Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/IDi9lgy9-Y2h2-D339_53l8zaFA.roa
File: IDi9lgy9-Y2h2-D339_53l8zaFA.roa (raw, json)
Hash identifier: tgaYfWuR0UwpsahATLwt0nlmSn13jotxFSyrKw4RNuA=
Subject key identifier: 20:38:BD:96:0C:BD:F9:8D:A1:DB:E0:F7:DF:DF:F9:DE:5F:33:68:50
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0184474009618B8F5BA0E8EC482921337B29
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/IDi9lgy9-Y2h2-D339_53l8zaFA.roa
Signing time: Sat 05 Nov 2022 10:04:49 +0000
ROA not before: Sat 05 Nov 2022 10:04:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212815
IP address blocks: 163.5.192.0/24 maxlen: 24
163.5.120.0/24 maxlen: 24
185.253.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:47:40:09:61:8b:8f:5b:a0:e8:ec:48:29:21:33:7b:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Nov 5 10:04:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2038bd960cbdf98da1dbe0f7dfdff9de5f336850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ea:29:4a:e4:2e:54:c4:05:b2:fa:02:cd:69:
36:f4:5b:38:40:0b:0e:a7:d9:3f:5a:ed:ac:ad:4f:
57:93:78:6c:4e:c1:41:77:e1:41:1e:f0:b9:b4:c6:
8f:e5:a5:fe:3c:c6:27:92:5c:3e:36:eb:ba:10:e2:
c4:dc:6a:4d:0e:64:a8:85:6a:46:ae:16:cf:0e:c1:
41:a5:8b:6d:29:d7:37:46:cb:21:24:e3:0d:0d:4d:
93:88:43:61:9c:f6:43:fb:75:81:75:58:65:83:55:
e8:9d:af:f9:3f:9f:f5:e7:e6:09:35:b4:79:03:be:
df:3a:5b:98:a9:f8:21:cd:02:eb:26:73:8f:48:0b:
29:a1:54:1b:c2:3f:51:b3:c2:7f:ec:87:f3:8f:2a:
9f:1e:f3:43:37:0d:b0:d0:8b:81:5a:a9:61:26:92:
7a:fe:d6:33:6a:3d:37:34:97:c3:96:ae:8f:8d:66:
dc:04:8b:c7:cb:e9:39:ed:4d:11:21:2d:76:50:e9:
0b:15:71:3d:1a:3d:e2:fa:12:c3:12:b8:83:37:59:
3c:b3:45:27:bb:51:6f:a6:74:ad:56:ab:55:9d:86:
19:62:4d:b7:c2:a3:8c:3c:48:da:d4:65:e5:e5:96:
86:da:d2:9a:5c:37:94:74:24:a2:0e:45:42:58:d2:
67:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:38:BD:96:0C:BD:F9:8D:A1:DB:E0:F7:DF:DF:F9:DE:5F:33:68:50
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/IDi9lgy9-Y2h2-D339_53l8zaFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.120.0/24
163.5.192.0/24
185.253.54.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:76:0f:9e:2b:37:f2:b2:87:c9:7e:e8:c5:77:e9:93:99:f1:
90:26:65:aa:84:f9:b1:38:e4:56:1c:50:2c:e2:d5:1b:5a:b5:
a0:ae:e5:23:a1:09:73:80:56:7f:80:dd:b9:06:28:8f:8c:e0:
23:8a:90:cc:66:d8:58:b2:00:0c:4e:47:cb:7f:0a:32:70:45:
83:20:39:46:96:b6:3b:2f:c1:3d:c9:47:17:a5:24:b6:d0:6f:
14:1d:0c:74:54:9a:c1:95:c8:39:e3:9a:63:5c:7d:f5:44:fb:
4e:81:03:28:09:e6:c8:f3:8d:fa:23:c7:ef:82:08:b5:e9:8a:
ba:8f:89:15:63:ab:df:ed:1c:10:11:dd:e8:ef:60:5f:e0:6c:
04:52:51:89:36:f5:09:7b:1b:0a:69:b8:5f:0a:31:36:68:fe:
eb:d4:2f:ba:84:31:bf:c5:72:14:2a:4f:f8:cc:ce:28:b5:3b:
4a:27:c1:c9:00:fe:9a:cf:60:96:49:d0:fb:80:ee:62:93:03:
bf:af:ca:fa:71:52:60:7a:42:af:72:e2:9b:5c:b2:1d:76:fe:
d4:38:72:78:37:fc:da:5e:b8:24:3b:31:75:a9:b9:11:cd:c7:
bf:9a:b9:64:25:9a:ec:b4:fd:2f:9a:63:59:92:56:99:e0:f9:
2d:3c:9d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:20 2023 by rpki-client on console-fra.rpki-client.org