Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/5lVuBkPYalvZ7_Qx6ACznbQJMNM.roa
File: 5lVuBkPYalvZ7_Qx6ACznbQJMNM.roa (raw, json)
Hash identifier: PEihURxjAKnG/XiHfFT9imB6juTtFqFxlgnExf/HqSQ=
Subject key identifier: E6:55:6E:06:43:D8:6A:5B:D9:EF:F4:31:E8:00:B3:9D:B4:09:30:D3
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01852A00FD50B7E08D5EE07A0521A24ED088
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/5lVuBkPYalvZ7_Qx6ACznbQJMNM.roa
Signing time: Mon 19 Dec 2022 10:49:45 +0000
ROA not before: Mon 19 Dec 2022 10:49:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14445
IP address blocks: 163.5.174.0/24 maxlen: 24
163.5.185.0/24 maxlen: 24
163.5.171.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2a:00:fd:50:b7:e0:8d:5e:e0:7a:05:21:a2:4e:d0:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Dec 19 10:49:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e6556e0643d86a5bd9eff431e800b39db40930d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ad:01:cc:cb:22:d6:d7:28:74:a7:f4:05:4b:
db:c6:a3:82:e2:00:53:cd:8e:c1:fd:31:6d:82:71:
11:59:87:61:4c:74:5d:83:28:63:b7:b2:38:3d:7f:
fb:e3:92:78:9f:bb:c1:85:2c:1b:db:d3:d5:12:25:
6b:b5:d3:f5:e5:67:4b:82:e6:43:40:f0:98:41:2a:
53:df:7b:b4:59:10:71:68:36:1e:91:bd:ad:6f:df:
ed:b5:e1:c6:5a:2f:a9:a3:4a:4c:6b:81:cb:23:9f:
59:aa:29:23:0f:2d:f5:72:d9:cf:e6:76:df:81:4b:
dd:ff:ca:f5:85:df:31:1a:e5:11:ac:e6:a3:14:14:
89:b9:bf:c5:a9:af:ad:fe:48:c1:88:ca:3d:87:c4:
13:f6:0f:cb:60:79:54:2d:de:c8:bc:a5:60:2d:3e:
59:c6:e3:98:58:e0:9c:e9:d5:8f:a7:1d:b2:44:28:
67:aa:6e:fc:13:e0:48:3e:51:e2:c9:6a:27:c2:9b:
1a:0f:67:28:cc:73:5e:e9:62:da:55:6e:92:88:25:
e6:95:8a:99:8d:19:2f:34:94:4e:51:b4:4d:71:08:
46:44:28:4e:77:6f:14:8f:5d:a3:e8:34:1f:fb:ba:
71:06:cb:1f:17:6a:81:65:80:30:23:78:71:78:57:
e3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:55:6E:06:43:D8:6A:5B:D9:EF:F4:31:E8:00:B3:9D:B4:09:30:D3
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/5lVuBkPYalvZ7_Qx6ACznbQJMNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.171.0-163.5.172.255
163.5.174.0/24
163.5.185.0/24
Signature Algorithm: sha256WithRSAEncryption
72:ce:bf:b3:33:d8:2e:ce:01:29:b9:00:53:89:ca:f3:26:b6:
1f:c5:89:cb:33:9a:45:9f:b6:9e:b0:04:ec:f0:f8:da:2c:11:
ec:bb:f8:13:54:f8:5a:e6:70:2c:cc:f7:66:6b:eb:b8:f5:9d:
37:88:77:3c:e5:12:68:7d:5a:6c:9c:ce:f1:dc:82:0c:e9:a3:
ab:0a:68:4d:2c:40:32:f5:3c:19:1c:af:c1:35:b4:4e:10:bd:
4d:7a:d6:66:f3:1f:34:1a:ac:77:d6:a9:05:b3:ec:fd:99:2d:
f3:0d:28:2a:6d:c3:4b:44:60:3d:b6:d1:1a:f3:f9:93:7d:54:
1d:3f:01:4e:c5:dd:a4:31:09:7c:00:06:05:c4:a6:06:9e:10:
95:17:b3:d8:af:e8:a5:fe:2d:f8:85:82:bc:87:95:e8:f5:ab:
02:42:3d:d0:c2:31:b7:86:2c:07:34:2f:4a:32:72:ab:0f:a3:
75:6d:25:a5:20:d0:76:cb:6b:58:8a:3e:40:24:9c:b8:9e:58:
b6:f0:76:37:78:d0:1b:f3:b6:6a:f3:a0:97:37:fc:9e:bd:7c:
4c:e7:d8:ea:b1:40:3f:7d:0f:fc:45:04:24:0c:4b:a9:10:0e:
d8:b3:31:d5:66:6c:4b:4c:c8:73:21:5c:90:c4:10:d5:51:12:
4f:ca:96:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:19 2023 by rpki-client on console-fra.rpki-client.org