Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/KVMPfQz1cvAbbN1JsUUvNDA1KJs.roa
File: KVMPfQz1cvAbbN1JsUUvNDA1KJs.roa (raw, json)
Hash identifier: niQvczEzOol21++UlOcXOPvLIEzMkpmRucKSXR9r3Rk=
Subject key identifier: 29:53:0F:7D:0C:F5:72:F0:1B:6C:DD:49:B1:45:2F:34:30:35:28:9B
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0183B980AE5DFED79C9DB80DFA8AE9E22E4F
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/KVMPfQz1cvAbbN1JsUUvNDA1KJs.roa
Signing time: Sat 08 Oct 2022 21:29:21 +0000
ROA not before: Sat 08 Oct 2022 21:29:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140947
IP address blocks: 163.5.211.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b9:80:ae:5d:fe:d7:9c:9d:b8:0d:fa:8a:e9:e2:2e:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 8 21:29:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=29530f7d0cf572f01b6cdd49b1452f343035289b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b4:76:43:5c:1f:63:1d:45:a2:5a:69:2b:bc:
c6:62:b7:c6:7d:d4:a2:38:99:98:a5:ac:66:f6:35:
24:43:35:68:11:01:bf:b2:51:89:a7:b7:dc:fc:e4:
29:2a:83:a7:b5:a2:39:95:99:c6:7e:f5:c2:0a:d0:
0f:30:b2:8a:9b:de:98:44:49:ea:4f:97:c3:45:eb:
fb:34:23:3d:4f:af:ff:ec:51:60:16:1e:2f:25:a8:
ee:da:f8:ba:85:55:82:6e:26:06:6b:a2:87:43:48:
00:97:35:2e:96:3e:33:64:be:2f:34:ca:b1:01:20:
70:bc:6b:54:33:49:94:82:9e:ed:1f:09:ce:cc:32:
ba:2f:b1:16:b7:b6:2b:43:3f:9f:ba:ac:5d:dc:b3:
76:3e:7d:0d:df:62:d2:67:fe:62:e3:63:1e:c5:ef:
4f:b3:b0:c1:24:44:61:19:bc:1d:b6:56:d9:2c:b8:
6b:80:a5:e5:18:1a:fc:2e:42:51:65:f7:c8:64:4d:
38:d8:5a:f3:f4:95:f6:dd:fa:93:91:1b:d2:bc:24:
57:37:45:9c:21:cd:87:ec:1f:4a:2d:46:01:df:11:
c5:4b:cb:81:ab:8c:83:3d:8d:58:fa:c5:8e:35:50:
8f:3a:42:3b:83:38:17:15:ec:50:97:14:5a:21:75:
58:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:53:0F:7D:0C:F5:72:F0:1B:6C:DD:49:B1:45:2F:34:30:35:28:9B
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/KVMPfQz1cvAbbN1JsUUvNDA1KJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.211.0/24
Signature Algorithm: sha256WithRSAEncryption
89:97:6f:54:f4:2f:4a:7b:5a:0c:03:8d:d8:d3:4b:57:40:1c:
d5:ea:e2:81:8d:d8:4c:c7:33:e1:f3:db:48:d8:f6:1b:13:ba:
1d:98:d8:ec:7b:c4:87:bf:98:a7:5b:b3:72:f4:66:0b:9f:5e:
2a:b7:6b:a6:cf:44:00:44:a2:ba:93:de:fe:3e:b1:1b:3d:5f:
3a:f3:a9:63:29:53:e3:bb:47:41:be:f0:71:d1:c1:79:82:4a:
94:26:63:15:04:d3:a3:24:59:dd:74:ba:24:ff:02:6b:53:fa:
25:74:60:bc:34:1f:4f:fc:1f:d7:34:de:e0:30:a2:3c:92:c0:
47:a6:c1:44:b2:eb:10:1e:22:71:00:fa:ce:d4:16:d6:da:20:
bd:1b:6e:98:0e:ab:d0:cf:5f:3f:e5:f4:a7:69:ec:d3:1f:d7:
4e:4a:56:f1:d9:96:e4:ff:e8:01:bd:45:e9:77:54:2b:3f:6c:
dd:1f:b2:54:23:84:ff:d1:af:d1:eb:1d:e5:cc:39:a7:3b:48:
46:f9:71:09:73:d9:37:df:8a:30:0b:44:04:03:0e:2a:52:3f:
46:4b:45:2a:54:bb:61:7a:6f:83:ec:f1:a1:46:7a:c1:9f:c2:
4c:92:66:e6:b5:88:8f:85:cf:2a:2f:28:9e:8b:2e:e5:99:40:
cc:30:f4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:09 2023 by rpki-client on console-ams.rpki-client.org