Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/BIXAz-HfaE8Jt2boNb2dUuy5tBs.roa
File: BIXAz-HfaE8Jt2boNb2dUuy5tBs.roa (raw, json)
Hash identifier: PpXYhQOkKkPrTXK9Qc4Bf+9EFblwiR4+axd+wgDWDpE=
Subject key identifier: 04:85:C0:CF:E1:DF:68:4F:09:B7:66:E8:35:BD:9D:52:EC:B9:B4:1B
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018335EB3563646AE8DDBE93D160FCEF81FD
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/BIXAz-HfaE8Jt2boNb2dUuy5tBs.roa
Signing time: Tue 13 Sep 2022 08:15:50 +0000
ROA not before: Tue 13 Sep 2022 08:15:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204372
IP address blocks: 163.5.230.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:35:eb:35:63:64:6a:e8:dd:be:93:d1:60:fc:ef:81:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 13 08:15:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0485c0cfe1df684f09b766e835bd9d52ecb9b41b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f0:06:86:3a:b4:33:ee:d2:cb:8a:a6:44:cc:
4f:00:fc:d9:4c:9f:38:c7:54:19:4a:6d:04:ce:f2:
71:d1:e5:73:23:25:35:2d:f4:85:05:67:f2:98:f8:
18:9e:de:93:b7:54:2a:b5:6d:3a:92:9c:1e:23:db:
71:0d:c0:74:a8:c6:14:be:44:a0:19:de:87:ba:a8:
3e:8a:1a:b0:e0:49:80:95:55:0d:7b:ce:c0:a7:0f:
7c:53:90:51:17:ea:de:bd:ee:9a:48:bf:09:39:3e:
49:68:c9:6f:cf:f9:31:8a:b7:a8:3a:b6:94:27:87:
fe:81:14:a6:9f:06:75:69:4f:85:02:e1:33:c1:3f:
a3:39:e9:9c:cf:69:b7:6d:d5:b6:e1:e9:1e:e5:19:
d7:38:40:c0:13:0b:59:e8:c5:91:6d:c4:a8:ca:52:
f0:9b:ba:f0:88:fb:34:b6:35:b0:bd:17:9b:ab:36:
64:2b:1b:22:0a:d5:93:78:60:06:1f:45:92:ec:d4:
0f:ba:ac:ec:84:79:28:ad:48:0f:ef:38:5c:f0:a1:
b2:d7:3f:03:02:bb:65:57:cb:aa:db:bd:06:11:53:
fc:d4:be:2c:75:33:80:c5:e1:dd:56:69:03:62:43:
20:cd:a8:f8:53:20:5c:5b:e2:a6:17:89:7e:48:54:
22:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:85:C0:CF:E1:DF:68:4F:09:B7:66:E8:35:BD:9D:52:EC:B9:B4:1B
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/BIXAz-HfaE8Jt2boNb2dUuy5tBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.161.0/24
163.5.230.0/24
163.5.248.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:21:58:e1:67:1e:7a:e2:18:f9:90:3e:62:6d:35:1d:63:0f:
62:3b:9c:95:9a:a0:ef:6c:e8:7a:c3:6f:ec:b7:0e:41:39:10:
b5:64:a0:41:fa:98:ef:7d:82:82:d2:a1:81:d5:11:64:62:eb:
d8:7d:7b:d0:4f:2b:05:79:40:f6:e7:3e:d0:97:ff:5d:e2:c6:
b7:7e:4b:18:30:b9:11:f6:52:fc:ca:ac:21:f7:dc:16:f4:e8:
0f:2b:60:29:16:3a:00:5e:8b:22:2d:e9:fd:1d:92:86:5a:08:
15:cc:fb:2c:f4:ad:fd:3e:31:1a:d3:f0:4b:a6:3c:e2:04:1c:
dc:cd:c4:d2:4a:33:82:db:07:da:c0:7f:1e:e3:c3:a6:d1:17:
0c:ea:d3:c8:b9:f8:b6:b5:91:87:45:ee:70:ce:15:3b:89:6a:
e3:fb:01:4d:ad:d0:db:7a:e8:7d:07:fa:d6:65:4b:44:95:49:
07:e9:0d:da:30:a3:c8:1b:54:16:50:51:2c:e6:14:3b:1a:30:
c1:e8:7d:c1:7a:79:3f:83:62:49:2c:96:5b:36:2d:55:c1:8a:
5d:6a:ab:07:36:a4:5d:d7:66:9d:0d:8f:80:87:d7:3d:d1:0e:
ad:38:02:bb:5c:4f:38:42:48:a2:ed:3d:6d:cc:66:dc:7e:5b:
2e:47:51:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:20 2023 by rpki-client on console-fra.rpki-client.org