Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/FgL3vTDQ4r5zDoXxF723MwqYPQg.roa
File: FgL3vTDQ4r5zDoXxF723MwqYPQg.roa (raw, json)
Hash identifier: 3TMmXtgSEvLRkWZKSfCa5MuWHXPa0vESO06aSHAGcPA=
Subject key identifier: 16:02:F7:BD:30:D0:E2:BE:73:0E:85:F1:17:BD:B7:33:0A:98:3D:08
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01831267EAEF67EA1E6C186515FB792FD4FF
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/FgL3vTDQ4r5zDoXxF723MwqYPQg.roa
Signing time: Tue 06 Sep 2022 10:45:43 +0000
ROA not before: Tue 06 Sep 2022 10:45:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30823
IP address blocks: 163.5.236.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:12:67:ea:ef:67:ea:1e:6c:18:65:15:fb:79:2f:d4:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 6 10:45:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1602f7bd30d0e2be730e85f117bdb7330a983d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:77:dd:64:4a:d1:6a:e3:27:35:ef:e6:f4:29:
dd:c5:0b:26:2d:a8:7a:93:67:1b:f4:f1:dd:8f:d4:
bd:0e:b6:23:89:34:8b:82:a1:b6:4a:94:17:32:b3:
29:0a:cb:e3:d7:3e:55:81:65:d4:76:97:af:da:e6:
49:3e:26:a9:62:68:dc:89:4d:d4:52:07:21:09:f6:
ca:f4:86:77:5c:c9:a7:6b:b4:64:1b:85:d5:f6:42:
6d:0b:42:07:78:58:ff:ae:ec:df:12:0f:16:53:e1:
e9:2e:7b:48:43:94:ef:72:ee:22:72:47:d6:6e:28:
92:8a:af:ab:e9:3d:af:e0:5d:ef:f9:12:3a:f9:e1:
fe:9b:06:74:76:15:1f:ea:a3:1d:64:fd:57:fa:d7:
46:c8:8f:79:0b:12:8e:bc:73:d0:47:74:43:76:d7:
bb:20:62:c1:37:a1:e4:0b:90:fd:46:ee:73:27:aa:
84:fb:98:b2:6e:33:cb:56:3d:f4:af:0f:2b:d2:15:
e3:0e:00:ea:a5:99:6a:28:05:77:a8:96:28:19:f5:
49:65:98:59:a5:ff:30:01:9a:3e:fb:09:76:32:04:
71:87:6a:7b:4a:35:10:9d:e4:7b:8d:70:88:25:ae:
ad:20:3a:b0:64:e3:71:ae:15:d6:1f:ee:63:94:b6:
8f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:02:F7:BD:30:D0:E2:BE:73:0E:85:F1:17:BD:B7:33:0A:98:3D:08
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/FgL3vTDQ4r5zDoXxF723MwqYPQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.141.0-163.5.142.255
163.5.236.0/24
163.5.247.0/24
Signature Algorithm: sha256WithRSAEncryption
79:f9:09:d8:f6:05:67:60:10:32:00:6e:8f:1b:1a:c3:9b:0d:
70:be:18:63:0d:7c:de:c0:b5:d9:25:4b:b3:8b:61:ad:42:e1:
23:ff:a3:c0:87:a6:74:cb:2b:00:65:11:13:3e:91:78:d2:98:
4d:d1:00:8b:f3:b9:70:13:d3:b9:a3:dd:df:e6:25:8d:1c:12:
51:1b:e7:2d:6c:27:7a:b7:ac:cc:e1:84:25:02:bc:6b:30:09:
28:33:fa:66:c0:7f:94:f1:09:6b:44:47:e8:14:8a:55:b7:00:
f5:31:d8:00:e7:b6:c5:2f:b8:ba:ed:24:1a:88:a9:30:d8:b6:
f5:d9:1d:e0:38:41:42:22:eb:e1:f7:e8:25:0a:c8:35:c4:42:
39:64:e4:01:54:d4:4b:71:12:10:07:e9:20:a1:dc:c4:af:33:
70:69:59:e3:8f:87:97:d5:38:72:2b:2f:9a:fd:41:57:f0:fe:
82:0a:48:69:1d:74:2a:66:2a:8d:dc:13:15:3f:1d:ab:42:32:
47:59:c7:47:96:97:e7:3f:d1:7e:00:63:b5:ad:5d:35:3c:53:
67:7c:e7:96:08:31:42:0e:f3:75:27:7b:40:ae:4a:ea:88:71:
58:44:4e:c5:61:67:f5:2c:a7:86:73:82:44:0f:f4:41:18:62:
58:ad:9a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:20 2023 by rpki-client on console-fra.rpki-client.org