Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Ca_i_dMyT0T9rvEKxq5i0AGRFio.roa
File: Ca_i_dMyT0T9rvEKxq5i0AGRFio.roa (raw, json)
Hash identifier: Emh6jDWtBmL933JQ62yqa6K1W5CYb731AYXUgPWikmo=
Subject key identifier: 09:AF:E2:FD:D3:32:4F:44:FD:AE:F1:0A:C6:AE:62:D0:01:91:16:2A
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01842327A8C4A1EDA0A2FADE30EC1E608B86
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Ca_i_dMyT0T9rvEKxq5i0AGRFio.roa
Signing time: Sat 29 Oct 2022 09:51:52 +0000
ROA not before: Sat 29 Oct 2022 09:51:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 163.5.192.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:23:27:a8:c4:a1:ed:a0:a2:fa:de:30:ec:1e:60:8b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 29 09:51:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=09afe2fdd3324f44fdaef10ac6ae62d00191162a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:2f:91:1c:4a:03:58:7d:85:16:f5:f4:3d:84:
fe:9e:a5:9d:a5:a6:5d:0c:12:54:dd:0b:75:11:7b:
a5:0c:3b:be:f5:21:49:6b:5e:3f:32:6f:f4:88:b6:
b8:8a:67:33:3f:29:3f:9d:74:48:19:f0:f0:03:8a:
d6:08:82:3d:72:13:5e:c0:22:ae:17:d5:da:9f:4e:
77:ad:a6:fc:d6:98:48:3a:23:21:d7:4b:de:24:da:
de:cc:bf:73:d8:68:54:8f:76:71:67:cd:7c:bc:06:
c2:c7:27:7d:98:22:9c:c1:a7:f2:de:08:28:c6:37:
12:0c:e2:b4:e3:7d:10:1c:f6:c1:c7:48:cc:34:27:
ca:22:76:dd:3d:37:50:b0:d8:7a:2b:ac:6f:53:3a:
6e:a8:55:48:48:fa:8f:9b:bf:27:c7:c4:c9:f5:bc:
ba:d5:93:5a:77:cf:3b:32:d8:01:31:cc:86:e9:62:
72:e4:e4:94:15:39:38:fb:08:f9:00:0c:39:2e:3b:
9e:72:f7:34:a3:2c:ab:a4:8d:a3:f8:11:1a:58:08:
89:b9:7d:c5:e2:8d:65:18:90:76:78:70:8f:95:d7:
bc:b5:af:d2:b9:3b:96:dc:06:5a:27:e9:9d:26:4a:
a6:28:f5:60:cb:53:54:6e:69:f2:84:25:3b:6b:6e:
b7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:AF:E2:FD:D3:32:4F:44:FD:AE:F1:0A:C6:AE:62:D0:01:91:16:2A
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Ca_i_dMyT0T9rvEKxq5i0AGRFio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.112.0/24
163.5.192.0/24
Signature Algorithm: sha256WithRSAEncryption
25:5c:a3:03:19:18:5d:d1:b8:d4:47:11:62:d8:b9:09:01:26:
43:af:ab:fd:22:1c:b4:2d:fe:0a:67:55:6d:d3:dc:e5:69:06:
21:a1:40:43:ef:43:7f:19:fd:ce:53:53:f2:a4:ed:d8:4f:4b:
ce:45:c7:98:05:15:42:f4:9c:25:ac:9a:c6:52:75:03:ee:ef:
b2:f6:19:52:75:3e:27:6d:6f:74:2b:83:23:8a:70:9f:6d:b5:
65:34:0f:93:d7:5a:dd:5e:2f:2c:09:a5:91:7e:54:87:ea:2c:
fc:4c:c4:cf:e3:3d:a2:3d:d2:57:1f:a2:b0:59:cf:02:39:2f:
3e:02:d2:67:17:e0:8d:54:3e:42:1c:40:01:ad:69:4a:d4:9d:
8e:ca:45:d7:f0:18:34:16:6e:c6:cc:c9:83:87:2e:ef:92:f6:
d5:7f:e5:c6:a4:97:ad:9d:39:69:ed:2d:b0:93:af:c1:64:a1:
ce:5a:22:e7:0b:59:e9:39:4a:d2:f1:60:8d:66:e6:56:98:10:
67:c4:54:72:67:d4:cc:a9:b1:e9:e5:79:a7:3f:b3:ec:9a:c0:
c2:29:8e:a5:89:37:bc:0a:36:a0:a4:5b:b5:3f:c6:32:e1:18:
97:93:00:ea:f2:d4:03:c1:af:49:99:93:30:57:91:61:04:d1:
17:b1:85:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:20 2023 by rpki-client on console-fra.rpki-client.org