Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/BdWV6OTCex9G-aqxa1ql41YhKMM.roa
File: BdWV6OTCex9G-aqxa1ql41YhKMM.roa (raw, json)
Hash identifier: Ke1tNEX+HKVYvddPOg5Es1fmo5NORMDOrZenF7mCjQo=
Subject key identifier: 05:D5:95:E8:E4:C2:7B:1F:46:F9:AA:B1:6B:5A:A5:E3:56:21:28:C3
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01830D1E550306F1893EB99A928DE4DDD893
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/BdWV6OTCex9G-aqxa1ql41YhKMM.roa
Signing time: Mon 05 Sep 2022 10:07:15 +0000
ROA not before: Mon 05 Sep 2022 10:07:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 163.5.127.0/24 maxlen: 24
163.5.132.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.133.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:0d:1e:55:03:06:f1:89:3e:b9:9a:92:8d:e4:dd:d8:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 5 10:07:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=05d595e8e4c27b1f46f9aab16b5aa5e3562128c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:d1:88:7f:66:f2:5d:b3:81:dd:89:83:fd:44:
ab:d9:e3:a4:81:f0:a5:8c:bc:0a:33:48:77:2d:04:
37:20:0c:f4:9c:3a:76:67:e0:03:02:e6:74:63:34:
30:b0:60:06:70:54:11:ba:6d:d6:6a:bb:b6:1e:f9:
c8:c2:0b:17:cc:22:37:f1:71:26:76:84:9c:53:66:
6b:32:a6:3c:b7:26:44:c4:48:15:af:47:97:76:44:
51:97:89:b5:37:94:5e:d3:95:5f:f2:4d:4d:69:b5:
1f:44:f0:4f:7c:1b:1a:7b:97:ce:4e:1c:88:24:b2:
6a:8c:40:b9:51:eb:64:15:bf:bb:7b:ff:af:88:bb:
0f:cf:e1:43:b9:30:f3:72:ce:16:34:9b:91:ef:73:
15:45:8f:f6:79:b5:6a:b8:44:c2:d0:1c:0b:bb:ef:
fd:81:9e:d4:fb:fa:a6:68:50:a5:b2:69:73:ea:37:
80:7b:71:b7:8c:fb:fb:d5:ea:93:11:5f:1d:8c:c6:
7b:a1:a3:05:d2:95:98:ff:5e:aa:cf:79:46:0e:41:
71:a8:d0:70:c4:09:8c:56:d9:10:07:01:7f:6f:c5:
35:36:a8:95:19:da:0e:9f:9a:35:9f:1c:61:e3:17:
8d:c0:fd:2e:bc:26:c7:6b:1c:84:f9:32:46:00:b2:
61:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D5:95:E8:E4:C2:7B:1F:46:F9:AA:B1:6B:5A:A5:E3:56:21:28:C3
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/BdWV6OTCex9G-aqxa1ql41YhKMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.127.0/24
163.5.132.0/23
163.5.143.0/24
163.5.241.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:86:52:75:91:76:38:10:37:cc:ad:eb:0a:ff:2e:cb:04:c0:
48:0d:17:94:f3:f5:6b:7d:3e:4c:40:62:df:10:24:53:bb:73:
d5:f6:a7:c1:fa:0d:7a:38:eb:d6:99:db:18:f7:a3:5c:00:c4:
f1:ff:e1:13:74:0c:6a:74:7b:05:5d:78:a1:8c:7b:03:81:10:
40:b6:a0:38:3f:06:e5:c9:ae:c5:9f:8a:82:64:34:4a:0d:bb:
12:4b:51:7f:3a:04:df:74:8e:cf:88:f6:e4:f7:25:62:a5:1c:
43:8a:5b:97:39:33:3f:8e:bf:17:cd:d4:39:e5:c0:ad:fa:27:
03:09:15:00:4b:ce:ca:9a:50:11:c8:6f:0b:b6:72:5c:42:ec:
62:39:f3:70:6c:d5:f0:aa:4e:e7:85:6f:3a:b4:13:f4:c5:02:
2c:d6:5b:8f:94:ab:aa:3d:cc:36:f0:58:07:e8:9e:9d:40:5a:
32:ba:ee:c7:32:ad:b1:6d:f3:b4:df:67:2f:09:f5:74:59:7e:
b4:4c:79:4b:32:1f:f6:3a:1f:08:21:bc:9d:4a:62:85:82:ec:
de:cc:b9:79:9f:b9:b2:53:a3:be:bc:23:43:31:d2:68:6a:04:
1e:4b:4d:0e:0d:38:52:e3:24:9c:39:47:c7:41:39:34:f9:11:
a6:44:3c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:20 2023 by rpki-client on console-fra.rpki-client.org