Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/AZod_KASE_rKsMEK_sM_yPobDHs.roa
File: AZod_KASE_rKsMEK_sM_yPobDHs.roa (raw, json)
Hash identifier: fTgUPbAUtnGD/Gzb2t+DrDenCzUdvZeR3spm/PDX8Bg=
Subject key identifier: 01:9A:1D:FC:A0:12:13:FA:CA:B0:C1:0A:FE:C3:3F:C8:FA:1B:0C:7B
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018330CFBBAA701E8D290A0566BD8EFF4CD3
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/AZod_KASE_rKsMEK_sM_yPobDHs.roa
Signing time: Mon 12 Sep 2022 08:27:43 +0000
ROA not before: Mon 12 Sep 2022 08:27:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 163.5.190.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:30:cf:bb:aa:70:1e:8d:29:0a:05:66:bd:8e:ff:4c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 12 08:27:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=019a1dfca01213facab0c10afec33fc8fa1b0c7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5c:61:b8:a1:30:8c:1c:e1:b9:b1:c7:c9:d0:
ff:cc:2e:0d:36:6d:72:72:67:9e:d9:13:dc:f9:96:
41:1f:12:bc:d9:47:a4:35:6e:87:c4:55:8f:f6:99:
7a:7a:33:1e:26:45:ca:00:07:25:57:fc:a8:24:92:
55:10:aa:af:7d:b3:22:4f:fe:1d:1c:42:1f:1a:74:
65:e0:a2:1f:aa:89:ff:6e:ee:13:16:23:37:ce:e9:
ce:22:cc:5b:f7:e0:9c:8d:b2:dc:cc:04:8c:b7:4f:
6d:4e:17:7d:6b:b5:24:1f:b5:f8:2a:df:4f:98:cf:
ea:c7:7f:02:da:64:43:46:58:86:b2:34:d2:9c:e8:
a3:29:c1:07:68:d0:fe:d8:16:f1:b1:09:03:df:4a:
dd:34:48:92:ca:f6:50:af:fe:aa:2e:b1:6a:99:7c:
23:14:25:4d:98:33:ec:21:6b:93:79:cc:36:87:a7:
de:6c:f7:64:7f:9c:f3:de:18:51:a4:fb:17:9e:d3:
55:81:46:0d:e3:22:3c:1f:46:23:89:07:1a:ff:b7:
44:38:60:ba:ec:93:a8:8e:a3:35:e2:5c:0a:a1:fe:
33:d6:ee:44:df:dc:46:13:c6:ab:14:ff:17:23:17:
1b:80:b4:ba:e0:34:0f:43:34:61:c9:e4:f9:38:3b:
e0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:9A:1D:FC:A0:12:13:FA:CA:B0:C1:0A:FE:C3:3F:C8:FA:1B:0C:7B
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/AZod_KASE_rKsMEK_sM_yPobDHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.190.0/24
163.5.252.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:61:b8:ed:a1:2c:23:b9:1e:bf:47:c4:4e:cb:9a:33:05:9f:
40:7d:5b:0f:27:ad:65:cf:73:1b:80:ab:a9:04:41:09:02:b5:
30:3c:5d:14:66:7a:2a:6b:8b:bb:e1:16:15:0c:88:3a:a3:90:
d2:bc:d6:2f:35:1c:32:4a:45:fe:3d:56:58:b8:ba:75:6e:43:
00:05:a2:e2:80:83:68:0d:17:df:7d:0f:67:e1:9e:1c:a7:46:
d4:a6:c5:d3:28:e7:db:00:14:f3:4f:74:cd:c3:ff:46:b5:0e:
71:7d:74:9d:61:9c:5b:5c:7c:9e:ba:1f:3d:82:69:39:3e:8d:
ea:a1:e0:ed:8f:1b:0d:59:b5:36:fb:9e:47:78:5e:d2:d7:51:
7d:87:6c:57:1a:04:99:c0:25:ce:2d:b1:0b:a5:43:94:1b:53:
2c:8f:e4:9f:ce:65:e8:d8:4d:14:69:f7:55:92:bc:11:e1:17:
08:a8:2f:b4:db:7d:61:f6:6d:5c:3e:ca:7e:c4:8b:31:92:70:
30:0e:74:05:07:93:34:9f:81:87:59:90:0f:11:0f:48:5c:7c:
28:dc:8d:9f:75:ce:e2:71:6e:c1:79:5b:25:63:0a:51:32:3d:
51:40:d9:7a:e0:54:08:ef:8e:fc:34:06:3b:1a:02:31:87:85:
58:5f:97:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:20 2023 by rpki-client on console-fra.rpki-client.org