Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Ijj6qEc6NEmCWXoYIid4phH0jqA.roa
File: Ijj6qEc6NEmCWXoYIid4phH0jqA.roa (raw, json)
Hash identifier: BajUu5xfQwaAw4YhnKrj2qxu+VAZ2dsK0xzSbz2gXfw=
Subject key identifier: 22:38:FA:A8:47:3A:34:49:82:59:7A:18:22:27:78:A6:11:F4:8E:A0
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01841D7F4B072D6726C6DDA535B986272F3E
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Ijj6qEc6NEmCWXoYIid4phH0jqA.roa
Signing time: Fri 28 Oct 2022 07:29:52 +0000
ROA not before: Fri 28 Oct 2022 07:29:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44486
IP address blocks: 163.5.176.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1d:7f:4b:07:2d:67:26:c6:dd:a5:35:b9:86:27:2f:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 28 07:29:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2238faa8473a344982597a18222778a611f48ea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:55:ad:9e:4e:9a:57:60:5c:9a:98:71:43:ce:
99:32:2a:6b:1f:6a:58:1e:89:e0:6d:06:b7:1a:9a:
b7:43:fe:6e:33:88:7e:24:2a:b3:f8:05:c3:60:8a:
61:e7:8f:b6:8e:43:16:e6:5d:d4:67:4e:10:f8:c0:
fb:9d:59:e2:3d:ca:c5:9a:89:ea:8a:38:d2:97:21:
df:5a:d1:86:74:88:a9:34:cb:3e:1f:df:17:81:ef:
84:27:dd:ec:b1:5f:f1:eb:3d:e8:e9:40:8c:78:5a:
b3:27:85:e6:56:ad:6d:b1:d0:77:e8:51:bd:64:63:
98:dc:10:13:34:a2:e5:ca:2d:18:ff:cb:d1:f4:73:
39:04:24:7d:bb:f0:e9:b3:75:95:b9:ac:1b:de:06:
97:84:ea:87:4d:6f:0c:7b:0c:df:0d:2d:05:19:3e:
20:71:0a:cb:5e:16:82:75:68:53:d8:2d:46:5b:b3:
08:d1:3f:bf:65:43:cc:8b:09:ef:8e:56:58:b3:d7:
1c:b3:df:e6:b9:3f:ed:f1:eb:46:6e:77:e7:ac:38:
36:09:4d:c4:9e:2a:c3:34:a2:af:44:42:a5:d0:dc:
44:c6:f9:7e:33:21:31:07:ee:ce:ed:e1:b3:34:fa:
1f:35:2c:4c:5e:81:9a:91:45:db:4b:ab:1c:09:b8:
5f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:38:FA:A8:47:3A:34:49:82:59:7A:18:22:27:78:A6:11:F4:8E:A0
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Ijj6qEc6NEmCWXoYIid4phH0jqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.176.0/24
163.5.178.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:65:f5:34:67:0b:02:0f:a7:f1:18:b7:fc:40:48:70:98:99:
97:1e:7d:2f:00:6e:7d:dc:ac:3c:c1:b7:9c:48:af:c3:6e:90:
94:12:e9:73:40:ca:99:f7:95:05:b2:97:97:13:e8:d4:88:d9:
f8:ae:5e:65:01:53:25:bf:4b:2a:ac:b2:32:1f:40:2d:6c:05:
f4:be:d1:1c:39:45:29:d3:c4:ca:98:09:09:0f:c9:50:11:77:
31:4e:2b:dd:a9:5c:ee:1a:7e:cc:41:1c:fa:ca:47:21:49:a8:
f7:ac:7c:b2:8f:cd:8e:2d:c0:13:5a:8d:53:fe:36:1f:b4:1a:
99:a2:2d:07:fa:4f:21:e8:c9:57:65:f1:81:b8:09:1c:b1:b7:
d1:5c:e7:72:dd:a7:36:9d:a6:aa:51:56:38:c5:f8:e7:d1:1f:
29:40:df:03:02:74:95:84:e1:dc:c4:9a:22:99:d9:5d:8f:d6:
ff:c8:dc:82:d8:c4:eb:38:fa:92:8b:27:db:43:9f:0f:6d:86:
40:5c:18:5a:54:5e:45:6b:c4:5a:cb:c6:1e:00:97:f3:d3:2a:
e0:ab:c5:91:a2:64:74:b4:ee:94:01:13:2c:b7:dd:62:37:2e:
de:af:ce:60:4e:20:f5:da:27:0a:24:c1:92:2c:64:7f:b0:c2:
01:a0:5e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:09 2023 by rpki-client on console-ams.rpki-client.org