Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/JsfaBdOBp17x2lWpH05JHKsJD60.roa
File: JsfaBdOBp17x2lWpH05JHKsJD60.roa (raw, json)
Hash identifier: VD/QA9fX3UVLK3Zb9TptV9dMH1wMSwGnBdczknV6DlA=
Subject key identifier: 26:C7:DA:05:D3:81:A7:5E:F1:DA:55:A9:1F:4E:49:1C:AB:09:0F:AD
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01840E1F39B15407E57CDEA3FE16CFCBA8FB
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/JsfaBdOBp17x2lWpH05JHKsJD60.roa
Signing time: Tue 25 Oct 2022 07:50:38 +0000
ROA not before: Tue 25 Oct 2022 07:50:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43043
IP address blocks: 163.5.186.0/24 maxlen: 24
163.5.137.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0e:1f:39:b1:54:07:e5:7c:de:a3:fe:16:cf:cb:a8:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 25 07:50:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=26c7da05d381a75ef1da55a91f4e491cab090fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4f:76:74:92:ac:ec:88:7a:d0:72:4d:82:b7:
99:79:4f:0c:df:59:44:fb:c5:39:d0:0e:60:96:c3:
6e:c8:41:47:55:7f:1b:d2:75:0f:80:ad:fe:be:c0:
93:14:13:77:a5:a3:22:c0:8e:26:99:c0:f0:84:45:
9f:d8:77:89:38:4a:10:dd:12:e1:c8:f2:e4:4f:34:
2b:40:15:f7:17:b0:2c:32:3d:5f:d3:c9:c3:0c:e3:
51:72:fd:21:6d:ea:18:8e:46:26:ae:36:f6:64:a5:
91:05:26:93:3b:1b:c9:ba:65:84:dd:52:e8:c6:1d:
da:57:cc:63:23:28:6b:13:9d:8c:fa:7e:08:f1:21:
de:4c:72:6c:af:0d:b4:9e:74:03:a5:25:78:74:6d:
4e:be:84:84:c2:72:e9:93:28:bc:3a:41:f0:7a:f0:
8d:d6:2b:ea:5d:a2:ae:ac:a4:f6:81:4e:34:34:1d:
b4:d9:3e:5d:81:25:07:db:54:da:9a:e1:c4:6d:a2:
84:de:a3:8a:73:a4:a7:a8:57:ab:fb:c2:67:05:ce:
cb:f7:f1:a9:62:55:dc:bf:8b:69:6d:3e:80:9e:b8:
0e:4f:cb:d8:23:41:9b:18:d6:f6:1a:fa:6b:0f:9f:
18:d5:a6:05:c6:6f:56:cf:dc:41:08:a1:b5:90:dc:
fb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C7:DA:05:D3:81:A7:5E:F1:DA:55:A9:1F:4E:49:1C:AB:09:0F:AD
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/JsfaBdOBp17x2lWpH05JHKsJD60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.137.0/24
163.5.186.0/24
Signature Algorithm: sha256WithRSAEncryption
02:c0:67:aa:90:79:05:5f:46:2d:a1:03:d5:9c:d4:42:eb:98:
ab:7d:04:35:bc:3c:6e:03:14:55:1b:39:11:98:dc:9f:08:12:
40:de:17:a4:47:ea:db:d5:c9:50:6f:7e:22:40:43:94:78:b3:
7c:4e:27:dd:be:11:2c:55:42:ff:bd:e9:8f:f5:10:fc:1c:be:
13:82:b0:32:ce:61:95:5f:e5:85:be:7f:86:e3:08:00:fb:18:
48:d6:5d:28:10:c1:b2:bc:45:a8:2b:3c:5d:43:1a:31:fc:11:
77:8f:38:ab:3f:79:c0:86:40:c2:dc:07:61:c1:ee:0b:b2:26:
1a:17:42:e8:e0:08:65:07:28:14:7b:3a:27:a1:c3:6e:49:d0:
da:55:ba:1b:ba:3d:12:4f:e2:b3:d5:47:6d:d5:e9:f5:03:03:
7d:9f:8d:c7:89:b2:76:8d:f4:8d:e2:21:62:ef:e3:78:ef:f9:
1d:76:13:a6:7b:58:2e:fc:b7:76:f1:81:7d:01:8f:92:37:f7:
a5:c0:70:b3:0f:7e:89:63:c6:77:74:07:75:00:6d:5b:62:37:
8a:b3:2a:cb:5a:82:ed:7d:c4:a3:d4:4f:be:cf:ba:df:0c:7b:
21:8b:b5:de:52:f3:68:a0:ad:6e:07:79:0f:9b:ff:db:03:f1:
9f:96:45:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:09 2023 by rpki-client on console-ams.rpki-client.org