Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/9TiBb-M-V41cIFq6eLncNsrHLYA.roa
File: 9TiBb-M-V41cIFq6eLncNsrHLYA.roa (raw, json)
Hash identifier: nsRuclLaU9imr4qMP3s9as/n8GxnbIrhH18VYjZsOAs=
Subject key identifier: F5:38:81:6F:E3:3E:57:8D:5C:20:5A:BA:78:B9:DC:36:CA:C7:2D:80
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0183226C93191689E8F13DD9DFABAFB90602
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/9TiBb-M-V41cIFq6eLncNsrHLYA.roa
Signing time: Fri 09 Sep 2022 13:24:44 +0000
ROA not before: Fri 09 Sep 2022 13:24:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210439
IP address blocks: 163.5.219.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.233.0/24 maxlen: 24
163.5.251.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:22:6c:93:19:16:89:e8:f1:3d:d9:df:ab:af:b9:06:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 9 13:24:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f538816fe33e578d5c205aba78b9dc36cac72d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:87:89:fc:a4:b9:83:b8:4a:e9:ef:bf:53:86:
ab:f7:92:e9:0b:2e:d9:9d:6c:4a:ad:21:65:eb:da:
2f:ab:64:83:9e:b4:77:e5:77:3f:d6:98:78:54:79:
af:9d:50:54:18:b1:3b:fe:0c:55:fd:38:4a:ec:89:
c4:ac:35:45:22:b2:d3:f2:10:44:4c:3a:2c:33:3b:
eb:56:19:8e:d2:06:b4:52:70:fd:b2:95:40:2b:76:
45:46:56:d1:67:83:69:b5:5a:cc:3b:04:0e:a1:66:
d7:88:1d:f4:72:5e:a6:0e:75:91:0c:80:f5:42:2e:
6b:62:70:58:8d:7b:2c:88:25:4f:9f:e8:ee:5a:36:
c6:e8:e2:b4:36:b3:42:b2:96:1f:ad:ae:c0:66:b3:
7b:d3:75:19:c3:b9:12:81:70:d0:66:5d:34:af:c4:
3d:ba:13:72:a0:14:0f:1e:5e:c2:65:50:b8:fe:b5:
ac:9a:bd:e3:b0:ca:12:ff:80:48:39:cd:1e:67:2a:
b2:44:87:d4:de:39:81:9e:71:b9:49:d6:7a:38:4e:
f9:6f:fe:c1:15:60:5d:ec:3d:59:b6:88:d7:97:1f:
da:48:95:f6:7d:f4:5c:73:6a:d7:ca:14:47:44:a4:
60:9d:be:87:8e:00:06:12:e0:dd:da:8c:c7:24:bc:
fa:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:38:81:6F:E3:3E:57:8D:5C:20:5A:BA:78:B9:DC:36:CA:C7:2D:80
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/9TiBb-M-V41cIFq6eLncNsrHLYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.219.0/24
163.5.224.0/24
163.5.233.0/24
163.5.251.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:8b:3d:d2:ac:3e:59:4d:13:9b:e6:35:24:f7:19:aa:c4:15:
94:8d:d2:24:a4:e0:05:67:b8:6f:f3:f7:46:c7:2d:0c:ba:0d:
97:b4:63:06:27:b6:fb:7d:7c:c5:60:92:3f:4b:11:43:83:c9:
fe:53:2a:00:5f:e4:77:f0:ac:df:43:ce:8e:a2:f0:b0:b0:1a:
03:c2:0a:45:9c:f0:12:a0:cd:1c:23:26:25:de:f7:d8:58:e5:
ef:0a:f3:71:4c:7a:b2:ca:5a:ed:dd:c5:d2:fd:d1:05:01:3d:
30:c8:33:a1:92:da:b4:2d:63:50:e6:bc:8e:be:26:c5:4a:26:
64:6d:b1:ac:d8:f0:ed:33:7b:4d:56:7b:b5:b7:a3:b7:e1:a9:
28:a9:bc:f6:d2:36:a2:fb:d4:4c:d4:1b:36:17:9c:ca:5f:46:
59:6c:5d:8d:77:59:71:03:37:4c:02:72:30:94:57:66:bd:2e:
40:1d:1b:c8:17:94:a0:47:12:24:f2:20:f5:e7:b5:9f:bf:69:
91:98:54:a9:12:49:e3:5c:bb:f4:d1:9c:ae:27:8d:ec:08:9f:
19:3b:31:67:39:f7:38:a8:66:61:2a:92:bf:07:e1:1d:2f:54:
a2:38:0c:3d:2f:ef:a5:72:03:bc:96:99:ab:47:fc:20:a0:da:
fe:64:92:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:08 2023 by rpki-client on console-ams.rpki-client.org