Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DJvV6DOQMpTsoZzqt50uG_iuRGo.roa
File: DJvV6DOQMpTsoZzqt50uG_iuRGo.roa (raw, json)
Hash identifier: gxD0It7OgV1xyJUUCQ0SVmN9iJ0dTAHtHj+8eg5jPWg=
Subject key identifier: 0C:9B:D5:E8:33:90:32:94:EC:A1:9C:EA:B7:9D:2E:1B:F8:AE:44:6A
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0184804917BD3F4BE0723BB80CFACDD7CC21
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DJvV6DOQMpTsoZzqt50uG_iuRGo.roa
Signing time: Wed 16 Nov 2022 11:53:04 +0000
ROA not before: Wed 16 Nov 2022 11:53:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43043
IP address blocks: 163.5.107.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.137.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.145.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:80:49:17:bd:3f:4b:e0:72:3b:b8:0c:fa:cd:d7:cc:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Nov 16 11:53:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0c9bd5e833903294eca19ceab79d2e1bf8ae446a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ec:81:0f:c6:a2:b5:bd:da:c3:13:19:c2:bc:
c7:87:bd:38:2d:e0:ac:41:8d:00:68:77:d8:87:e2:
18:d3:08:b2:17:43:01:10:89:da:02:21:c1:5e:d9:
dc:3c:04:28:9e:c2:97:bc:b2:c8:24:0e:3f:4c:a3:
e7:1b:e8:4c:e4:c0:1b:02:0b:8c:ec:40:05:ef:6f:
72:29:47:ae:d2:43:af:6a:b6:00:0e:55:93:a2:bc:
12:b5:42:e4:51:13:23:1a:5b:f3:45:d7:57:85:e9:
cd:fd:3b:55:ae:cf:f7:68:87:8c:ba:88:78:e2:54:
5b:b2:85:27:2d:82:20:79:55:51:d6:d3:3e:4d:c0:
50:00:f1:f0:e7:c9:c5:0b:36:2c:4c:ed:fb:bd:c2:
e4:fb:ab:a1:5e:de:9a:78:63:ee:4f:f6:10:8f:61:
b9:7f:34:d2:7b:65:cb:a4:ab:8e:9e:3f:52:32:0b:
9d:bb:0f:2f:af:fd:f0:43:e3:35:99:58:cd:90:c8:
bf:ba:f6:28:88:6e:a5:93:d7:f0:ae:d6:eb:d3:06:
aa:bb:2e:21:8f:c4:70:58:41:6b:81:31:42:db:e2:
d9:8f:83:d9:8f:05:85:31:26:1b:67:03:3b:cc:ed:
2e:12:d5:63:a2:80:d8:e5:aa:23:39:71:e4:13:7f:
be:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:9B:D5:E8:33:90:32:94:EC:A1:9C:EA:B7:9D:2E:1B:F8:AE:44:6A
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DJvV6DOQMpTsoZzqt50uG_iuRGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.107.0/24
163.5.121.0/24
163.5.137.0/24
163.5.143.0/24
163.5.145.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:e2:be:dd:a1:cc:f6:a4:a3:bb:0a:fe:98:f6:1d:5c:c9:96:
2b:bb:17:f6:a8:1f:2d:35:53:a9:97:5f:a0:15:9c:2a:d8:3e:
44:99:30:69:51:3e:2c:cd:4b:53:05:70:14:4f:1d:d3:69:a9:
e3:25:44:aa:b7:a8:91:a9:7f:94:14:74:87:1e:8a:06:96:af:
b2:96:84:e0:cb:41:15:ce:c8:53:0e:a5:ba:50:5c:ed:da:64:
1e:b3:3f:7d:f8:f4:be:0d:5a:c2:d7:e7:5c:6d:cd:ea:a0:30:
e4:72:74:6a:51:06:fc:ea:68:bf:ef:91:14:38:6e:72:7f:f3:
18:49:af:64:ca:50:32:b2:91:41:25:3d:8e:a4:43:3e:6d:1a:
cf:2f:6a:39:1c:34:7c:e5:aa:16:d0:85:14:11:8f:9b:be:61:
c3:b4:bf:13:87:fd:9f:1e:fc:12:93:e6:e4:15:36:b0:21:13:
e0:44:af:be:7b:c7:a4:d8:2b:2c:f3:90:9f:c1:2c:87:a5:04:
b3:0c:3d:d8:23:2d:2f:83:fb:4a:2c:90:80:35:21:9e:9e:86:
41:19:b4:22:a1:38:b4:8b:4c:e5:74:77:67:f5:c8:98:70:de:
e1:e5:3b:ae:9e:f3:21:cd:13:50:f5:cf:d5:1d:27:36:22:af:
26:c0:ac:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:08 2023 by rpki-client on console-ams.rpki-client.org