Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/2p9Hsdt3wq2cZUelK2eJDY0PsbU.roa
File: 2p9Hsdt3wq2cZUelK2eJDY0PsbU.roa (raw, json)
Hash identifier: myfK19JxUJNv42cLiqB5Zp89QBC3hd4oViLTYmk0+28=
Subject key identifier: DA:9F:47:B1:DB:77:C2:AD:9C:65:47:A5:2B:67:89:0D:8D:0F:B1:B5
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01851598CC4D641A9CB01D7B6C00AEC8A1F6
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/2p9Hsdt3wq2cZUelK2eJDY0PsbU.roa
Signing time: Thu 15 Dec 2022 11:43:33 +0000
ROA not before: Thu 15 Dec 2022 11:43:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43043
IP address blocks: 163.5.212.0/24 maxlen: 24
163.5.137.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:15:98:cc:4d:64:1a:9c:b0:1d:7b:6c:00:ae:c8:a1:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Dec 15 11:43:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=da9f47b1db77c2ad9c6547a52b67890d8d0fb1b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:55:57:a5:49:ee:4e:51:d9:27:b1:da:d9:2a:
c5:f7:b8:03:21:60:52:40:72:4f:ad:a3:8a:ce:89:
e3:7d:ae:6b:22:a4:65:01:64:fe:a1:e5:28:bd:26:
87:e0:23:e3:ed:57:54:21:4a:08:1e:de:99:c3:24:
11:fc:ab:26:8e:c9:bc:c1:ca:0e:c6:63:c0:f8:79:
85:7d:71:95:5c:05:4e:71:47:85:e4:fb:f3:31:ac:
22:a2:e3:b5:77:02:20:de:67:1c:66:3d:3b:9c:7a:
3d:e8:16:08:3c:3c:90:ca:3a:c9:38:8e:e2:ce:07:
00:fc:83:3e:58:0b:ec:79:1d:84:c8:01:5c:a3:86:
58:c0:c6:8d:56:a7:be:ca:67:b1:ce:87:02:c8:65:
9b:3f:71:8f:f8:40:6d:11:24:6a:21:f9:53:5b:e6:
49:ad:3a:ad:b8:60:1f:c4:6d:4d:f6:44:4b:53:55:
10:d4:fb:a5:a4:92:c3:78:66:63:18:16:f1:61:4f:
57:14:86:1d:46:8f:8d:8e:96:ad:ef:49:08:b5:ab:
1a:b1:f3:da:be:16:96:4b:18:c9:13:9d:3b:2a:39:
f7:fc:a7:4b:e1:a4:89:b4:cf:c4:ca:32:29:c6:f1:
3c:a1:ad:99:b2:d9:1a:0c:21:3a:ff:66:e5:54:61:
bd:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:9F:47:B1:DB:77:C2:AD:9C:65:47:A5:2B:67:89:0D:8D:0F:B1:B5
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/2p9Hsdt3wq2cZUelK2eJDY0PsbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.137.0/24
163.5.212.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:7d:c5:49:72:58:74:15:6f:98:f7:1b:78:55:8c:71:b0:0d:
bc:ec:87:9a:69:d6:4e:fa:cc:17:1b:2d:e4:ca:14:a2:ec:0a:
0b:d9:60:06:1c:5e:42:7b:46:85:71:d6:de:ce:8e:b3:a8:5f:
93:29:fe:0d:53:a2:dc:98:86:c4:72:ca:81:be:9d:41:dd:70:
dc:8a:18:f9:74:ab:10:a1:b9:c6:18:2c:aa:a2:08:a6:16:34:
ad:c4:25:6d:6d:9c:96:21:24:6d:f6:f4:fb:5c:5c:b6:42:a0:
3c:33:1e:2b:c4:83:b9:6c:59:a6:e3:e8:50:24:13:a0:21:35:
00:5f:93:b4:96:b1:a5:a6:68:59:b3:e0:23:ff:3d:97:00:d2:
71:96:bf:52:2f:06:4f:c5:93:7a:10:71:8f:c6:2c:1e:d4:3e:
af:f0:00:c8:66:df:6e:c4:75:fb:d5:9d:51:0c:60:f6:f0:83:
f9:75:f6:28:5b:ae:c3:87:fb:2f:6d:28:b9:bc:b6:17:9b:dd:
a8:f1:78:03:e5:10:a8:87:2f:b7:fc:32:70:8d:9d:79:2e:b5:
9a:20:ac:8c:e7:0b:a0:63:60:76:54:e4:23:74:4e:d7:14:90:
e7:64:fc:97:e5:52:74:c3:9f:9d:5b:50:03:29:0c:fb:cb:1c:
ae:52:32:6f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYUVmMxNZBqcsB17bACuyKH2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjIxMjE1MTE0MzMzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTlmNDdiMWRiNzdjMmFkOWM2NTQ3YTUyYjY3ODkwZDhkMGZiMWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilVXpUnuTlHZJ7Ha2SrF97gDIWBS
QHJPraOKzonjfa5rIqRlAWT+oeUovSaH4CPj7VdUIUoIHt6ZwyQR/Ksmjsm8wcoO
xmPA+HmFfXGVXAVOcUeF5PvzMawiouO1dwIg3mccZj07nHo96BYIPDyQyjrJOI7i
zgcA/IM+WAvseR2EyAFco4ZYwMaNVqe+ymexzocCyGWbP3GP+EBtESRqIflTW+ZJ
rTqtuGAfxG1N9kRLU1UQ1PulpJLDeGZjGBbxYU9XFIYdRo+Njpat70kItasasfPa
vhaWSxjJE507Kjn3/KdL4aSJtM/EyjIpxvE8oa2ZstkaDCE6/2blVGG9IwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNqfR7Hbd8KtnGVHpStniQ2ND7G1MB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvMnA5SHNkdDN3cTJjWlVlbEsyZUpEWTBQc2JVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAowWJAwQA
owXUMA0GCSqGSIb3DQEBCwUAA4IBAQCdfcVJclh0FW+Y9xt4VYxxsA287IeaadZO
+swXGy3kyhSi7AoL2WAGHF5Ce0aFcdbezo6zqF+TKf4NU6LcmIbEcsqBvp1B3XDc
ihj5dKsQobnGGCyqogimFjStxCVtbZyWISRt9vT7XFy2QqA8Mx4rxIO5bFmm4+hQ
JBOgITUAX5O0lrGlpmhZs+Aj/z2XANJxlr9SLwZPxZN6EHGPxiwe1D6v8ADIZt9u
xHX71Z1RDGD28IP5dfYoW67Dh/svbSi5vLYXm92o8XgD5RCohy+3/DJwjZ15LrWa
IKyM5wugY2B2VOQjdE7XFJDnZPyX5VJ0w5+dW1ADKQz7yxyuUjJv
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:19 2023 by rpki-client on console-fra.rpki-client.org