Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/3_WZzeQcxp6uz8gsUaGbBr2ft-U.roa
File: 3_WZzeQcxp6uz8gsUaGbBr2ft-U.roa (raw, json)
Hash identifier: SssgLo5mmzHg6o45i+88Uf4sq1KMEWh3VRjU8V/uzoU=
Subject key identifier: DF:F5:99:CD:E4:1C:C6:9E:AE:CF:C8:2C:51:A1:9B:06:BD:9F:B7:E5
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01846303249D33062F3AE7DD449594984417
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/3_WZzeQcxp6uz8gsUaGbBr2ft-U.roa
Signing time: Thu 10 Nov 2022 19:27:41 +0000
ROA not before: Thu 10 Nov 2022 19:27:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204372
IP address blocks: 163.5.210.0/24 maxlen: 24
163.5.222.0/24 maxlen: 24
163.5.227.0/24 maxlen: 24
163.5.230.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.246.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:63:03:24:9d:33:06:2f:3a:e7:dd:44:95:94:98:44:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Nov 10 19:27:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dff599cde41cc69eaecfc82c51a19b06bd9fb7e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:85:08:27:9a:64:e2:12:f6:2c:aa:76:d4:e5:
82:09:6f:e4:03:04:b6:ea:d9:24:19:a5:b6:e6:b3:
d9:8e:c9:c3:19:97:d9:59:79:25:a0:ea:fd:44:7f:
a2:24:72:cb:10:24:04:7f:7a:91:bc:22:ee:87:73:
c7:ec:77:ac:13:6d:aa:04:21:67:79:8b:43:a6:ab:
d6:35:f9:87:e1:35:0e:9f:dc:d8:06:57:93:bd:ae:
5b:b3:68:01:b2:71:f4:fc:26:a9:c7:2f:a0:a0:12:
98:2a:14:49:6a:10:ec:de:35:f9:5f:e0:60:79:93:
03:6a:c4:33:a3:c8:89:e3:f9:db:86:61:0c:0c:a5:
e8:3d:9b:31:86:16:3a:9c:26:a6:6b:cd:05:11:4e:
0c:3c:49:cb:d7:c9:ab:b9:ec:0b:5d:29:22:b2:33:
c4:07:89:38:b8:cc:b0:cf:e9:76:0e:b4:b8:da:57:
95:f1:8f:5f:8a:ce:e6:14:5f:4a:ab:a9:32:28:67:
b6:66:bb:fb:63:2d:95:dd:bd:6c:e3:53:0b:3f:35:
94:ff:85:83:fd:a4:c6:ba:d5:9b:33:ea:7e:50:f0:
dc:1f:64:4d:0b:4a:a7:8c:e4:a8:99:56:ec:e4:cb:
2d:91:c0:f6:fa:14:9b:e3:10:b7:b2:f1:50:91:e1:
ca:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F5:99:CD:E4:1C:C6:9E:AE:CF:C8:2C:51:A1:9B:06:BD:9F:B7:E5
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/3_WZzeQcxp6uz8gsUaGbBr2ft-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.35.0/24
163.5.138.0/24
163.5.161.0/24
163.5.210.0/24
163.5.222.0/24
163.5.227.0/24
163.5.230.0/24
163.5.246.0/24
163.5.248.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:b3:45:5f:46:12:eb:dc:a9:4e:dc:12:63:8f:56:b3:d1:7e:
cf:93:41:9d:8d:b9:fa:86:38:da:d2:c8:21:f3:da:66:20:ea:
fb:82:02:e7:a6:df:6b:ab:45:20:41:a9:51:f9:57:65:61:14:
df:9e:77:2c:0a:49:b6:d1:02:0b:68:08:8b:b1:57:06:73:b1:
c5:03:14:8d:16:40:fd:93:04:23:05:e7:6f:7c:60:eb:3a:5f:
bd:9f:e8:b6:8e:fa:aa:80:03:34:46:37:8f:4e:28:11:47:0b:
3f:9c:f4:0a:9b:30:03:c7:9e:43:b5:05:e7:cf:6f:95:e2:96:
5e:3f:10:4a:9b:ad:ae:85:8f:71:e5:9f:0a:6f:66:bd:3a:ba:
a9:48:e4:81:96:35:85:e2:05:2f:c6:0f:04:f5:f8:16:0c:22:
d0:56:ba:ca:49:51:85:92:81:dd:6d:de:57:88:ea:4f:09:9d:
e0:3b:f6:41:c3:a7:78:fc:aa:df:44:bd:ea:d9:f5:5d:2c:06:
3d:32:b4:84:69:db:a8:5e:a3:1d:20:7a:30:1a:09:f2:c4:74:
74:d8:fb:42:7a:3a:be:cf:06:5c:43:2c:9e:2b:45:89:72:6f:
2a:b3:c2:ed:0b:82:e2:34:62:6e:8a:09:73:71:bd:fa:6e:f8:
a0:57:65:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:19 2023 by rpki-client on console-fra.rpki-client.org