Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/HK8Rgud6l7ryJJ3hEw2f78LnQhk.roa
File: HK8Rgud6l7ryJJ3hEw2f78LnQhk.roa (raw, json)
Hash identifier: 2VHvgQGD9cU4lrPCuTiuJJWJJ+WI41txQhCHzQAlaX8=
Subject key identifier: 1C:AF:11:82:E7:7A:97:BA:F2:24:9D:E1:13:0D:9F:EF:C2:E7:42:19
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01839DC701E0D461796F143BCDCC16FEA04C
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/HK8Rgud6l7ryJJ3hEw2f78LnQhk.roa
Signing time: Mon 03 Oct 2022 12:16:48 +0000
ROA not before: Mon 03 Oct 2022 12:16:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210703
IP address blocks: 163.5.145.0/24 maxlen: 24
163.5.144.0/24 maxlen: 24
163.5.168.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:9d:c7:01:e0:d4:61:79:6f:14:3b:cd:cc:16:fe:a0:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 3 12:16:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1caf1182e77a97baf2249de1130d9fefc2e74219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0e:0a:51:6b:a9:3f:3e:2a:65:64:af:ed:4b:
a4:f8:3c:75:32:83:46:2a:55:b7:ef:c2:c0:9a:d5:
6f:9c:41:41:dc:4b:bb:4a:e4:aa:13:43:c9:01:cf:
9d:cb:ac:e1:b1:c4:8f:fe:74:19:fd:23:38:f9:02:
af:4c:bb:df:10:97:05:69:f3:46:2e:33:37:ee:3f:
dd:dc:74:8a:bc:11:3c:fc:6a:ba:cf:10:99:01:7c:
b7:c1:1f:e3:a8:c0:5d:f9:a4:46:32:d8:b3:9f:29:
f4:57:0e:70:93:fc:98:b7:53:aa:77:59:17:3d:8b:
7b:bf:ae:f5:35:78:e3:6e:6f:3b:42:19:58:d9:a0:
03:66:34:e4:a5:e3:2a:f4:c9:e1:70:78:a1:12:c8:
dd:98:17:04:3a:1a:74:9b:63:1f:26:1c:a6:22:d5:
5e:8e:96:0b:f3:6a:e4:ba:60:5f:df:fc:42:00:23:
99:20:96:04:07:49:3c:57:19:eb:5e:f8:f6:68:d3:
20:a0:24:a9:94:6c:6d:e1:9b:ef:e5:fe:17:8d:fb:
a4:1b:5b:38:53:d2:0a:d4:3f:95:a2:66:47:17:10:
d6:ec:5d:ba:af:3f:86:5e:5e:af:8f:59:f7:53:ed:
9e:03:a6:b9:ca:23:a8:8f:34:f0:20:c1:54:18:65:
a4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:AF:11:82:E7:7A:97:BA:F2:24:9D:E1:13:0D:9F:EF:C2:E7:42:19
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/HK8Rgud6l7ryJJ3hEw2f78LnQhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.144.0/23
163.5.168.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:4b:18:7b:f7:25:c6:03:ac:e9:eb:9e:02:20:6e:23:27:6b:
5b:a8:44:88:6a:46:55:38:7d:e4:d5:41:65:83:44:88:08:08:
0f:15:03:8b:bc:cc:0a:ad:5b:08:99:32:e2:f9:95:1d:e7:e4:
d0:7d:95:60:5c:ab:6d:6a:7e:32:e2:32:67:47:da:ac:6d:fd:
62:0d:96:83:9a:b7:66:1f:cf:c6:6b:cc:31:fc:d2:14:75:91:
af:d6:d2:d0:65:fe:ca:7e:bb:53:bb:55:c7:2e:6b:a2:78:8a:
d5:f2:1d:95:53:2a:6d:bc:0f:ac:b0:26:bd:7b:e2:1a:a7:4c:
94:de:60:36:8b:8c:38:35:9e:e7:be:bf:9c:a7:0e:96:c5:d2:
d9:b2:90:21:3f:51:a9:a3:5a:ab:c0:f7:2c:26:31:5c:44:59:
6a:8d:19:5b:6e:5e:a4:1a:48:6a:94:81:05:0c:ce:83:ce:a0:
10:b4:5d:90:4c:93:1e:e0:9a:ec:f4:30:63:f4:87:37:72:99:
00:2b:6a:9f:c4:d5:c6:0b:44:22:ad:8c:79:2a:32:8a:2a:46:
8c:8f:07:de:17:d8:b4:60:32:c3:cc:1f:fe:ca:0c:1c:81:28:
00:08:9a:ba:75:1e:1c:d1:66:0e:c0:ad:fc:b9:7e:b3:25:18:
9c:02:89:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:09 2023 by rpki-client on console-ams.rpki-client.org