Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/EmZUjI4A-MZYjem1vDF6d-cv5mI.roa
File: EmZUjI4A-MZYjem1vDF6d-cv5mI.roa (raw, json)
Hash identifier: GOXacKq7t/8EIBylQNhv8vMyAU9/mpiwQfKiDnuWZCw=
Subject key identifier: 12:66:54:8C:8E:00:F8:C6:58:8D:E9:B5:BC:31:7A:77:E7:2F:E6:62
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0184D809C0BEA7FE877432F9F5231F440055
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/EmZUjI4A-MZYjem1vDF6d-cv5mI.roa
Signing time: Sat 03 Dec 2022 12:50:28 +0000
ROA not before: Sat 03 Dec 2022 12:50:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62068
IP address blocks: 163.5.170.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d8:09:c0:be:a7:fe:87:74:32:f9:f5:23:1f:44:00:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Dec 3 12:50:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1266548c8e00f8c6588de9b5bc317a77e72fe662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8a:ca:0a:62:8a:b7:24:3a:6d:9c:a3:1a:ce:
73:22:b6:5b:de:a2:a3:4e:63:86:20:6a:59:b7:c3:
77:3b:ee:e5:20:8e:4a:79:9d:88:1b:00:72:63:6b:
96:b8:09:91:6a:f4:4f:7f:16:6a:ac:97:5a:48:bd:
2a:50:d8:77:56:76:0f:e9:80:2a:57:28:b2:17:40:
c7:75:65:2f:b2:13:61:09:ba:16:98:71:9f:21:05:
b7:18:77:c2:80:22:70:0c:b4:9d:ff:c7:87:72:2d:
4c:24:be:68:b2:bf:cf:1e:b4:9a:43:b6:28:5f:aa:
98:62:37:d9:54:c0:81:2e:72:97:47:b6:d1:2a:a7:
b6:cb:e4:84:74:d8:78:e2:46:c7:59:69:45:bb:d3:
c0:ce:f6:01:04:cf:51:11:9d:6d:6a:1c:e1:93:b1:
43:f2:7b:85:09:bd:18:f5:cc:27:7f:74:94:f8:f0:
56:8c:74:54:45:80:86:6b:d7:7b:86:0a:3e:9a:8a:
38:11:27:07:8e:59:8e:25:6d:b4:0c:32:6c:c7:e4:
22:58:fa:f1:14:de:f3:7b:a5:26:26:15:f3:00:ee:
42:b8:0e:2f:da:c9:a9:a8:5a:d4:a7:84:23:5b:b6:
ec:7f:30:b6:5d:f6:22:89:ec:94:94:fb:17:a1:97:
c0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:66:54:8C:8E:00:F8:C6:58:8D:E9:B5:BC:31:7A:77:E7:2F:E6:62
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/EmZUjI4A-MZYjem1vDF6d-cv5mI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.170.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:23:ca:83:63:94:6b:d6:78:49:61:e6:72:f5:30:70:6c:88:
70:1a:3a:1d:6b:de:e3:90:79:87:b7:68:49:64:5c:31:c4:3f:
db:1d:b7:f4:f5:32:ca:8d:b4:c5:65:bc:7c:c6:a2:06:fb:6c:
20:99:38:f6:1b:66:eb:ba:d1:5c:81:a7:b4:a6:78:aa:6c:13:
6a:8d:fb:84:62:6d:4f:28:09:4f:df:3b:e3:8d:e5:b6:28:69:
60:9d:f8:0e:1d:91:ae:bb:f3:16:40:3e:7a:09:2c:9d:5e:90:
d1:d7:b8:ec:70:c6:b4:b6:86:e8:05:67:ef:85:8f:fd:02:e6:
cc:88:56:97:c4:7a:62:97:30:9c:8f:b3:e3:56:83:5c:58:0b:
aa:fe:ec:95:58:17:55:5c:e1:af:e8:21:e4:28:04:ca:1e:01:
b6:d4:74:ff:c3:58:e2:43:6e:8a:9f:f5:42:06:9b:46:30:46:
12:19:00:a6:e7:5f:e2:85:d2:fb:d2:cd:4d:b1:4f:99:65:8c:
4c:38:7d:b6:e6:65:41:de:a3:94:28:26:f8:d2:c5:75:48:77:
f1:13:ee:25:2e:c6:8b:66:f0:83:24:cd:81:bf:f2:d0:5d:f4:
4c:d0:65:75:8f:a8:dd:2f:90:f3:3c:e1:57:e2:88:e4:49:e0:
80:a1:5e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:20 2023 by rpki-client on console-fra.rpki-client.org