Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Dz78EGxfsF8e2kT502ZOJiX8ob0.roa
File: Dz78EGxfsF8e2kT502ZOJiX8ob0.roa (raw, json)
Hash identifier: d+i3Ll5W71/Aznk0THiOXpdGknMbm99ps17e39Pq/jQ=
Subject key identifier: 0F:3E:FC:10:6C:5F:B0:5F:1E:DA:44:F9:D3:66:4E:26:25:FC:A1:BD
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01831660270031D5B10CF95D6CCAD928A64F
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Dz78EGxfsF8e2kT502ZOJiX8ob0.roa
Signing time: Wed 07 Sep 2022 05:15:43 +0000
ROA not before: Wed 07 Sep 2022 05:15:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 396356
IP address blocks: 163.5.243.0/24 maxlen: 24
163.5.245.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:16:60:27:00:31:d5:b1:0c:f9:5d:6c:ca:d9:28:a6:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 7 05:15:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0f3efc106c5fb05f1eda44f9d3664e2625fca1bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2b:e9:e7:32:b0:9f:4d:ba:d7:db:ea:32:65:
a7:75:09:c7:46:35:3b:9b:43:94:8d:a8:37:b7:94:
6a:9c:fd:f1:47:8b:74:ba:2c:11:ee:8a:e1:4e:26:
26:10:19:d8:99:e3:98:37:24:70:c2:4a:68:4c:c7:
83:eb:4e:9c:a4:a3:7d:af:f3:05:fb:2c:84:78:61:
d8:7b:b2:55:4f:b1:d4:80:0f:e3:30:fd:cf:19:b5:
40:d9:fc:c0:e8:d0:1d:b9:6a:b9:e0:d1:50:d9:a4:
b2:94:28:6e:c0:5b:cc:89:0c:e6:fa:34:c8:e6:fb:
a5:3b:9c:30:b0:64:b8:36:99:11:a0:c5:97:27:c5:
ff:5b:b1:e5:14:ae:5f:d9:5c:37:ab:34:cf:c7:2c:
9f:ad:a1:a6:8a:a0:99:a7:4f:d0:e0:9e:be:d1:bb:
24:8d:f1:72:01:3b:90:cb:54:e9:45:67:2e:2e:d1:
0b:ae:59:95:54:dc:6a:34:c6:e8:33:42:32:bd:89:
6d:9b:5f:3d:51:00:91:c7:1c:7c:5b:1c:12:80:2b:
cb:cb:83:6f:67:9c:6f:2d:3b:02:33:10:46:d2:4b:
df:21:e9:25:29:12:79:4a:14:38:3e:2e:83:35:10:
96:cd:a8:c8:28:ce:86:0a:fc:71:72:34:e6:40:6c:
55:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:3E:FC:10:6C:5F:B0:5F:1E:DA:44:F9:D3:66:4E:26:25:FC:A1:BD
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Dz78EGxfsF8e2kT502ZOJiX8ob0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.243.0/24
163.5.245.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:d2:11:d6:a2:ae:bb:f2:a5:69:c8:f5:34:89:0a:5e:cf:9d:
37:80:40:f4:1f:b7:54:31:49:5d:e1:d5:d3:de:e6:01:01:99:
9b:9b:31:21:26:12:2c:03:b8:3c:09:0e:bd:06:03:f3:90:9d:
2e:55:a0:17:93:4c:d1:01:87:0e:5a:8b:e5:9a:01:fe:6a:48:
fc:3f:be:b8:12:29:36:69:e3:4c:f3:4f:a5:a6:05:63:90:3d:
e5:93:16:e3:9c:ae:b2:87:e3:37:26:b2:cb:64:ab:78:45:d6:
d3:b3:67:7a:bb:3d:83:91:51:ed:56:d6:72:6c:d1:a0:de:5c:
db:51:1b:b8:d4:54:a9:86:7a:92:1d:30:96:78:5f:d4:b4:11:
be:01:87:90:75:f6:ea:57:d3:cb:67:f4:aa:61:b5:3d:e3:d0:
35:0e:96:e7:76:d0:a6:56:ff:63:ad:09:dd:6a:65:58:69:d2:
42:7a:50:cf:0e:76:93:c5:61:4d:2e:96:2d:f6:33:c0:12:b3:
d8:f0:55:e8:b3:7e:d3:da:62:da:bf:4d:c9:ce:6a:0f:95:7d:
8f:ce:4b:b9:83:4e:e2:4d:b9:98:cb:13:6f:c5:b3:83:3f:45:
df:4a:0e:b3:cf:6a:e7:ae:df:97:f0:5f:f9:8c:ea:66:d6:58:
2b:6d:d8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:20 2023 by rpki-client on console-fra.rpki-client.org