b2:ff:6c:e9:96:37:ec:0e:a7:7b:7f:3e:97:6e:cb:f4:19:03:
eb:87:10:67:08:f9:59:b8:da:66:3e:f9:88:1b:e8:e4:3a:76:
1c:0b:93:53:cd:f6:aa:42:d1:0e:a6:04:dd:2f:81:fb:29:cf:
b8:83:de:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:19 2023 by rpki-client on console-fra.rpki-client.org