Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/FC5FcwQb5dftUJ4SFrD2lza9wmY.roa
File: FC5FcwQb5dftUJ4SFrD2lza9wmY.roa (raw, json)
Hash identifier: pHUocxuPus8ucMVjqcJHuIHZGe0MXXY+JjLV+i/fBcQ=
Subject key identifier: 14:2E:45:73:04:1B:E5:D7:ED:50:9E:12:16:B0:F6:97:36:BD:C2:66
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018525133ADF242A97BFF5F4FECDF48381E0
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/FC5FcwQb5dftUJ4SFrD2lza9wmY.roa
Signing time: Sun 18 Dec 2022 11:51:35 +0000
ROA not before: Sun 18 Dec 2022 11:51:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212166
IP address blocks: 163.5.213.0/24 maxlen: 24
163.5.147.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:25:13:3a:df:24:2a:97:bf:f5:f4:fe:cd:f4:83:81:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Dec 18 11:51:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=142e4573041be5d7ed509e1216b0f69736bdc266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:44:10:ec:cd:58:a7:1e:72:a5:cd:54:86:3b:
fc:bf:5f:70:65:31:c6:d4:bf:b3:0e:77:99:36:b7:
45:05:6e:08:14:45:23:34:01:b2:dc:ef:84:33:c4:
a7:cd:7f:11:7a:92:95:86:a2:77:18:95:e5:93:3c:
b8:65:b4:58:73:7d:a6:e8:a6:21:32:94:ba:8a:a6:
7f:ee:e6:4b:0c:15:53:6e:de:e6:f6:44:3c:0b:a2:
74:dc:f3:ae:1c:0e:7c:71:c1:07:29:6a:1c:ad:6f:
16:e8:59:08:06:51:57:77:ff:f2:49:cf:79:b6:f4:
f9:89:be:d6:77:be:ad:60:8a:01:05:1e:b7:be:33:
4d:a4:4f:51:80:06:2d:de:3e:43:ac:f6:e5:e0:bf:
b0:96:c4:61:e5:3f:90:b1:ea:5f:38:42:ad:64:37:
4a:55:67:29:ca:93:58:32:07:ff:27:1d:62:cc:eb:
a2:f6:17:07:21:72:bf:c4:f5:a8:3a:f5:2e:7d:0c:
54:cb:93:0c:e8:60:5c:63:dc:71:f4:45:58:8e:aa:
8a:78:c1:6f:c7:89:06:42:0f:8a:1c:fe:36:cd:f0:
ce:71:6c:c2:f4:e8:80:68:d2:46:2c:7f:2f:23:7b:
57:a1:10:2f:92:cb:d2:0f:30:0f:18:ee:ee:c3:3f:
e6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:2E:45:73:04:1B:E5:D7:ED:50:9E:12:16:B0:F6:97:36:BD:C2:66
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/FC5FcwQb5dftUJ4SFrD2lza9wmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.147.0/24
163.5.213.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:bf:48:02:39:c3:df:4e:3e:a1:2f:f3:72:70:c1:f3:5e:4a:
a1:c9:a5:fa:bd:9d:a3:b9:41:3a:7f:62:1e:df:2d:fb:ad:d1:
7d:ea:fd:65:ed:03:78:d1:55:27:5e:b5:1d:31:bc:bc:2b:18:
73:4e:cd:ac:d0:22:f9:02:59:90:de:85:71:0e:70:45:88:4a:
dc:d5:0b:fa:32:db:c8:00:ba:42:38:e8:f8:03:01:03:13:c9:
6e:7f:c7:16:69:fb:48:cd:fb:f0:a4:83:23:17:39:e1:13:df:
54:e8:30:d6:51:20:c2:d9:e1:1e:f4:b9:15:8a:ba:1e:cb:6f:
a7:18:b0:60:92:1c:fd:6b:f5:9c:86:a7:af:14:73:88:da:4c:
06:e1:28:2a:42:dd:0d:0c:63:1b:cb:a9:12:21:43:fb:4c:db:
d7:57:da:1a:6d:13:57:5d:d7:50:43:b4:f7:95:8b:da:f3:28:
73:a5:32:29:a7:6a:2d:a6:bf:ec:41:52:c4:2c:03:13:29:b2:
23:57:44:c6:9b:e1:31:59:d9:c5:89:b7:72:4b:6d:3b:d7:0f:
18:b9:ce:22:78:e8:d9:43:46:85:ed:18:21:b2:06:1e:67:c4:
01:9e:72:49:8d:34:8d:6a:b3:ce:22:87:17:0e:52:6f:ee:e6:
94:02:37:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:09 2023 by rpki-client on console-ams.rpki-client.org