Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/BtFbYbd3w2Mp_u65Hm1dEv1TyTo.roa
File: BtFbYbd3w2Mp_u65Hm1dEv1TyTo.roa (raw, json)
Hash identifier: beb0n4p8pJa0IjGwVzTqxagmEe5scl5jypDAxCoz1G0=
Subject key identifier: 06:D1:5B:61:B7:77:C3:63:29:FE:EE:B9:1E:6D:5D:12:FD:53:C9:3A
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01847A95BDFE893B7ABBA7FA6D12CED2B9E1
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/BtFbYbd3w2Mp_u65Hm1dEv1TyTo.roa
Signing time: Tue 15 Nov 2022 09:19:04 +0000
ROA not before: Tue 15 Nov 2022 09:19:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43043
IP address blocks: 163.5.107.0/24 maxlen: 24
163.5.137.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7a:95:bd:fe:89:3b:7a:bb:a7:fa:6d:12:ce:d2:b9:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Nov 15 09:19:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=06d15b61b777c36329feeeb91e6d5d12fd53c93a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:16:3d:f2:60:16:8f:4a:82:6f:11:ef:de:65:
2a:7c:37:f7:e5:3a:31:0c:8e:9d:70:92:db:a8:82:
44:fd:a6:7d:cf:53:83:2d:c8:6b:dc:1a:c1:32:ca:
ef:7c:8a:9a:01:ab:58:38:d1:7e:6a:de:8d:29:33:
cf:6d:e9:f9:43:98:29:e9:8a:c7:4c:8e:5b:ca:0b:
4b:7d:ed:3a:2a:f0:81:57:2f:c6:d1:b7:88:92:56:
de:82:e1:72:08:20:c2:14:8b:d3:a9:67:ab:5f:74:
3d:2f:3e:a7:16:19:c3:51:8f:f3:46:17:39:8b:39:
f5:fa:ff:10:a2:87:bd:6a:aa:93:3d:2d:58:34:7e:
6d:94:6c:de:e5:31:fd:2f:f8:7a:51:f7:2f:0a:cd:
d8:86:6f:55:7e:0e:a2:43:15:1d:4f:a1:21:bd:9b:
69:60:3b:77:3b:89:3c:e9:a5:07:09:7e:4b:79:f1:
04:d0:7d:a3:3f:a2:18:32:a6:37:f1:b9:f5:41:2e:
53:34:bb:ee:10:10:41:1e:2d:58:7d:a2:b7:e1:d2:
6f:1b:d1:15:de:2d:29:50:34:12:9f:b4:40:92:a3:
fd:c3:f1:88:31:62:20:55:c3:17:49:4d:02:81:41:
68:45:e1:61:3e:fc:c4:27:6d:7d:2c:f7:6e:4a:1b:
15:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D1:5B:61:B7:77:C3:63:29:FE:EE:B9:1E:6D:5D:12:FD:53:C9:3A
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/BtFbYbd3w2Mp_u65Hm1dEv1TyTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.107.0/24
163.5.137.0/24
163.5.143.0/24
Signature Algorithm: sha256WithRSAEncryption
72:35:5a:28:cc:53:f1:5d:79:24:55:68:a8:2e:62:c7:b1:87:
13:5d:d4:f5:73:10:4b:3f:9b:15:c2:11:22:9a:63:51:f9:7d:
c8:78:0e:7b:48:8a:52:0d:5f:22:9b:7c:cc:ff:0e:a8:b6:c3:
36:2e:45:72:8a:51:7c:26:44:0b:cc:72:1f:c9:88:8c:38:3f:
ab:91:fd:a0:90:e4:6d:a6:c2:3a:23:27:ff:0f:c7:a1:8a:d1:
02:d4:73:40:1e:3f:29:44:ac:d7:35:cf:e9:1e:68:72:b7:5a:
bd:17:04:10:e0:16:18:fd:8f:6c:a5:37:82:b0:6e:74:ef:3c:
60:eb:be:84:4c:5c:20:d0:30:dd:94:4b:38:b5:a5:69:3c:0b:
12:a0:b5:fe:b4:e7:c8:a3:0e:7c:a8:5b:bc:00:0c:cb:82:4f:
47:9e:26:55:6d:b6:ea:b7:89:0c:5f:b6:51:5b:1c:99:08:03:
60:40:25:15:db:84:50:17:aa:64:0a:3c:73:d9:68:78:72:2f:
5c:4c:ab:89:32:a2:08:c2:b3:e7:42:1c:48:25:5e:75:1a:87:
20:81:48:4c:fe:a5:5e:fc:af:fb:40:d1:22:8a:b3:a2:7e:62:
eb:a9:30:76:22:0e:6d:81:bd:1a:2a:ec:84:b9:21:9e:9d:67:
0c:cc:c1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:20 2023 by rpki-client on console-fra.rpki-client.org