Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/9HHyl3eFgOvedRpW_-G2pryEXtY.roa
File: 9HHyl3eFgOvedRpW_-G2pryEXtY.roa (raw, json)
Hash identifier: Qw/Nnv8ZnGkv0uIGrGw359uB5ch6+ihw0VB9KQHHONc=
Subject key identifier: F4:71:F2:97:77:85:80:EB:DE:75:1A:56:FF:E1:B6:A6:BC:84:5E:D6
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0181E78293F71EB38AB57B3CDADC3432A1C4
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/9HHyl3eFgOvedRpW_-G2pryEXtY.roa
Signing time: Sun 10 Jul 2022 09:48:23 +0000
ROA not before: Sun 10 Jul 2022 09:48:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 163.5.148.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:e7:82:93:f7:1e:b3:8a:b5:7b:3c:da:dc:34:32:a1:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 10 09:48:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f471f297778580ebde751a56ffe1b6a6bc845ed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e5:d0:d5:3a:58:da:44:3d:65:e8:b0:36:4e:
bc:3d:87:29:e6:15:6e:bc:2c:ef:01:8c:86:0c:f2:
03:99:ae:9c:a1:cc:69:99:65:c8:cc:55:20:ed:44:
44:a1:4e:85:18:fc:e7:42:89:ee:6d:e7:14:a3:72:
b0:a1:26:9a:01:d1:15:51:73:74:6f:ee:0d:73:21:
f5:6b:c4:29:dd:f7:75:b5:61:8d:e4:a5:aa:1a:b8:
b0:22:d4:58:e5:cb:11:96:03:c0:11:b7:7a:59:e8:
b6:ef:fa:8c:c7:78:c7:14:c2:6a:05:21:48:10:9e:
cc:5f:c6:db:1a:9a:c5:4d:80:64:03:26:24:be:e4:
42:35:61:60:8b:e2:57:b8:a5:2d:ae:7e:a3:29:91:
c6:05:4d:d3:26:3a:b1:5a:12:ec:4b:55:49:10:c4:
e1:f7:4b:30:e5:bf:af:f9:6c:1d:ba:12:75:e1:93:
cd:02:36:aa:14:e7:9a:3d:be:6a:e5:d4:34:82:08:
46:d9:28:89:b4:43:b8:f5:66:12:b8:ee:7a:28:b8:
a5:41:11:58:81:d2:53:b8:51:f6:5b:ba:ea:90:1b:
b3:2e:b2:7b:16:39:05:77:d0:d0:49:3a:68:c3:fd:
bf:16:20:0b:e4:e3:bc:e0:aa:60:40:e0:9a:e5:c3:
57:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:71:F2:97:77:85:80:EB:DE:75:1A:56:FF:E1:B6:A6:BC:84:5E:D6
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/9HHyl3eFgOvedRpW_-G2pryEXtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.148.0/24
Signature Algorithm: sha256WithRSAEncryption
03:0d:84:18:92:a0:74:17:d2:d5:a5:1f:e9:c4:29:7c:82:97:
77:d8:d7:45:f4:d7:fe:70:1d:76:3d:1f:57:d9:6e:fa:7d:a9:
74:eb:c6:06:7c:c3:32:ff:24:41:52:8e:e1:47:01:69:33:92:
f4:82:e6:e1:8f:13:85:2a:fc:49:fb:b5:f2:5a:5e:6d:5e:02:
e7:55:3c:4a:27:13:d9:84:a5:6c:c4:5a:94:b7:3f:c4:e5:b7:
ba:36:8b:be:2a:0b:ce:d2:c7:8f:fb:76:62:bb:6c:5d:a0:20:
e0:49:7a:c5:c7:43:a6:36:eb:02:42:03:0b:93:3b:f6:89:9d:
98:6d:1f:9e:3f:19:0a:93:10:8e:64:7b:6a:78:97:0d:2c:31:
06:74:c8:35:77:d9:83:2c:34:46:11:23:cd:40:4c:5b:4a:a9:
a1:89:44:d2:c8:ea:46:ef:49:a9:a7:ff:e2:1a:7d:56:c1:eb:
9d:6e:f8:3e:fe:19:45:fe:99:c1:39:ef:be:09:d7:c7:78:5d:
01:f3:cc:9b:a3:ed:7b:1f:95:59:ec:20:88:0e:bd:4e:5c:9d:
35:24:82:7a:86:89:fd:dd:4f:b6:45:93:e4:43:05:14:09:e5:
b5:d0:98:5e:ff:76:e9:82:b5:39:b4:e3:54:5a:43:5f:71:f8:
c4:2d:32:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:08 2023 by rpki-client on console-ams.rpki-client.org