Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/JreoTOFcRREWUZak4Yd6DwVWoWE.roa
File: JreoTOFcRREWUZak4Yd6DwVWoWE.roa (raw, json)
Hash identifier: dQ6y2KH/xVddSXAI9lUbqUE/cEfBCgMOulTus5WQg2Y=
Subject key identifier: 26:B7:A8:4C:E1:5C:45:11:16:51:96:A4:E1:87:7A:0F:05:56:A1:61
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0183EFE0D304ED7C5CE37E34534407E81A4B
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/JreoTOFcRREWUZak4Yd6DwVWoWE.roa
Signing time: Wed 19 Oct 2022 10:53:52 +0000
ROA not before: Wed 19 Oct 2022 10:53:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 64267
IP address blocks: 163.5.129.0/24 maxlen: 24
163.5.135.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ef:e0:d3:04:ed:7c:5c:e3:7e:34:53:44:07:e8:1a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 19 10:53:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=26b7a84ce15c4511165196a4e1877a0f0556a161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e0:7d:da:9f:e6:1f:45:e3:ff:c3:fd:c5:c9:
41:5e:09:62:35:61:32:0a:d2:1a:d9:6d:13:cb:6a:
79:1c:69:3d:99:2d:1d:e1:c1:ec:e5:96:59:8b:f5:
7a:53:a0:c6:35:5b:45:b6:59:17:1e:d9:6e:1c:80:
ab:81:52:98:57:7d:3b:4b:87:55:1a:68:11:a9:43:
ad:70:f0:6a:8f:6b:a1:51:45:b2:42:45:fa:61:2a:
d0:58:af:14:89:a9:0a:7e:be:19:15:cd:28:68:1d:
99:c3:4c:2e:e4:d4:2e:b3:38:d9:b4:b3:c5:ac:03:
f7:39:d7:7f:33:45:04:3f:76:f3:38:b2:46:23:bd:
70:87:67:1d:d5:be:d7:32:2b:74:03:b5:a3:22:62:
26:94:c5:22:ad:bd:2c:f5:98:f4:92:59:dd:ad:37:
d6:55:b4:73:4c:c9:db:3c:d4:a6:27:e6:9f:a7:78:
93:0b:95:72:dc:d9:ac:b8:41:af:77:8c:1d:48:72:
31:2e:ae:2d:d7:d2:c1:81:d0:6c:09:6d:0e:a9:9e:
7d:0e:7e:78:5d:ca:44:91:33:fe:4a:fb:41:a8:e3:
e7:50:49:30:5a:70:76:a4:b0:9b:35:82:8a:38:de:
9e:56:8f:2f:d7:78:a7:59:db:cf:23:15:97:64:98:
f8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B7:A8:4C:E1:5C:45:11:16:51:96:A4:E1:87:7A:0F:05:56:A1:61
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/JreoTOFcRREWUZak4Yd6DwVWoWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.129.0/24
163.5.134.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:0a:d4:1a:9c:14:22:0c:7e:f7:4c:27:24:d3:65:fd:2d:a9:
d6:bd:72:a2:fa:4b:9a:ef:1a:fb:36:99:f9:d0:e7:d8:df:f5:
98:6c:d9:39:a4:3a:4f:45:5a:04:ee:bd:89:37:0e:c1:b7:75:
b8:aa:3a:76:da:d1:1a:ca:f4:27:b5:44:45:08:90:30:fa:00:
07:1b:fe:0a:27:9e:f6:0a:5d:ed:13:4a:a6:f3:60:d2:0b:d1:
10:7f:88:8f:83:b3:a4:d6:12:cd:27:38:21:2c:0c:3a:c1:32:
dc:ea:0c:32:57:a8:ac:3a:2f:ed:49:b1:b7:54:b1:03:f8:dc:
0e:76:8a:14:dd:47:41:79:e3:5e:62:fd:07:7e:ce:cb:8d:8b:
88:43:dc:69:68:e4:62:e6:0b:43:89:f0:bd:0b:69:2c:44:65:
64:d7:36:82:10:a5:01:ea:a5:87:69:3f:af:2b:57:7f:4b:28:
7d:83:12:96:da:c7:c9:b1:2b:34:bc:8f:98:c1:df:a7:61:59:
73:af:a5:a0:23:f6:db:a9:9e:21:b6:aa:8d:0b:f5:dd:a9:c1:
c0:53:af:bd:e8:65:0b:33:f3:38:4b:ba:59:25:66:d0:99:c4:
a5:ee:a7:ed:d8:80:9c:cf:cd:23:0e:01:f1:1c:e0:b8:57:20:
9c:32:6f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:09 2023 by rpki-client on console-ams.rpki-client.org