Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/5bjaq8tVjx-FRrqmqzIezamn7WI.roa
File: 5bjaq8tVjx-FRrqmqzIezamn7WI.roa (raw, json)
Hash identifier: Ho2R0P/tUOYEvQIQWejQdlM+FxcWjTl9HlzEqfwzm+o=
Subject key identifier: E5:B8:DA:AB:CB:55:8F:1F:85:46:BA:A6:AB:32:1E:CD:A9:A7:ED:62
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0182FE1A25E1D6D667DE9EBA4BF112CD49E3
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/5bjaq8tVjx-FRrqmqzIezamn7WI.roa
Signing time: Fri 02 Sep 2022 12:08:22 +0000
ROA not before: Fri 02 Sep 2022 12:08:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30823
IP address blocks: 163.5.236.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:fe:1a:25:e1:d6:d6:67:de:9e:ba:4b:f1:12:cd:49:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 2 12:08:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e5b8daabcb558f1f8546baa6ab321ecda9a7ed62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b8:00:ae:e8:c4:e5:91:d5:11:01:3d:6f:e1:
a4:07:e1:d9:78:66:ca:44:35:fb:98:49:3d:c4:a9:
14:e3:3e:d6:5b:a0:fe:f9:46:09:91:a1:1e:77:3c:
13:4e:90:21:35:25:7b:34:39:e2:cc:e3:68:43:27:
24:76:b2:5e:40:ef:40:f4:10:6f:cd:a9:c4:5e:8b:
81:2f:8e:ea:38:a5:e3:3c:59:e1:a4:71:c2:3f:d1:
d5:58:bf:21:ff:33:24:5b:79:da:a1:91:be:95:80:
73:ae:93:bc:79:5e:25:a4:5c:eb:ec:6d:37:0d:aa:
ad:80:e7:d8:fb:02:9b:5b:c7:54:ff:60:4d:9b:91:
eb:37:87:dd:b6:92:69:af:4f:ed:ca:a2:87:04:b0:
89:ad:da:94:46:fd:59:96:1d:8c:a3:fb:de:c4:11:
ee:ca:98:03:5a:15:81:f5:46:7f:30:d2:1a:16:ba:
04:66:5c:e3:ee:fa:2e:7a:f7:54:55:1e:6f:35:6c:
63:88:c8:94:75:f6:b9:e9:be:bd:eb:1f:1a:5e:60:
22:08:34:4b:f7:c9:54:8e:94:cd:48:c8:63:8f:c5:
24:b0:a4:71:78:ed:d0:eb:90:8f:98:e6:4f:97:94:
a5:cd:b2:51:52:3c:29:a4:97:b4:44:a9:ec:23:a1:
bd:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B8:DA:AB:CB:55:8F:1F:85:46:BA:A6:AB:32:1E:CD:A9:A7:ED:62
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/5bjaq8tVjx-FRrqmqzIezamn7WI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.142.0/24
163.5.236.0/24
163.5.247.0/24
Signature Algorithm: sha256WithRSAEncryption
18:83:09:4f:58:11:9b:75:5f:40:85:75:e2:3e:b3:5e:e8:de:
27:d6:34:d1:a7:bb:14:3e:fc:35:c1:46:34:75:68:30:fb:2f:
4d:87:c7:7d:9d:ec:02:d7:18:f3:35:eb:3f:95:36:0c:17:08:
dd:fc:ca:05:f4:7a:d7:93:11:f9:e5:da:7d:63:ea:df:40:55:
3f:50:ee:d2:d1:f2:6f:57:6f:ca:53:24:a9:b6:28:07:73:cb:
a5:74:6b:cf:6a:3b:96:40:53:b8:fc:61:66:9e:1c:6a:3e:e9:
76:5c:03:bb:a5:9e:e5:2f:60:df:6b:2c:c6:e5:38:41:94:b3:
bd:04:ee:be:03:8f:5d:53:db:5d:af:f6:79:ed:0b:5a:df:21:
0d:c1:8b:cf:1d:f6:37:5e:b6:46:1d:e6:3b:9e:9b:25:90:2a:
21:96:f4:9a:4c:14:25:a1:41:6c:36:35:d0:fa:85:54:60:87:
f0:6e:f8:62:c0:04:ed:54:b8:59:88:95:42:da:09:c9:33:5a:
43:5a:7f:13:c4:86:51:78:c1:1d:1c:c8:78:af:1f:25:4f:9a:
7c:61:19:28:6e:a2:a1:cd:65:d7:ea:91:15:58:10:77:90:96:
55:d8:7f:24:93:ab:00:99:17:04:bf:30:ed:d6:05:41:f4:f3:
cb:2f:bc:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:08 2023 by rpki-client on console-ams.rpki-client.org