Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/CYafeuAO_G8KiCrNwZE9ri-44a4.roa
File: CYafeuAO_G8KiCrNwZE9ri-44a4.roa (raw, json)
Hash identifier: +m23/5xB2vpi1hBdQQvXBq2WjhgQ9OWxL+ipO0xnbI8=
Subject key identifier: 09:86:9F:7A:E0:0E:FC:6F:0A:88:2A:CD:C1:91:3D:AE:2F:B8:E1:AE
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0182CE97464F5401C3CDA6C3AE9C08812F51
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/CYafeuAO_G8KiCrNwZE9ri-44a4.roa
Signing time: Wed 24 Aug 2022 06:43:16 +0000
ROA not before: Wed 24 Aug 2022 06:43:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 136923
IP address blocks: 163.5.146.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ce:97:46:4f:54:01:c3:cd:a6:c3:ae:9c:08:81:2f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 24 06:43:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=09869f7ae00efc6f0a882acdc1913dae2fb8e1ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:49:1d:a0:1c:45:a3:dd:d9:88:30:38:cd:15:
ec:a0:2f:e6:7f:9e:6c:9d:ed:bb:9e:4e:54:6e:1e:
70:08:cc:a3:fc:63:0a:63:cd:79:2d:fb:12:c7:eb:
ca:c6:28:35:ae:af:8b:5a:71:a3:91:de:65:b6:1c:
38:47:bc:49:24:87:33:94:d6:59:d7:04:80:3b:c9:
cc:8a:c2:4b:2c:c3:28:ff:a2:04:d4:5b:fc:fd:35:
1a:60:e3:5a:a8:82:66:f4:ce:fa:99:e4:9d:de:f4:
2c:2a:6a:f0:0d:86:ee:e0:14:59:48:4d:e4:75:07:
2f:f7:a1:ce:52:4e:a5:0f:9c:f7:7c:87:a5:8a:30:
61:8b:41:67:10:0f:12:09:d5:8d:64:62:b1:bc:cc:
2f:9d:e0:0e:9f:75:26:1c:41:95:7b:57:83:50:4e:
d7:3b:cc:17:cd:d6:6e:5e:07:cc:35:63:3c:28:07:
7b:4c:92:4d:ec:6b:70:f5:c0:cf:a4:ca:2e:8b:a5:
38:eb:f9:27:44:73:0e:c7:cf:95:cc:51:10:cf:9c:
94:1a:0d:68:80:12:c5:45:bd:d6:2b:e0:f7:14:3f:
07:8b:31:2b:22:2b:60:41:0b:61:2e:32:8c:cd:70:
53:f3:0e:ed:07:e3:2f:ce:ff:fe:0c:4d:65:e7:e4:
8b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:86:9F:7A:E0:0E:FC:6F:0A:88:2A:CD:C1:91:3D:AE:2F:B8:E1:AE
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/CYafeuAO_G8KiCrNwZE9ri-44a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.146.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:8a:bc:1f:b0:aa:b1:6e:e4:ee:e4:ab:e5:18:1a:54:da:d3:
e0:81:69:85:78:83:56:0c:94:df:42:2e:d9:62:95:26:03:b3:
81:5f:ce:dd:0f:e7:5b:b2:8c:2c:2f:c1:ea:09:76:d0:b6:c0:
e8:0f:37:51:85:be:a6:3f:d6:6e:22:ac:69:be:0d:6a:4b:2d:
33:b7:cf:ad:b7:84:a8:2d:f3:7b:03:f9:91:2a:f3:a7:bb:15:
a8:20:9a:22:2a:49:66:cb:ea:bf:c3:d3:ec:ee:77:a5:32:e5:
46:1d:17:8f:ac:2a:1b:c4:aa:43:17:57:3c:4a:ce:be:b0:99:
09:77:a9:b1:c3:ed:ed:d6:c8:01:92:72:c7:4d:87:d1:ef:76:
de:56:40:fb:b9:ae:8e:a3:ed:c8:93:27:fd:31:82:c5:b6:1d:
49:d8:1f:e4:3a:99:c9:05:b9:39:9a:40:99:3e:31:53:8a:c4:
d6:ef:62:37:3f:45:e8:58:51:d1:43:ef:12:ef:ac:fc:d9:53:
5e:83:67:33:86:33:0f:3f:1f:7e:c1:af:ea:5f:17:20:93:a8:
9e:73:d2:1c:2f:2f:d3:29:66:84:66:e2:ea:7d:55:16:63:d8:
0e:6c:41:36:f3:9f:c1:74:40:c9:f5:2d:26:52:e9:10:10:5f:
1f:92:bb:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:20 2023 by rpki-client on console-fra.rpki-client.org