Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Lj5CYvQExYSVhOphr8yEX6NfmL4.roa
File: Lj5CYvQExYSVhOphr8yEX6NfmL4.roa (raw, json)
Hash identifier: FFTDLidAXgaAM47XylmrkYleYXeRC08LZgBbkB76hX4=
Subject key identifier: 2E:3E:42:62:F4:04:C5:84:95:84:EA:61:AF:CC:84:5F:A3:5F:98:BE
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0182F0337E86EBBF6B895F806747E635FB4E
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Lj5CYvQExYSVhOphr8yEX6NfmL4.roa
Signing time: Tue 30 Aug 2022 19:21:22 +0000
ROA not before: Tue 30 Aug 2022 19:21:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 46573
IP address blocks: 163.5.220.0/24 maxlen: 24
163.5.130.0/24 maxlen: 24
163.5.239.0/24 maxlen: 24
163.5.140.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f0:33:7e:86:eb:bf:6b:89:5f:80:67:47:e6:35:fb:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 30 19:21:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2e3e4262f404c5849584ea61afcc845fa35f98be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:69:7c:0f:c1:96:00:5a:c4:e4:29:67:19:67:
1e:08:34:aa:75:16:74:17:85:af:b4:28:90:e6:63:
a0:35:94:47:11:e6:6c:46:36:1b:41:5a:77:83:0d:
58:5c:05:49:5b:65:1b:08:d1:1b:7d:19:43:51:0f:
83:0c:e4:60:88:79:b4:26:5e:1f:d9:51:1f:e3:cb:
da:91:51:4a:bf:08:49:05:5a:6f:f7:fa:52:b5:23:
ae:46:6b:40:97:56:77:5b:6a:64:0a:22:f9:32:01:
22:b0:58:a1:99:c9:75:5c:bf:28:54:13:6e:09:0e:
a9:8d:4c:71:e6:dc:13:9a:39:11:12:25:ee:3e:fe:
b0:77:b5:4b:ed:4b:b3:22:8e:cd:e2:79:b0:f5:f0:
e4:66:98:97:05:24:a5:f4:74:fc:ea:f5:d7:2d:55:
22:e9:4b:48:b3:23:a1:fc:b5:7f:30:cf:de:78:9e:
1f:9a:7a:ef:cf:eb:09:1f:c9:fb:15:ee:15:2d:87:
38:e5:03:6e:ef:4e:15:95:a8:d9:4e:00:29:58:fd:
08:08:c5:60:c0:46:d2:15:8c:e9:5b:2d:46:33:34:
8b:39:3e:fb:d1:f2:6f:a3:7e:fa:9f:f8:1b:75:5c:
fd:97:58:e4:df:2e:25:ec:bc:94:d1:95:5d:57:7d:
56:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:3E:42:62:F4:04:C5:84:95:84:EA:61:AF:CC:84:5F:A3:5F:98:BE
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Lj5CYvQExYSVhOphr8yEX6NfmL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.130.0/24
163.5.140.0/24
163.5.220.0/24
163.5.239.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:a9:54:01:e1:2a:da:44:91:95:30:4e:48:37:19:39:a1:c4:
fa:48:99:e4:5f:e0:48:19:cb:9b:1b:6c:ad:62:5c:28:1b:e6:
3f:f5:fb:33:71:3f:78:eb:30:ae:a0:cb:b9:f1:ab:f2:02:7b:
52:ce:00:24:50:cb:ab:2b:09:47:cf:31:a0:73:de:eb:1c:c4:
23:51:d4:74:f0:34:1b:84:cb:93:34:52:11:eb:c7:61:cd:39:
32:c4:57:7d:e1:c9:1a:44:93:96:4a:86:91:3b:79:4f:a4:29:
5c:e9:95:af:cd:db:f8:54:e2:dc:03:81:9c:19:40:af:66:aa:
63:11:12:02:0f:44:cc:3f:3d:8a:86:f8:32:74:50:1e:06:37:
2d:71:7d:e6:1a:24:e7:de:4e:e4:8a:66:99:5e:29:0c:bb:fb:
2a:50:0f:13:a5:6f:70:03:01:68:07:b8:cd:f8:b1:83:88:0f:
0b:7b:88:3b:5e:c8:c7:5d:eb:82:b6:59:d9:a2:30:86:16:f5:
b7:3b:74:1c:f0:6c:c4:77:64:8c:da:aa:30:06:31:0a:6c:95:
2c:56:91:03:67:84:9c:71:e3:38:43:13:08:d2:c7:31:cf:58:
59:8b:a5:7b:c8:a5:b9:fe:14:e9:60:5d:ab:2f:ca:1f:fa:47:
9c:5c:7a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:09 2023 by rpki-client on console-ams.rpki-client.org