Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/9rn-_RFarRf_ZgW6c974B14nS4U.roa
File: 9rn-_RFarRf_ZgW6c974B14nS4U.roa (raw, json)
Hash identifier: i5RrD3OPJTk379Sr9mPX5sH14uy+BGls3n3O/j/uKXI=
Subject key identifier: F6:B9:FE:FD:11:5A:AD:17:FF:66:05:BA:73:DE:F8:07:5E:27:4B:85
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0183C7FCCE2154DB5BB9EF2D35C658650D75
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/9rn-_RFarRf_ZgW6c974B14nS4U.roa
Signing time: Tue 11 Oct 2022 16:59:37 +0000
ROA not before: Tue 11 Oct 2022 16:59:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 163.5.217.0/24 maxlen: 24
163.5.147.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c7:fc:ce:21:54:db:5b:b9:ef:2d:35:c6:58:65:0d:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 11 16:59:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f6b9fefd115aad17ff6605ba73def8075e274b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4c:34:53:8f:bd:92:25:fb:f9:f6:af:9c:60:
8e:0c:75:4a:47:45:a8:4e:90:4d:82:92:be:c4:7b:
3f:7d:fa:14:f3:9f:05:97:60:62:fa:03:d5:20:69:
20:89:20:5f:54:0b:c7:41:fa:8b:18:c3:42:4f:3f:
6f:2a:1a:6e:0b:42:bf:79:c6:dc:49:20:ed:9f:51:
8e:2f:ad:6a:0c:2c:2e:20:a2:42:5d:24:4f:51:5f:
b3:2c:89:53:e3:9e:36:3e:ae:27:af:4c:b6:59:c5:
65:32:b8:9a:81:fe:a5:7c:04:54:2b:80:b7:b1:30:
f4:18:4d:5f:8e:45:52:2e:3b:3a:b5:61:cc:0b:d9:
9a:19:4d:9e:3c:2c:36:0b:23:af:06:8d:91:ff:50:
41:b8:a3:44:29:02:0a:a7:b1:a3:d1:ee:6d:b6:6c:
e2:b4:9e:9d:8c:b4:45:7b:bb:99:91:39:9b:db:9e:
f7:93:53:ad:55:fb:e5:ec:e0:f3:be:69:48:7f:d7:
a9:ed:80:dc:10:aa:27:0b:55:c8:38:69:44:15:56:
ab:23:df:82:98:10:9c:10:68:77:31:79:3c:dc:c0:
66:90:93:93:63:50:ae:17:13:d4:d3:2c:c2:b8:59:
c3:d2:e5:89:f2:58:83:ee:59:5a:39:ef:ce:24:47:
a5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B9:FE:FD:11:5A:AD:17:FF:66:05:BA:73:DE:F8:07:5E:27:4B:85
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/9rn-_RFarRf_ZgW6c974B14nS4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.147.0/24
163.5.217.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:81:da:f0:99:90:80:75:0e:97:2f:34:64:dc:11:75:5a:e6:
33:3c:a7:90:c4:08:05:ef:72:cf:f9:25:35:cb:86:c2:e8:8b:
c8:c4:2d:ef:d5:18:03:0c:ac:04:78:74:64:1a:9b:6d:20:d3:
b0:83:94:24:62:de:70:92:f9:cf:68:63:27:3c:17:bd:fb:0c:
7e:eb:15:44:7a:26:73:a0:cf:ef:32:d3:2d:ed:28:e8:30:ca:
87:09:b2:60:c3:af:d4:2b:69:81:7b:8e:f5:53:16:5e:7e:a8:
43:08:42:de:3b:58:49:1f:8a:8f:ad:ff:81:70:c0:54:37:4e:
13:3d:62:49:34:6a:b1:9f:ef:b4:48:5e:9c:78:c8:6e:de:2e:
b8:54:3b:82:9f:fb:84:d8:8d:de:f1:8a:37:8b:d0:36:4e:8d:
f2:83:a1:21:d6:fc:7a:5b:9c:9c:e6:25:20:6b:fe:71:bf:2e:
9b:c0:7c:d8:9d:c5:01:e9:a9:66:43:c1:4c:ad:c5:6a:c7:78:
fc:07:8c:4e:dd:5c:74:45:9b:5f:d7:a2:be:c2:1d:f9:80:30:
06:5d:c2:42:73:fd:be:88:2a:1b:f9:23:c5:a1:69:03:4d:f0:
16:eb:6c:d6:d5:de:89:14:12:8b:8e:16:73:53:2a:54:f5:40:
08:69:c2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:08 2023 by rpki-client on console-ams.rpki-client.org