Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1-s6jv6uGsga3uOwas6FwbeDCqDA.roa
File: 1-s6jv6uGsga3uOwas6FwbeDCqDA.roa (raw, json)
Hash identifier: 6b+yNJ0xIvg100jkSySABJYsUyHYwhOdiRygaU3xDH0=
Subject key identifier: FA:CE:A3:BF:AB:86:B2:06:B7:B8:EC:1A:B3:A1:70:6D:E0:C2:A8:30
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0183407E875FC087C61CA7BCA8527EF5C381
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1-s6jv6uGsga3uOwas6FwbeDCqDA.roa
Signing time: Thu 15 Sep 2022 09:32:57 +0000
ROA not before: Thu 15 Sep 2022 09:32:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204372
IP address blocks: 163.5.230.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:40:7e:87:5f:c0:87:c6:1c:a7:bc:a8:52:7e:f5:c3:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 15 09:32:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=facea3bfab86b206b7b8ec1ab3a1706de0c2a830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2d:5b:13:9a:23:0c:68:e7:e7:3f:51:bb:62:
04:09:25:3e:47:68:e4:b6:78:29:04:a5:b1:a2:cd:
f4:ba:a5:81:4d:0f:e4:51:a8:e6:a8:e7:3e:da:4a:
85:23:91:bb:19:f8:b7:ee:4a:ef:f9:cc:e1:2c:62:
01:ef:0e:92:88:d9:5d:74:66:bf:fb:e1:e9:7b:54:
a0:91:56:56:86:8b:01:57:30:78:79:38:1c:e1:61:
a5:3c:41:2e:21:59:b8:f6:7f:ba:07:c2:08:8e:5b:
ca:ce:02:77:25:2d:d4:9c:98:e1:73:29:c0:0a:65:
76:7b:e6:86:60:6a:4a:93:b5:70:aa:ee:fb:47:80:
55:4e:16:4f:e5:66:c1:c4:f3:96:07:c2:44:41:10:
9d:1a:77:3f:fe:ed:92:9a:27:73:1a:37:38:e3:29:
15:c3:9f:0e:4c:59:e2:2e:60:c9:0c:10:75:2f:3a:
28:22:a0:81:c7:bc:90:76:6f:8e:14:ce:e0:2c:34:
8c:45:de:b7:a5:77:5b:43:41:68:d7:da:f2:13:66:
3d:58:cc:81:58:ac:c9:6f:9f:37:7f:1e:8f:18:e2:
63:18:9c:7b:1b:b9:de:c6:bd:18:1f:60:2f:37:d3:
7a:73:3f:39:e4:86:b2:24:7c:9e:1a:06:c2:b5:05:
41:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:CE:A3:BF:AB:86:B2:06:B7:B8:EC:1A:B3:A1:70:6D:E0:C2:A8:30
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1-s6jv6uGsga3uOwas6FwbeDCqDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.138.0/24
163.5.161.0/24
163.5.230.0/24
163.5.248.0/24
Signature Algorithm: sha256WithRSAEncryption
71:3f:6b:18:48:42:92:cc:e6:f6:fe:f9:bc:a1:da:b7:f3:92:
e8:15:c3:c6:55:eb:19:6b:e6:0f:0f:4d:c5:d9:43:4a:0c:91:
32:6b:46:87:67:cd:a6:d4:db:ba:36:9d:85:ac:66:a9:d4:d5:
a9:84:fe:34:34:6b:7e:b7:72:1b:6d:c0:17:47:b0:4b:22:47:
70:50:a3:b8:45:fa:44:58:47:7f:da:43:60:61:51:ac:91:ed:
49:6b:ed:60:41:3f:8d:7d:44:81:1c:dd:2a:1a:36:ad:ae:b5:
65:0d:94:0d:e0:04:1c:30:63:e4:3f:ed:4b:84:dd:aa:38:47:
87:15:11:c0:3d:f2:f7:b2:33:5c:45:86:0c:19:00:24:3b:db:
61:31:a8:49:d9:62:62:b4:eb:1e:9f:2a:9f:7d:5a:6e:97:60:
a4:fb:30:fd:5f:6b:84:ef:95:63:4f:d7:67:bb:c2:91:17:f7:
1d:e0:f4:52:83:f3:9e:f9:ee:af:4e:e8:8c:48:8e:ae:09:ea:
11:be:3d:13:52:7c:fb:e3:49:8b:c6:39:ad:e1:c3:7f:eb:f2:
7d:9a:60:4a:72:fc:de:3b:3f:39:99:61:c8:4e:ab:30:03:be:
00:b8:e8:b0:cd:48:a5:34:e6:ad:b1:71:db:bb:bf:ea:aa:15:
e6:fd:3a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:19 2023 by rpki-client on console-fra.rpki-client.org