Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/9lXkM7w5fLa124Miu-HxNNXgObw.roa
File: 9lXkM7w5fLa124Miu-HxNNXgObw.roa (raw, json)
Hash identifier: xhOYfkIHE4gnXO8kJY9tK51xGxaAcC4bku42lto9Nn0=
Subject key identifier: F6:55:E4:33:BC:39:7C:B6:B5:DB:83:22:BB:E1:F1:34:D5:E0:39:BC
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018525107BD3E9A02E570F00623D1774026A
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/9lXkM7w5fLa124Miu-HxNNXgObw.roa
Signing time: Sun 18 Dec 2022 11:48:35 +0000
ROA not before: Sun 18 Dec 2022 11:48:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 63023
IP address blocks: 163.5.79.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.220.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:25:10:7b:d3:e9:a0:2e:57:0f:00:62:3d:17:74:02:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Dec 18 11:48:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f655e433bc397cb6b5db8322bbe1f134d5e039bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:2f:55:7f:41:62:48:11:e1:a0:65:be:5e:63:
69:dd:68:3e:f3:3c:45:97:85:33:12:5a:7f:cc:81:
19:37:48:8e:67:2c:ec:54:cd:16:e5:81:be:63:a6:
31:5e:08:1e:2f:cd:9b:88:e1:3b:a1:e5:c8:3e:e7:
f4:dc:eb:53:ca:01:c4:37:28:74:c4:6f:85:24:94:
fb:9d:1b:3f:8f:02:f6:e5:60:60:3b:5a:45:c3:1d:
44:74:bc:ff:0e:bc:de:26:39:bf:c0:f3:99:1f:f7:
7b:7b:3b:a2:02:c7:1a:af:6c:f9:28:0e:f3:5a:2f:
60:71:0f:b5:a0:8e:cb:47:b7:fd:b8:54:55:c7:9c:
1f:f4:b0:cc:7b:8f:63:e5:96:9a:14:9b:a8:53:e0:
b9:1b:55:cc:6b:0e:c0:44:84:2d:db:f0:1b:dd:bd:
95:41:7c:3f:12:64:c6:3a:80:d0:fa:5f:e2:70:d6:
37:d3:4d:ee:10:f9:75:13:22:be:1a:06:15:5c:99:
33:e8:8c:8b:90:2b:c8:3e:a1:74:e8:49:3d:71:42:
4a:c0:a3:03:1d:1e:43:dd:99:bd:be:c2:ca:a9:ba:
f0:5b:c5:6c:e1:98:a4:c9:b1:4d:64:ad:8e:11:15:
d3:a6:3c:43:96:21:72:a5:a8:e6:32:68:a0:91:32:
b9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:55:E4:33:BC:39:7C:B6:B5:DB:83:22:BB:E1:F1:34:D5:E0:39:BC
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/9lXkM7w5fLa124Miu-HxNNXgObw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.79.0/24
163.5.112.0/24
163.5.134.0/24
163.5.220.0/24
163.5.223.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:ce:4e:75:ad:ef:04:61:17:77:e7:7c:a9:2b:5f:b2:ad:f0:
38:60:25:57:56:2c:e9:af:ae:2b:c0:25:bd:da:c9:aa:1c:c5:
a7:6e:c9:a0:fc:9a:4f:a4:49:e3:d8:fa:61:c4:b0:71:12:6e:
1c:e8:c4:0e:73:78:a5:cd:94:9c:9b:a7:c4:43:95:1d:fc:b6:
24:a5:42:39:04:8b:e3:de:96:b5:0c:09:04:94:68:4c:88:f6:
64:c2:f3:f5:eb:b5:04:fb:1c:c2:6c:ee:00:0d:33:0e:eb:9a:
d3:c3:36:4e:8e:eb:68:58:7d:a5:fd:59:80:c3:f0:69:95:6a:
73:71:c5:c9:e6:f0:25:2c:80:57:cc:10:4a:96:ac:43:17:b7:
35:c6:85:ad:e8:1a:87:c4:f9:a3:4d:a6:91:62:c1:99:fa:08:
a5:f8:51:72:73:9f:02:1b:4c:32:39:92:ef:21:15:29:d6:2e:
8b:19:b5:c6:93:d4:01:06:46:f2:72:e0:15:6f:1c:b4:67:ff:
13:d8:3c:04:06:2c:bc:09:df:fb:b7:c6:64:65:2f:53:db:69:
8b:26:32:50:b3:91:1c:9a:09:c6:f5:00:3c:29:2e:f6:7f:29:
1c:12:dc:8f:89:dd:1b:62:3d:e5:60:f1:69:cc:35:fd:6b:d3:
28:cc:82:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:19 2023 by rpki-client on console-fra.rpki-client.org