Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/GnfZt-v2oB4O3ArIJ9WsXQ4BeBM.roa
File: GnfZt-v2oB4O3ArIJ9WsXQ4BeBM.roa (raw, json)
Hash identifier: pA/OUbwIVQPuPN7EbD5Cy+QEnXoGJs1mQZ8kXQixeEY=
Subject key identifier: 1A:77:D9:B7:EB:F6:A0:1E:0E:DC:0A:C8:27:D5:AC:5D:0E:01:78:13
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 015612B3
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/GnfZt-v2oB4O3ArIJ9WsXQ4BeBM.roa
Signing time: Wed 29 Jun 2022 08:09:02 +0000
ROA not before: Wed 29 Jun 2022 08:09:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 163.5.125.0/24 maxlen: 24
163.5.130.0/24 maxlen: 24
163.5.131.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
185.253.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22418099 (0x15612b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 29 08:09:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1a77d9b7ebf6a01e0edc0ac827d5ac5d0e017813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f3:b6:94:0b:c1:a1:45:25:99:ac:cd:10:fb:
67:7f:75:9e:66:77:97:07:f3:4b:10:48:23:75:65:
16:37:25:ee:3a:9f:9e:d0:03:a5:85:7a:a9:28:f7:
8f:5a:c8:f4:75:19:e2:1e:bf:73:f0:1a:53:4f:fe:
45:60:f7:4e:24:84:68:46:e6:4a:ff:3b:e6:7d:4c:
1d:84:ff:c8:9e:01:93:db:4a:f7:d4:a1:82:92:97:
c7:57:af:89:06:a0:9b:1d:e5:d2:7b:30:13:91:33:
49:e0:8f:39:51:f8:80:50:03:7c:0e:8f:62:27:65:
6a:f6:1b:b4:47:7e:3c:e3:e0:07:08:1e:13:fa:3e:
f2:ff:48:c2:c5:b0:4e:89:44:ed:e4:27:c7:cd:92:
c0:4e:b8:03:f0:cd:91:f3:27:89:88:91:c6:14:16:
64:22:2f:58:79:dc:29:ee:0f:2d:40:65:20:96:12:
39:6c:c1:75:36:fe:c1:20:2c:a9:a0:60:69:e8:7f:
5e:24:6b:9f:5d:f7:6a:19:a3:aa:f4:da:10:21:3f:
0e:72:46:ee:c5:d7:b1:1e:b2:93:a5:f6:ee:67:50:
64:81:da:2a:6b:48:33:ae:2b:dc:c4:2f:a5:db:50:
40:50:dc:d7:f0:db:fe:6a:5a:2b:8a:f8:95:36:6d:
16:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:77:D9:B7:EB:F6:A0:1E:0E:DC:0A:C8:27:D5:AC:5D:0E:01:78:13
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/GnfZt-v2oB4O3ArIJ9WsXQ4BeBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.125.0/24
163.5.128.0/22
185.253.54.0/24
Signature Algorithm: sha256WithRSAEncryption
96:00:ab:c7:21:f4:fe:0c:15:51:db:6c:ca:91:40:b4:ac:17:
94:b7:f9:3a:c4:0d:b5:78:56:46:1a:48:01:e6:64:51:7a:f8:
cc:73:e1:89:3d:7d:bf:56:75:cd:0b:b9:69:e3:83:b7:65:09:
57:00:98:e2:3d:01:90:02:32:1b:de:01:aa:5d:96:24:69:05:
30:c1:11:23:fb:66:ef:09:ac:3f:ed:00:21:82:fd:25:8c:e3:
c1:5a:57:83:3c:92:de:9f:54:b9:95:9a:6e:07:28:b5:67:45:
6b:23:f9:9f:dd:f0:af:d5:67:92:84:ee:79:12:89:bf:cf:92:
4d:42:ba:41:8b:49:a0:15:3a:bf:a1:66:a4:59:5b:5a:d9:49:
69:da:53:43:93:ca:b8:b8:af:83:e2:db:3e:84:6a:df:97:e3:
9e:30:10:8d:ca:f5:71:17:92:71:f9:d3:63:e4:fb:95:15:c8:
6e:0a:a1:b5:4c:02:f3:5d:b8:c1:b4:b3:99:50:d0:a9:66:88:
66:bf:54:e1:1d:43:38:bf:5a:a2:aa:9f:73:65:89:3f:2a:5b:
01:b7:7d:e0:77:f1:2a:63:46:f7:fa:3f:38:ac:f9:27:df:25:
65:26:62:5e:9e:23:0b:8d:e7:b4:b6:65:dd:1b:ef:4b:b2:4f:
54:c8:b9:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:09 2023 by rpki-client on console-ams.rpki-client.org