Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1sNfOPyLAGjfS2Vhq1hHX1NOaNo.roa
File: 1sNfOPyLAGjfS2Vhq1hHX1NOaNo.roa (raw, json)
Hash identifier: nqkMUQ2KUAt3uVLkfE95nQU20dBU9RWN/iFnofD6Hro=
Subject key identifier: D6:C3:5F:38:FC:8B:00:68:DF:4B:65:61:AB:58:47:5F:53:4E:68:DA
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018404C646FEE65B3B1564C830609F588F3D
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1sNfOPyLAGjfS2Vhq1hHX1NOaNo.roa
Signing time: Sun 23 Oct 2022 12:16:53 +0000
ROA not before: Sun 23 Oct 2022 12:16:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43350
IP address blocks: 163.5.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:04:c6:46:fe:e6:5b:3b:15:64:c8:30:60:9f:58:8f:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 23 12:16:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d6c35f38fc8b0068df4b6561ab58475f534e68da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:50:ab:33:c7:57:ee:f1:2f:9d:ea:be:72:f2:
81:90:ca:df:1b:d8:d3:6b:81:4a:e5:3f:c3:4f:2d:
69:72:4c:7e:fb:0c:79:cc:1e:43:45:be:94:5a:76:
a0:d6:c8:81:4e:e6:69:b2:b8:0b:24:77:17:5c:a6:
4e:e5:82:29:a6:cd:6f:e7:13:8e:3b:90:f4:ef:76:
26:4f:38:27:fc:21:cf:21:4d:97:24:ba:27:a6:df:
88:57:21:0f:55:10:ec:8a:de:67:72:da:41:8f:41:
5d:08:f5:30:6e:39:a2:2f:3d:b3:1b:2d:61:c5:5b:
59:ed:04:5f:68:1a:08:30:fa:a6:5b:b4:9e:35:88:
29:5e:d6:4e:8a:9b:37:6b:a0:77:de:24:7d:03:f2:
8c:cf:b6:f6:9f:d1:24:76:67:9e:6e:e4:a7:4f:77:
f7:e4:6b:14:09:32:d5:23:40:01:36:28:03:2d:3f:
57:a5:a3:39:5a:bf:c7:3f:32:46:eb:a8:39:37:a2:
bf:f5:92:36:7b:d7:b4:84:ef:c2:63:cf:af:23:9d:
46:ee:b3:88:5e:78:0d:1c:f4:af:c1:cb:ac:8b:eb:
0c:d3:a1:60:26:cb:a4:38:07:57:fb:df:4f:0a:d8:
44:ff:82:a4:5c:a1:d5:04:a7:b3:22:08:72:32:f3:
01:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C3:5F:38:FC:8B:00:68:DF:4B:65:61:AB:58:47:5F:53:4E:68:DA
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1sNfOPyLAGjfS2Vhq1hHX1NOaNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.182.0/24
Signature Algorithm: sha256WithRSAEncryption
29:29:0e:15:30:ba:a0:78:69:ab:c9:d7:fb:1b:da:4c:aa:3a:
62:da:42:bf:4d:49:b2:44:82:2b:15:72:47:f3:50:98:e0:e1:
c3:20:f0:99:eb:ee:d0:07:0a:45:77:33:87:32:72:b2:37:ab:
75:4b:87:5e:8b:f8:d4:8d:35:19:0b:a5:da:c3:80:2b:97:83:
b1:64:dd:11:00:b2:8d:7e:fa:37:78:9c:f1:be:14:2d:40:c4:
be:fc:17:68:0d:85:98:9c:95:8d:be:14:f6:11:3d:fb:5e:58:
23:80:15:73:82:b2:fb:da:5e:0e:74:5b:25:57:83:99:03:d3:
6b:21:e2:fb:b8:5a:e5:7f:65:81:0c:ac:d0:dd:c4:56:59:21:
42:c2:1a:f2:9f:b1:ba:7f:f1:24:bc:f8:6f:63:71:35:c5:cc:
39:5c:7b:34:b7:b5:08:01:58:57:25:15:a5:2d:0d:aa:89:d3:
56:e0:42:a6:19:44:c5:5d:f5:10:6d:13:3c:08:80:57:a5:82:
da:38:4b:14:e4:55:1b:5a:fe:a9:b1:b2:65:03:b8:55:a8:75:
c9:30:39:76:b9:50:65:c0:52:13:86:6e:35:e5:fb:bf:55:25:
5e:c0:87:30:7b:44:59:16:4c:a2:b1:f0:46:9e:bb:40:e8:8c:
c7:e0:dc:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:08 2023 by rpki-client on console-ams.rpki-client.org