Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/3-rV8CMtz77TnACCk_jpX1P1amc.roa
File: 3-rV8CMtz77TnACCk_jpX1P1amc.roa (raw, json)
Hash identifier: MB2B38sp2oKGxLMIkmfQb9oKL/CT0LDd9h/tqtZ4KBY=
Subject key identifier: DF:EA:D5:F0:23:2D:CF:BE:D3:9C:00:82:93:F8:E9:5F:53:F5:6A:67
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01854E2195F6362D5F81CE6FE37F68BA7889
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/3-rV8CMtz77TnACCk_jpX1P1amc.roa
Signing time: Mon 26 Dec 2022 11:11:41 +0000
ROA not before: Mon 26 Dec 2022 11:11:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 163.5.186.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.94.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.116.0/24 maxlen: 24
163.5.135.0/24 maxlen: 24
163.5.32.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:4e:21:95:f6:36:2d:5f:81:ce:6f:e3:7f:68:ba:78:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Dec 26 11:11:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dfead5f0232dcfbed39c008293f8e95f53f56a67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:06:3a:4a:5b:77:0b:c4:e6:d0:3f:90:4b:05:
24:48:47:94:55:d4:4b:e1:02:cb:ae:19:e7:26:d0:
d6:88:fd:7a:7f:05:99:cd:10:8e:11:ea:52:0a:fe:
31:a8:0d:b6:c2:12:ae:2f:83:d3:c2:41:e0:7f:33:
6c:f2:a9:82:2c:9c:1e:d6:bb:1d:e2:8a:61:e2:95:
b8:6e:24:61:89:eb:0a:07:6d:e0:79:ed:ce:ad:b9:
13:84:dd:48:c6:2f:02:f4:26:d2:50:83:e6:9a:37:
8d:b4:22:5f:12:1f:dd:c7:1a:53:d6:f0:ee:ed:91:
1d:de:c9:02:e7:d6:b6:cb:12:68:59:61:31:dc:a0:
cc:77:a9:5b:ba:93:d4:2a:25:5b:55:f8:49:d6:90:
c2:0e:4f:e3:cd:c1:8f:67:b9:a8:15:da:0d:35:c6:
25:88:ed:42:3b:93:aa:8f:bb:c9:21:6d:57:7f:36:
ca:56:d0:f7:6c:93:df:42:96:88:58:06:1d:af:90:
58:43:69:18:da:14:f6:84:b7:7c:33:6a:d7:73:c1:
57:7d:e3:10:4d:e1:e8:51:79:bd:31:f3:63:e6:9a:
25:c0:63:71:77:57:e7:e6:9a:50:d1:f7:b8:0f:de:
e7:c6:6b:ff:f2:58:ce:d5:5f:57:ee:65:96:65:89:
7d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:EA:D5:F0:23:2D:CF:BE:D3:9C:00:82:93:F8:E9:5F:53:F5:6A:67
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/3-rV8CMtz77TnACCk_jpX1P1amc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.32.0/24
163.5.94.0/23
163.5.113.0/24
163.5.116.0/24
163.5.135.0/24
163.5.142.0/24
163.5.186.0/24
Signature Algorithm: sha256WithRSAEncryption
18:cf:9a:66:f6:e0:0f:be:1c:42:7a:fb:08:e9:c2:43:ae:eb:
26:a0:93:f3:2b:58:50:e6:a0:34:d7:d4:cd:47:7a:4d:2a:cb:
8b:eb:e0:fb:7b:20:bd:f4:1e:43:ca:07:c5:14:04:3b:f0:d0:
7b:4a:cc:c7:eb:3a:11:a7:1d:b1:33:b1:df:7c:52:4a:23:a1:
1c:b8:3e:c8:3c:20:ae:a1:26:c0:27:4c:b3:b3:45:50:82:4e:
bf:e2:2f:a9:f1:63:9c:1a:f6:09:0f:dc:23:0a:e0:f7:1a:17:
30:0e:ff:eb:42:93:58:d5:c4:e1:cb:5b:2a:16:34:5d:ff:f1:
b5:72:c1:7d:9d:e0:6c:fb:e2:c7:8a:3a:a9:9e:b6:ae:cc:18:
5e:33:17:0f:74:b6:88:9a:23:d8:c2:75:0c:1f:f8:60:67:52:
1f:27:ea:ce:e0:7e:e4:12:f0:0e:44:35:72:4a:3d:28:7b:04:
a7:27:32:30:8d:67:2d:ff:16:7d:14:d4:86:d4:b5:83:32:65:
26:d2:ce:19:16:50:2c:0b:8c:a6:c4:63:72:3d:38:8b:77:66:
8a:68:93:81:d3:46:26:47:da:9e:b2:7e:4e:f1:c8:d5:08:c0:
4d:2f:89:a3:cc:12:d3:f9:fc:af:1c:de:50:ec:b2:71:c3:34:
41:dc:44:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:19 2023 by rpki-client on console-fra.rpki-client.org