Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/EYlArUoweL1yeZ4-LX3d-jcPTm0.roa
File: EYlArUoweL1yeZ4-LX3d-jcPTm0.roa (raw, json)
Hash identifier: q/jz39fdtnHAdrUxNA0qZt2F7cT4nTgJb8VuNfTwAjI=
Subject key identifier: 11:89:40:AD:4A:30:78:BD:72:79:9E:3E:2D:7D:DD:FA:37:0F:4E:6D
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0181D5BE51B0AE9B74CBC86475E88CE7FAF0
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/EYlArUoweL1yeZ4-LX3d-jcPTm0.roa
Signing time: Wed 06 Jul 2022 23:00:28 +0000
ROA not before: Wed 06 Jul 2022 23:00:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 46573
IP address blocks: 163.5.130.0/24 maxlen: 24
163.5.140.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d5:be:51:b0:ae:9b:74:cb:c8:64:75:e8:8c:e7:fa:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 6 23:00:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=118940ad4a3078bd72799e3e2d7dddfa370f4e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0b:33:06:64:b9:a2:32:d4:06:22:6a:21:f3:
07:2c:fb:da:6f:54:28:bb:04:8b:3d:e8:12:70:9c:
f8:33:14:f0:7b:03:bb:53:f5:1e:a6:51:66:04:8e:
d0:c7:a9:56:7d:6e:5b:34:fc:74:7f:91:64:05:e6:
b3:a6:eb:d5:da:99:61:47:3c:c2:b1:7b:31:77:0a:
86:11:35:33:a9:fb:1d:35:ae:ce:0f:98:8e:19:0c:
32:c5:a6:cd:a5:d0:4d:da:09:f0:cd:1c:fc:76:54:
a6:49:2d:a0:10:9a:39:29:61:65:47:39:3c:7f:27:
24:61:4d:6e:4f:2c:4f:c9:d0:48:a5:d9:fd:8e:b7:
b1:ba:17:e8:e0:ac:e9:28:ae:a8:3f:c8:4f:e9:e6:
2e:3f:33:64:b3:47:bd:af:4d:72:e9:b0:d2:8b:e0:
af:6c:ac:e1:c8:61:9f:51:53:32:7f:0e:20:60:80:
18:86:43:25:a1:74:25:58:2e:6a:66:6e:95:39:c9:
c0:12:81:ba:2f:fd:df:81:33:6d:37:d1:00:dd:11:
a4:d2:da:12:5d:2a:38:91:45:1f:ea:70:44:5a:5e:
31:aa:7c:30:52:bb:dc:b3:68:cb:b0:32:35:93:f2:
4f:56:2b:ff:cc:16:f0:18:46:40:f3:84:d6:04:11:
c5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:89:40:AD:4A:30:78:BD:72:79:9E:3E:2D:7D:DD:FA:37:0F:4E:6D
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/EYlArUoweL1yeZ4-LX3d-jcPTm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.130.0/24
163.5.140.0/24
Signature Algorithm: sha256WithRSAEncryption
38:3f:0e:81:7b:4b:d3:8f:6f:49:46:b2:0d:a1:65:78:ad:8c:
26:e4:1b:13:3e:9f:74:d8:95:97:a4:9c:81:e9:2f:56:d3:96:
45:b0:d7:be:9b:be:08:1e:25:0f:37:27:56:dd:92:86:a4:7a:
e1:9f:30:b8:93:a4:ce:05:36:e5:1b:f5:3a:54:6b:34:52:0f:
78:98:e2:fe:66:42:0b:1a:84:53:31:07:5c:d1:16:94:30:f1:
20:91:11:a7:cd:81:a7:17:d1:3e:29:a4:a7:20:c5:20:a1:1f:
e2:ed:4a:6c:6f:d3:cd:c5:66:fa:64:8c:dd:1c:f2:76:d8:59:
c1:e9:e7:09:9a:ef:8d:7b:5a:14:44:83:7c:75:3e:e0:bc:d7:
35:a8:59:c6:75:6f:e6:c9:72:dc:c8:3a:73:da:81:a8:09:5a:
ce:78:b8:34:7c:62:9f:39:93:96:23:94:80:24:40:e3:41:2a:
08:d1:b8:c4:f9:ae:cf:bc:ed:fc:48:03:ca:3b:d9:ae:a6:82:
7b:ec:e4:d1:02:7f:01:b1:42:4f:95:e6:79:f3:a1:2c:90:4a:
2f:70:d7:3f:69:13:1e:91:e1:f9:4c:a2:2f:c6:7d:9d:3f:c3:
03:91:38:b7:86:98:24:e0:d5:ce:ae:6e:ab:6e:13:51:39:6e:
81:ac:09:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:09 2023 by rpki-client on console-ams.rpki-client.org