Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/59ATD_oniNv61YdJ-wbQ1jDVKuc.roa
File: 59ATD_oniNv61YdJ-wbQ1jDVKuc.roa (raw, json)
Hash identifier: w9NasKZdoM1fFa30pFS4InfJ6f/kbN107luJMV/Pl+w=
Subject key identifier: E7:D0:13:0F:FA:27:88:DB:FA:D5:87:49:FB:06:D0:D6:30:D5:2A:E7
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01844241F9029DCABF7872EE7D463F4E8D8C
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/59ATD_oniNv61YdJ-wbQ1jDVKuc.roa
Signing time: Fri 04 Nov 2022 10:48:50 +0000
ROA not before: Fri 04 Nov 2022 10:48:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56913
IP address blocks: 163.5.70.0/24 maxlen: 24
163.5.77.0/24 maxlen: 24
163.5.78.0/24 maxlen: 24
163.5.72.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:42:41:f9:02:9d:ca:bf:78:72:ee:7d:46:3f:4e:8d:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Nov 4 10:48:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e7d0130ffa2788dbfad58749fb06d0d630d52ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:89:18:89:80:21:4b:c5:e9:3f:45:e6:6c:c6:
a6:73:c0:9d:61:94:e2:f7:90:e3:72:a8:52:8a:bb:
ae:01:d6:bf:eb:2d:e1:e8:3f:d3:02:63:9c:2e:68:
13:07:89:2a:bb:03:ef:f1:7a:89:f2:81:4b:39:d7:
a6:f6:ff:6e:ae:b9:4d:00:5a:56:ef:7a:2d:d9:1f:
e6:e8:99:0f:5e:a0:99:e2:da:6b:cf:c2:83:81:99:
42:1c:95:49:39:33:e8:16:6f:93:87:63:4a:ad:3e:
89:42:ee:76:6a:85:2b:9c:d8:8f:6f:c8:10:bd:06:
b3:44:fb:18:08:e3:67:2c:84:b7:cc:57:a4:84:f3:
b7:98:45:61:4f:54:ae:21:cf:30:02:b9:e4:14:02:
f1:c2:a4:4f:c9:a7:6f:79:21:a8:ca:38:6d:5b:49:
38:4f:80:39:c5:a4:ba:c7:3f:aa:8b:08:7f:63:a7:
94:25:45:0b:13:6c:f4:3d:94:b8:56:a7:e6:01:8f:
90:d1:b4:9a:d7:de:60:af:04:75:48:42:b0:31:a9:
95:02:c2:81:e6:a1:ae:f1:f8:0b:06:2e:83:67:78:
43:4c:a9:31:03:3a:c7:d0:3e:12:3b:66:c5:42:b1:
ba:49:a9:66:4b:de:f5:df:02:1c:aa:5d:ed:d4:81:
aa:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D0:13:0F:FA:27:88:DB:FA:D5:87:49:FB:06:D0:D6:30:D5:2A:E7
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/59ATD_oniNv61YdJ-wbQ1jDVKuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.70.0/24
163.5.72.0/24
163.5.77.0-163.5.78.255
Signature Algorithm: sha256WithRSAEncryption
5d:ee:90:4a:26:21:0c:80:77:a4:df:fe:cb:a8:6a:a6:9b:d4:
33:66:bc:a2:de:52:29:e0:7b:4c:42:b9:4a:70:fc:b8:93:51:
b7:71:e9:a4:17:d0:78:e9:d2:4f:1a:a2:31:8f:b1:ee:2a:a3:
0f:6e:a2:44:52:14:e7:18:33:6d:b6:7c:67:40:3b:5c:84:29:
30:aa:4e:c6:91:a4:76:9d:01:d9:36:a1:76:4f:96:c2:ba:3c:
ac:d6:b2:5b:81:04:f8:36:a2:90:06:05:70:a0:45:38:d3:98:
98:77:f1:b2:e6:c1:27:7f:42:da:9e:fa:8b:38:86:03:19:74:
b3:6d:40:12:c5:f6:56:bb:9f:c6:3b:aa:32:08:6d:41:02:76:
e0:b9:82:a2:c5:fe:0f:75:38:15:71:59:72:02:1b:7f:72:ea:
f9:8a:6d:d6:65:f1:f6:ec:fd:ff:4c:82:9d:91:a7:8e:e1:b2:
a1:2c:12:d4:ba:d2:b3:c4:dd:85:14:ae:1b:4e:3d:ad:a4:cd:
9e:09:b6:42:fd:9b:9f:91:37:a8:22:c3:ca:3c:53:b5:c4:c2:
1e:58:70:87:4e:04:15:9b:06:cb:11:74:bb:1f:3e:ff:e5:66:
5a:50:71:16:c4:60:bc:4e:e9:22:f5:c8:ac:8c:f0:2a:38:37:
f2:b8:e6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:08 2023 by rpki-client on console-ams.rpki-client.org