Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/5IUn5f2q2pemqMyEyuSyifjOpuw.roa
File: 5IUn5f2q2pemqMyEyuSyifjOpuw.roa (raw, json)
Hash identifier: If8M7xLjvLk9yGmNfRif8um+z+cg2ioQoU6r0u0Klx0=
Subject key identifier: E4:85:27:E5:FD:AA:DA:97:A6:A8:CC:84:CA:E4:B2:89:F8:CE:A6:EC
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01846305529B7CBD839E7D6A4B155F71EE65
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/5IUn5f2q2pemqMyEyuSyifjOpuw.roa
Signing time: Thu 10 Nov 2022 19:30:03 +0000
ROA not before: Thu 10 Nov 2022 19:30:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 163.5.101.0/24 maxlen: 24
163.5.215.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:63:05:52:9b:7c:bd:83:9e:7d:6a:4b:15:5f:71:ee:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Nov 10 19:30:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e48527e5fdaada97a6a8cc84cae4b289f8cea6ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e7:c3:27:c8:4a:d1:57:7e:93:64:9b:80:c4:
21:38:65:80:45:77:c7:72:f9:94:e5:a0:5d:b1:05:
90:91:a6:a4:5d:71:fd:5b:ad:ac:01:b3:f3:94:c0:
0e:a8:54:cd:33:d3:36:03:87:71:d4:de:75:b2:3d:
4e:b6:87:8b:66:bf:18:8f:ea:86:55:ad:bd:95:59:
e1:90:0e:b7:39:f1:95:3d:d1:87:e8:df:0d:0b:9a:
04:42:0e:45:a2:13:9b:95:54:c2:e4:a4:d2:0b:ad:
25:b9:4c:f7:a3:a2:29:71:0a:00:7d:82:a5:7e:b4:
df:7a:28:a7:0c:01:fd:d7:c8:d5:62:29:07:93:3b:
c3:b4:d9:2f:50:8e:0c:87:65:05:e5:af:fb:99:70:
e1:4c:78:3f:37:d2:a6:ab:3c:97:ae:29:90:1e:6e:
e0:30:90:08:ce:a9:54:1b:f3:64:ab:d1:ae:b6:10:
7c:70:d5:18:0d:7a:41:a6:7f:79:29:3a:d1:54:dd:
8b:91:78:70:83:38:de:84:d2:77:24:cf:ae:08:16:
7b:94:1e:d6:12:21:e1:ae:64:de:db:22:90:f6:7f:
c4:e0:91:0e:22:ed:10:9f:14:56:0b:e6:6b:65:f6:
41:3a:64:ce:e9:d8:28:61:51:68:b2:9f:4e:74:9a:
47:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:85:27:E5:FD:AA:DA:97:A6:A8:CC:84:CA:E4:B2:89:F8:CE:A6:EC
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/5IUn5f2q2pemqMyEyuSyifjOpuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.101.0/24
163.5.163.0/24
163.5.215.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:d7:50:c6:98:da:80:21:4b:ec:17:2c:81:a8:7f:70:26:db:
e4:ca:8f:9a:8a:1f:60:e4:59:52:cd:ff:60:29:57:50:03:a4:
11:e7:67:be:3d:56:c5:98:e1:ac:72:76:5d:20:5e:68:da:e7:
84:19:94:c9:e5:ec:7e:cc:9b:06:2e:7e:a1:59:5f:ac:7d:0d:
04:c6:25:e5:49:eb:3f:c9:36:1d:ca:d1:dd:e5:55:2a:3b:b0:
81:21:a6:d7:ea:c0:14:a9:15:9e:74:62:c8:84:54:d2:06:4c:
7a:1a:0e:2c:dd:d2:f6:50:7e:5f:c2:d7:b8:53:40:12:fa:4e:
12:41:ce:ca:b2:eb:88:56:d2:b2:7c:9d:31:56:f6:ee:ce:b7:
dc:f1:04:7e:b8:dd:9f:d8:75:a5:78:29:5a:38:8a:02:9c:18:
0d:63:ca:53:bf:3a:f4:50:72:ad:99:54:ad:01:21:8e:6e:ea:
02:9b:09:43:d8:6e:c4:b2:51:2c:3e:1c:37:6c:42:8d:e7:1d:
35:b9:4c:33:b9:cb:84:73:80:0a:b6:10:0e:da:98:cc:d1:4f:
b7:9b:5a:1d:ac:e5:1f:40:9c:99:00:9c:f8:a3:c0:0b:5c:5f:
3c:d2:91:dd:92:13:39:5f:de:39:d9:72:41:0f:b4:13:a2:1d:
23:c5:fa:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:19 2023 by rpki-client on console-fra.rpki-client.org