Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/2EU-YSUtDMq9QRlF2TTGnjmHqk4.roa
File: 2EU-YSUtDMq9QRlF2TTGnjmHqk4.roa (raw, json)
Hash identifier: 8Um2RzTUN/SF1nIGZzGobIlRUEqxRKYXA50z8OliKVo=
Subject key identifier: D8:45:3E:61:25:2D:0C:CA:BD:41:19:45:D9:34:C6:9E:39:87:AA:4E
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01851588525A35447FB49605002EABB8E800
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/2EU-YSUtDMq9QRlF2TTGnjmHqk4.roa
Signing time: Thu 15 Dec 2022 11:25:33 +0000
ROA not before: Thu 15 Dec 2022 11:25:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212815
IP address blocks: 163.5.192.0/24 maxlen: 24
163.5.120.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.154.0/24 maxlen: 24
185.253.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:15:88:52:5a:35:44:7f:b4:96:05:00:2e:ab:b8:e8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Dec 15 11:25:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d8453e61252d0ccabd411945d934c69e3987aa4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:72:aa:db:7c:b2:81:a9:f8:dc:80:32:2a:bc:
6e:e7:38:c0:53:6d:54:97:ce:7c:17:fe:89:e4:53:
d3:c0:01:de:4d:54:3f:6a:cb:38:f8:31:88:46:49:
70:31:36:34:5f:c6:fb:32:c4:04:06:09:d1:57:24:
f8:a3:33:5b:7a:97:e6:8c:e8:bb:8f:19:d9:31:de:
6f:f5:02:5d:96:90:bb:d9:7c:f5:b6:fb:9a:e6:8b:
18:6d:7b:3c:11:01:a6:ad:fb:74:db:4a:3b:df:9a:
1c:8a:f4:a4:81:a5:0c:39:54:7c:c4:c6:42:77:df:
76:35:8e:b6:da:58:c9:9e:23:a0:f3:18:c2:01:3d:
34:f6:82:0e:83:91:fb:ce:44:1e:a5:6d:20:b4:8b:
52:37:a4:d6:33:c7:2e:7d:18:7a:14:68:46:11:33:
be:04:30:9a:58:f3:85:88:f4:d8:4b:1d:06:9b:cf:
41:97:c9:ef:9c:e6:36:ba:86:50:b0:f4:54:64:ba:
62:03:c4:5f:ee:b6:05:49:21:ad:b8:93:ee:f1:62:
c9:d0:e2:cf:0a:1f:03:1e:29:dd:2b:07:dc:c6:4c:
ef:88:f1:17:cb:91:cf:71:26:37:4e:04:2f:90:8b:
1b:da:22:2a:0f:12:4b:dc:8e:67:d4:40:93:47:54:
02:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:45:3E:61:25:2D:0C:CA:BD:41:19:45:D9:34:C6:9E:39:87:AA:4E
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/2EU-YSUtDMq9QRlF2TTGnjmHqk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.120.0/24
163.5.143.0/24
163.5.154.0/24
163.5.192.0/24
185.253.54.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:42:4b:0b:da:d0:97:54:4c:4f:3c:56:9b:57:c8:0c:13:6c:
5b:cf:46:78:ef:0f:e9:b0:df:37:18:2b:2e:8b:fa:72:6b:2a:
2c:76:d2:5b:a4:cf:72:83:26:09:43:b5:ac:83:68:e5:4e:ba:
84:a5:03:55:a0:62:fa:e6:76:e2:78:78:92:03:d8:2a:4c:fa:
63:8f:96:2d:cc:ea:0a:58:6b:91:c4:af:a7:c1:9e:5a:e5:bf:
a8:b2:ad:00:29:31:9b:53:48:4d:9f:a3:1e:cb:09:43:1f:9d:
25:cc:8f:22:ac:b6:96:ee:85:f2:8f:cf:31:9e:6a:85:64:a6:
8b:7b:fd:4f:de:16:ae:ab:48:7e:0b:f9:de:4b:45:15:fb:dc:
3f:e8:db:b5:d8:c2:d4:ce:3c:43:13:07:a4:6c:f3:1c:96:d4:
97:6d:e6:77:9d:7c:e6:ad:57:1b:42:59:13:29:ec:f7:51:ca:
09:62:78:ac:b6:b7:95:d2:70:bb:3b:b0:04:aa:83:be:12:43:
5d:d6:69:21:3c:84:41:90:9b:83:06:77:94:9c:39:36:3e:a6:
b9:92:d3:11:9f:d4:fd:fb:3c:96:5f:77:f8:2d:eb:f2:54:b8:
cb:58:4b:0b:fb:cd:2e:15:5a:13:8e:ab:e8:92:2f:81:f9:c1:
5c:80:d8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:08 2023 by rpki-client on console-ams.rpki-client.org