Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/LCm8MNcmW9cyb2qnWFiFhz6nkl8.roa
File: LCm8MNcmW9cyb2qnWFiFhz6nkl8.roa (raw, json)
Hash identifier: 2jyNVitr1iXhEq1SwH3UvFLu6gPk/n71R/3sqe4a+wo=
Subject key identifier: 2C:29:BC:30:D7:26:5B:D7:32:6F:6A:A7:58:58:85:87:3E:A7:92:5F
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0184A437941FB30C69A72D4C7B7251914F52
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/LCm8MNcmW9cyb2qnWFiFhz6nkl8.roa
Signing time: Wed 23 Nov 2022 11:20:16 +0000
ROA not before: Wed 23 Nov 2022 11:20:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211936
IP address blocks: 163.5.225.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a4:37:94:1f:b3:0c:69:a7:2d:4c:7b:72:51:91:4f:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Nov 23 11:20:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c29bc30d7265bd7326f6aa7585885873ea7925f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:aa:e4:2b:d6:73:72:e4:f1:01:9f:74:95:aa:
b0:43:e6:0a:95:65:df:38:c4:23:b5:6f:43:e1:e0:
d1:aa:0d:32:09:d4:73:b9:10:77:85:1a:2b:91:8d:
0e:ae:e5:14:4c:dc:56:1e:99:18:3a:b6:f5:13:6d:
4a:a3:ed:14:4d:3c:a9:71:70:64:e1:4f:da:30:25:
2e:3b:cb:a0:eb:e0:fe:77:90:3b:e6:5e:54:9d:71:
e8:10:d5:c1:50:92:4f:6f:54:b5:14:e8:43:b4:9b:
9f:7c:f4:24:80:1e:08:8a:59:d8:85:7c:52:74:64:
6a:63:bc:dc:23:49:d1:f9:f4:46:c4:8d:67:20:6f:
b5:8e:d8:56:4e:09:4e:fc:c5:f3:b9:fd:ef:6d:44:
95:21:f6:51:d5:84:7e:b2:75:4d:ac:18:7a:5b:5e:
69:4a:61:9f:2c:16:a8:7c:df:c6:ad:19:31:8a:19:
97:ed:1a:5e:e4:f9:4a:1f:84:27:b7:cf:92:6b:59:
2b:1a:6f:49:a1:73:a9:c5:5c:85:68:aa:a5:a3:c1:
d5:f0:18:4f:46:84:d6:7f:70:e7:0a:1a:df:3c:52:
e0:bc:2b:b6:ca:17:b0:32:aa:38:99:35:99:48:79:
27:52:ec:73:8f:39:ee:85:9e:d9:28:92:da:17:6e:
73:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:29:BC:30:D7:26:5B:D7:32:6F:6A:A7:58:58:85:87:3E:A7:92:5F
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/LCm8MNcmW9cyb2qnWFiFhz6nkl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.225.0/24
Signature Algorithm: sha256WithRSAEncryption
73:22:20:60:1e:03:24:a2:fc:c8:69:37:25:97:63:e8:1f:67:
56:39:9f:01:44:72:ea:b8:6a:4b:cf:95:b7:00:8c:39:59:10:
0c:1f:a8:93:ed:43:9b:05:74:66:67:b6:73:af:f2:b1:51:e2:
53:07:7f:d4:fc:b2:f9:fc:e2:6b:02:a8:a0:7d:33:67:35:11:
8e:43:2a:0e:75:01:4c:b3:7a:79:54:98:0b:18:b4:39:f2:00:
69:91:44:a9:6e:26:22:51:1f:d9:52:99:3b:a7:6c:25:fa:d8:
ae:57:09:65:85:bb:3b:75:aa:f6:ec:c4:a1:f1:57:3d:2c:96:
1c:24:f7:57:ad:b6:9b:1e:09:db:8e:78:16:f5:b4:b7:82:c2:
c7:cf:eb:9f:4a:92:ba:ea:0a:91:4d:f1:5c:7b:0b:7c:0c:b4:
bb:59:87:e2:0d:1c:d8:5c:e9:05:29:1a:41:ab:6d:d2:f4:28:
e2:c1:51:94:4f:c9:a9:da:30:9b:40:53:8f:b9:c1:7a:be:47:
6b:45:af:41:d4:60:48:1f:6e:ac:3d:18:37:aa:e3:94:52:4e:
f8:47:e9:08:95:13:c5:62:b5:b3:f7:04:90:3b:0d:4e:c0:48:
e9:26:24:4b:57:95:33:f9:3c:09:d9:a1:25:d6:6e:d1:30:44:
13:cc:6e:39
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYSkN5Qfswxppy1Me3JRkU9SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjIxMTIzMTEyMDE2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzI5YmMzMGQ3MjY1YmQ3MzI2ZjZhYTc1ODU4ODU4NzNlYTc5MjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqrkK9ZzcuTxAZ90laqwQ+YKlWXf
OMQjtW9D4eDRqg0yCdRzuRB3hRorkY0OruUUTNxWHpkYOrb1E21Ko+0UTTypcXBk
4U/aMCUuO8ug6+D+d5A75l5UnXHoENXBUJJPb1S1FOhDtJuffPQkgB4IilnYhXxS
dGRqY7zcI0nR+fRGxI1nIG+1jthWTglO/MXzuf3vbUSVIfZR1YR+snVNrBh6W15p
SmGfLBaofN/GrRkxihmX7Rpe5PlKH4Qnt8+Sa1krGm9JoXOpxVyFaKqlo8HV8BhP
RoTWf3DnChrfPFLgvCu2yhewMqo4mTWZSHknUuxzjznuhZ7ZKJLaF25z6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCwpvDDXJlvXMm9qp1hYhYc+p5JfMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvTENtOE1OY21XOWN5YjJxbldGaUZoejZua2w4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowXhMA0G
CSqGSIb3DQEBCwUAA4IBAQBzIiBgHgMkovzIaTcll2PoH2dWOZ8BRHLquGpLz5W3
AIw5WRAMH6iT7UObBXRmZ7Zzr/KxUeJTB3/U/LL5/OJrAqigfTNnNRGOQyoOdQFM
s3p5VJgLGLQ58gBpkUSpbiYiUR/ZUpk7p2wl+tiuVwllhbs7dar27MSh8Vc9LJYc
JPdXrbabHgnbjngW9bS3gsLHz+ufSpK66gqRTfFcewt8DLS7WYfiDRzYXOkFKRpB
q23S9CjiwVGUT8mp2jCbQFOPucF6vkdrRa9B1GBIH26sPRg3quOUUk74R+kIlRPF
YrWz9wSQOw1OwEjpJiRLV5Uz+TwJ2aEl1m7RMEQTzG45
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:09 2023 by rpki-client on console-ams.rpki-client.org