Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/7gOeDWvLuEQqEiupD6UHar4eGXU.roa
File: 7gOeDWvLuEQqEiupD6UHar4eGXU.roa (raw, json)
Hash identifier: Uikd+dnIo18B7dGFEiP5lNxJVHDc9kn+QbaIqy88CmM=
Subject key identifier: EE:03:9E:0D:6B:CB:B8:44:2A:12:2B:A9:0F:A5:07:6A:BE:1E:19:75
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0183D0F6C500249E2EDFAA691B412A96280B
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/7gOeDWvLuEQqEiupD6UHar4eGXU.roa
Signing time: Thu 13 Oct 2022 10:49:36 +0000
ROA not before: Thu 13 Oct 2022 10:49:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212238
IP address blocks: 163.5.70.0/24 maxlen: 24
163.5.78.0/24 maxlen: 24
163.5.77.0/24 maxlen: 24
163.5.72.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d0:f6:c5:00:24:9e:2e:df:aa:69:1b:41:2a:96:28:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 13 10:49:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ee039e0d6bcbb8442a122ba90fa5076abe1e1975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:2a:4d:5b:2a:6b:c2:82:4f:6e:45:93:28:13:
5c:39:e8:e2:2c:b6:2a:03:43:5d:3d:2d:0d:89:80:
c0:49:5a:71:90:57:f8:16:05:d9:67:93:bd:c5:1b:
cd:e8:3a:6b:05:f6:35:a7:13:a6:44:88:f4:52:d2:
aa:c1:95:c7:22:13:5e:1e:2a:7e:eb:a0:3f:65:e4:
cc:c9:6c:dc:79:31:4e:2a:9f:ab:ed:92:10:18:b9:
cc:67:5f:9b:61:fa:db:4e:31:8f:cc:3d:01:0d:ac:
40:f2:e6:26:3a:63:88:44:67:7a:de:22:78:0b:35:
7a:bf:48:7f:f5:09:b9:44:98:7c:f5:0c:4f:ad:da:
0b:c8:35:0e:42:20:da:d4:af:3a:fa:19:9e:9d:0a:
34:7d:b9:62:b6:68:08:ac:4d:64:c7:9b:43:88:7f:
2c:5f:6e:4d:dc:6a:ae:3e:db:3c:83:90:9f:24:a3:
ee:5b:d2:ba:e9:60:ec:d6:00:75:3a:5e:f6:df:6b:
e4:18:13:70:31:bc:7a:b8:0a:2a:c2:b5:aa:d0:44:
f0:c8:ae:27:ad:6f:e4:dd:50:02:30:40:5b:8c:7e:
ec:99:07:01:30:96:85:dd:87:e4:d9:90:96:f6:9e:
16:fc:4d:ee:e2:25:76:8a:89:57:60:36:b5:8e:ff:
cc:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:03:9E:0D:6B:CB:B8:44:2A:12:2B:A9:0F:A5:07:6A:BE:1E:19:75
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/7gOeDWvLuEQqEiupD6UHar4eGXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.36.0/24
163.5.70.0/24
163.5.72.0/24
163.5.77.0-163.5.78.255
Signature Algorithm: sha256WithRSAEncryption
8d:09:a1:71:bc:c7:af:5f:2d:d9:07:92:85:bc:47:ce:ea:0e:
cc:e9:cb:61:08:94:a1:1a:9e:36:73:6b:c6:85:1c:9e:a6:40:
0c:37:9d:fe:7d:29:74:a3:45:7f:dc:16:55:73:a3:ad:78:fa:
40:b5:d0:74:cd:bc:28:f4:96:ea:a8:72:ec:c3:f0:8b:49:47:
cc:b9:f0:1d:fb:cb:d7:5e:df:d6:15:3a:47:47:9f:9e:f0:bc:
19:35:a0:07:ad:c3:08:ea:16:07:da:41:86:40:0a:5f:c6:d8:
27:08:b1:7e:33:46:d8:a5:2b:ba:46:ba:3d:6a:75:79:d5:b4:
a3:4d:08:de:3b:33:a5:27:1a:44:6d:ab:78:64:59:4a:0f:5f:
08:38:e9:e3:89:5d:bb:c6:fc:58:4c:35:06:33:26:f4:4e:15:
dd:c8:60:9c:7b:b2:ec:10:1a:0f:aa:24:e8:48:3c:de:e4:d3:
d6:f3:6e:8e:db:f1:54:8b:96:71:19:2d:2f:25:71:ba:9e:b5:
56:93:60:44:51:a3:61:45:39:22:a5:63:15:9f:8e:f4:91:cc:
b5:cf:23:15:bb:e6:d6:19:56:6b:06:85:99:88:47:84:99:af:
5a:46:78:cf:4d:03:14:0a:83:a5:ca:76:fe:a9:5e:b4:93:2b:
0a:1b:27:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:19 2023 by rpki-client on console-fra.rpki-client.org