Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/4Z3sbrOmjY0Vo_nGUk6CvBF1iig.roa
File: 4Z3sbrOmjY0Vo_nGUk6CvBF1iig.roa (raw, json)
Hash identifier: X81nOt2BemKfVE6amxFpjRFnuUg35FpkA85+TXLtQk0=
Subject key identifier: E1:9D:EC:6E:B3:A6:8D:8D:15:A3:F9:C6:52:4E:82:BC:11:75:8A:28
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01855E887E9EE5A6D61D6BAAC1706DD4D1EE
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/4Z3sbrOmjY0Vo_nGUk6CvBF1iig.roa
Signing time: Thu 29 Dec 2022 15:38:01 +0000
ROA not before: Thu 29 Dec 2022 15:38:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 163.5.175.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.196.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5e:88:7e:9e:e5:a6:d6:1d:6b:aa:c1:70:6d:d4:d1:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Dec 29 15:38:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e19dec6eb3a68d8d15a3f9c6524e82bc11758a28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:14:d6:c8:0e:1b:04:77:3c:b9:02:27:0b:e5:
05:70:40:67:8a:7a:15:02:3c:12:e9:a6:8a:06:e8:
0f:e5:23:98:d6:81:6c:3f:83:9c:47:c2:ad:54:45:
69:3f:60:e5:0e:c0:20:7f:02:7e:ba:05:d4:1c:7e:
70:0d:0a:e1:fd:1c:f8:47:6d:14:39:e8:18:43:51:
88:97:1c:e0:f8:b1:8b:bc:49:2a:c8:17:ee:bf:06:
40:85:fe:33:f1:4a:3f:41:b6:19:77:ff:ed:fd:e7:
77:38:c5:6e:83:8b:49:8b:05:0b:6b:3c:b1:44:38:
5e:78:98:18:87:e8:52:c8:57:45:f7:23:f8:06:2a:
ed:4b:34:ea:fc:28:79:f5:81:78:ac:c1:90:02:a2:
a6:54:87:23:e0:d5:c9:66:00:34:cb:35:89:93:a3:
df:52:f3:5e:63:bc:a7:72:a6:1b:4a:8d:60:8f:9d:
eb:a6:87:f6:94:dd:63:84:a7:e3:a0:73:97:c3:5e:
01:04:32:da:97:8a:ed:31:d8:fe:fb:ef:bb:03:df:
c5:87:5a:91:e8:09:74:59:c9:28:dd:4c:80:38:df:
27:e1:29:e5:db:d7:db:3c:a1:53:17:bf:6a:d7:c5:
16:01:47:fb:2b:92:48:9c:34:cb:95:00:81:e7:89:
c1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:9D:EC:6E:B3:A6:8D:8D:15:A3:F9:C6:52:4E:82:BC:11:75:8A:28
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/4Z3sbrOmjY0Vo_nGUk6CvBF1iig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.175.0/24
163.5.195.0-163.5.196.255
Signature Algorithm: sha256WithRSAEncryption
b1:4d:3e:41:e9:da:82:a8:09:98:29:da:4c:cd:a3:d1:8e:1d:
fd:f3:11:06:9d:e4:c0:3d:0a:0f:37:f0:2e:98:83:83:d3:2d:
3c:6d:05:0c:f0:a6:57:7c:bf:a8:cb:03:72:7f:2f:8e:99:83:
2c:30:ac:ce:77:ad:be:e3:a3:e8:8d:4f:1e:25:f1:a9:8b:59:
42:82:4a:c2:2b:7f:74:b8:13:67:05:0e:a3:a9:d6:34:4a:31:
b1:b4:aa:c7:9f:0b:5f:9c:b7:50:90:1f:5f:bb:9d:c2:86:48:
26:aa:30:5e:a1:e9:01:d3:30:75:d6:e7:af:6d:45:81:86:84:
ac:bc:84:75:71:cd:22:5f:19:83:07:57:7a:1f:8a:ec:54:31:
b1:42:59:ef:c5:71:33:b1:a4:c9:39:1a:94:20:ed:70:c3:08:
f6:d2:3e:2a:53:4d:60:13:43:23:c9:c6:9a:16:e2:1a:73:1e:
ef:dd:ce:5c:83:b8:85:03:eb:d0:9f:e1:f3:a4:c7:c9:40:7c:
f4:93:72:f7:7d:9f:05:a2:e6:7b:c8:cf:a7:b8:c9:7c:43:53:
61:4a:4c:57:47:d7:16:23:47:0e:59:e4:f0:9a:04:fe:15:ed:
a3:56:1b:f3:64:df:26:45:3b:dd:1c:7a:f6:81:5f:d9:8d:c3:
0b:c5:ee:8f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:08 2023 by rpki-client on console-ams.rpki-client.org