Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1jxDLjuhrkSefi17NnRKsIldSS4.roa
File: 1jxDLjuhrkSefi17NnRKsIldSS4.roa (raw, json)
Hash identifier: l2la0XwFhQFFH0Rn9ZZ0PPReeUFkOKHI/GVwVL15rPs=
Subject key identifier: D6:3C:43:2E:3B:A1:AE:44:9E:7E:2D:7B:36:74:4A:B0:89:5D:49:2E
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0184F5EF23451F79D089A22E891695B6EFCB
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1jxDLjuhrkSefi17NnRKsIldSS4.roa
Signing time: Fri 09 Dec 2022 08:10:00 +0000
ROA not before: Fri 09 Dec 2022 08:10:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49581
IP address blocks: 163.5.108.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f5:ef:23:45:1f:79:d0:89:a2:2e:89:16:95:b6:ef:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Dec 9 08:10:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d63c432e3ba1ae449e7e2d7b36744ab0895d492e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4b:8d:d4:7d:05:a4:dd:f6:12:06:93:d2:c9:
bb:00:c2:8e:9d:36:bd:d0:62:58:b6:c5:72:92:8e:
49:d0:f2:18:10:db:77:1b:30:b3:4c:06:2d:10:e4:
b2:b2:e4:53:5e:a9:7a:44:f0:05:0f:c7:e4:b9:9c:
f3:3d:5c:d9:8e:c1:0c:28:3e:96:71:dd:bc:d6:52:
80:81:7b:35:0d:2c:1a:0f:fb:67:78:eb:c0:42:ca:
39:c4:76:94:87:97:45:a5:67:a3:a1:4f:ee:64:98:
57:10:eb:bb:d8:82:e6:09:d6:30:d5:79:7c:74:16:
f4:6f:f8:db:ce:e1:36:96:c9:5d:1b:8a:f9:b2:3c:
5b:46:0f:b5:eb:ee:81:97:c2:66:72:97:5c:89:e0:
8c:9f:dc:76:81:44:cf:64:ca:da:b2:f4:1e:27:2e:
cd:7d:6a:db:82:71:ca:83:34:74:d5:bd:89:07:e8:
50:86:a9:61:83:d5:b2:72:8c:92:d1:cc:ae:18:b6:
e4:2d:e1:2d:66:66:7d:7f:80:11:20:10:33:df:80:
ad:71:f0:b0:32:82:23:77:e1:92:99:d9:83:d6:2d:
60:25:46:70:51:85:30:e0:ec:ec:11:74:51:4e:a5:
bb:a3:5d:b6:e1:e4:47:80:bc:b6:86:d9:d2:8f:2c:
0d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:3C:43:2E:3B:A1:AE:44:9E:7E:2D:7B:36:74:4A:B0:89:5D:49:2E
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1jxDLjuhrkSefi17NnRKsIldSS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.108.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:45:30:2f:3b:fd:6b:fe:57:3a:7f:a2:c1:e7:37:02:c5:4d:
4f:78:db:d4:b1:14:5c:52:41:35:33:05:01:d0:b1:f3:6a:4c:
1d:ff:93:4e:2c:c4:28:a0:02:ea:41:ed:89:3d:20:ff:19:54:
5b:ca:d9:44:60:f5:d9:a5:c7:99:e7:9f:60:37:2b:d6:4f:9f:
93:db:90:b7:2d:7f:f1:29:e2:8a:bc:18:79:cb:0f:3e:1e:68:
9e:a5:0d:b8:ba:cb:4c:5b:e8:0d:49:64:ca:00:7e:4b:84:48:
4f:81:84:e1:d5:b4:0b:f8:15:0c:51:06:86:9f:f1:ad:e9:05:
b8:8f:d3:d3:33:5a:78:0a:23:45:e1:e8:d8:f0:c0:67:52:a5:
48:78:90:ff:41:5c:56:41:68:48:e5:ef:4c:6d:3c:c9:4f:3b:
0d:a3:17:d3:e9:69:16:a9:85:80:ec:f6:9f:3c:a1:e1:09:32:
19:76:db:38:c4:bf:18:a3:cf:fe:ee:1a:c3:da:ee:3d:9c:5b:
82:a0:7a:52:16:f9:30:30:71:cd:4c:5a:5a:ae:8e:9a:4d:cf:
7b:b0:3b:d9:8e:30:00:f7:c3:ec:15:0a:d4:ee:f9:5c:58:fb:
17:44:40:d9:e9:58:d6:43:d1:ab:e4:b7:6a:b5:5d:83:31:91:
dd:71:07:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:19 2023 by rpki-client on console-fra.rpki-client.org