Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/K1nKTdnGYxJYE-W5QgnqxX0tJSw.roa
File: K1nKTdnGYxJYE-W5QgnqxX0tJSw.roa (raw, json)
Hash identifier: fdNvpiWQve5bXCxZN5erddL+aH4i7TIz5JqERyceMcc=
Subject key identifier: 2B:59:CA:4D:D9:C6:63:12:58:13:E5:B9:42:09:EA:C5:7D:2D:25:2C
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01830D1E5618B2A85067C2DF5C0D71A267C2
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/K1nKTdnGYxJYE-W5QgnqxX0tJSw.roa
Signing time: Mon 05 Sep 2022 10:07:15 +0000
ROA not before: Mon 05 Sep 2022 10:07:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398343
IP address blocks: 163.5.139.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:0d:1e:56:18:b2:a8:50:67:c2:df:5c:0d:71:a2:67:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 5 10:07:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2b59ca4dd9c663125813e5b94209eac57d2d252c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a1:22:bb:2b:3d:5d:8b:06:00:a6:f4:67:3a:
3a:2a:dd:58:4a:66:2f:4c:b2:b0:75:4f:26:b9:01:
ec:95:f4:09:2b:42:0d:89:b2:73:94:44:eb:fc:10:
8d:76:03:1f:9e:be:82:6c:d1:7d:15:76:e7:0b:73:
b5:58:58:de:3c:f5:b4:9a:94:80:a4:52:46:61:73:
c2:79:12:21:90:ad:a7:d0:ac:d3:8a:9e:f0:93:b8:
11:fd:4c:bf:0f:41:7f:11:a3:06:30:78:1c:62:81:
d6:8a:5c:fd:2f:13:9f:5b:db:cc:42:d6:75:cf:76:
c0:1a:9b:48:4c:7f:22:b7:0b:8d:b7:92:b5:c0:42:
a9:17:2a:01:54:f0:d0:46:41:98:cc:39:2c:63:9c:
19:f4:38:d3:dd:c5:b8:a5:ac:4c:c0:04:ce:93:54:
e8:9b:f3:71:5c:e6:a8:38:5f:d8:7b:f1:4e:6b:2c:
4c:20:7c:00:d3:57:cf:25:00:30:a3:b3:73:e5:d3:
1a:8e:49:bd:23:2d:a7:bb:69:b2:63:5d:83:79:0d:
26:3e:8d:1e:9c:36:94:21:82:06:90:06:2e:39:35:
f1:f7:2b:be:c1:0b:d1:32:06:ca:25:0b:be:32:c7:
ca:d1:94:4d:35:99:48:c0:e7:f7:58:42:6c:fd:78:
12:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:59:CA:4D:D9:C6:63:12:58:13:E5:B9:42:09:EA:C5:7D:2D:25:2C
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/K1nKTdnGYxJYE-W5QgnqxX0tJSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.138.0/23
163.5.151.0/24
163.5.248.0/24
Signature Algorithm: sha256WithRSAEncryption
33:af:36:bf:47:ff:aa:0b:d3:0e:a1:52:74:a8:d4:b4:d2:a4:
f0:77:f8:f5:cd:85:a9:fb:63:3e:f6:1e:57:99:c3:89:36:82:
ab:69:b0:39:4d:36:36:b2:95:2a:a6:70:67:a4:68:bf:df:41:
70:7d:36:46:13:07:f7:c3:fe:23:f1:ef:f5:ca:e4:06:86:79:
35:1d:27:d5:9c:85:6e:ee:d1:0e:1f:6b:4c:81:93:8b:5f:38:
62:87:5a:a8:49:fb:12:30:fb:b3:8e:13:77:55:8b:25:ee:d9:
3a:a5:67:bb:9c:6d:45:7f:7b:32:b3:a3:bb:55:5f:13:b9:5e:
2a:d9:a5:af:01:78:07:22:64:fd:ea:f1:a2:fd:9e:3c:dc:a3:
26:1a:1f:24:19:67:04:66:ef:4b:a8:3a:4e:f0:ca:c4:f1:b4:
b6:f3:e0:b6:87:6c:9b:8c:41:29:ff:4a:d2:49:52:6f:95:50:
73:43:f8:57:bf:84:15:fa:95:4b:54:a8:13:99:ea:83:41:2c:
d1:d0:93:20:1d:3e:88:e6:a5:0b:b7:1e:04:a8:0b:f4:75:2f:
f8:53:95:19:03:1d:45:b4:64:37:99:d9:14:0c:bd:d8:3e:d4:
e2:85:7c:c1:be:c5:86:58:a4:9c:fd:62:43:d7:d0:bb:fd:47:
16:52:33:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:09 2023 by rpki-client on console-ams.rpki-client.org