Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/MrMBQcE6ySU6U3CDAtpUa78VymU.roa
File: MrMBQcE6ySU6U3CDAtpUa78VymU.roa (raw, json)
Hash identifier: UttZ/23DeaMZF03AeWYEMoJ0Jnn0RRwjHGBI1DINp88=
Subject key identifier: 32:B3:01:41:C1:3A:C9:25:3A:53:70:83:02:DA:54:6B:BF:15:CA:65
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018418C7F2B4D9764374EC53FDFF195315CF
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/MrMBQcE6ySU6U3CDAtpUa78VymU.roa
Signing time: Thu 27 Oct 2022 09:31:07 +0000
ROA not before: Thu 27 Oct 2022 09:31:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14445
IP address blocks: 163.5.174.0/24 maxlen: 24
163.5.185.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.194.0/24 maxlen: 24
163.5.115.0/24 maxlen: 24
163.5.171.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:18:c7:f2:b4:d9:76:43:74:ec:53:fd:ff:19:53:15:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 27 09:31:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=32b30141c13ac9253a53708302da546bbf15ca65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a3:21:39:f9:ae:4e:ff:19:3a:e0:81:5a:80:
b8:ca:b5:29:86:c2:89:d7:8e:6a:1a:7e:ac:d4:28:
89:e6:26:7a:29:1a:64:56:67:58:cc:a3:ee:57:e5:
cc:1a:18:c9:18:c3:85:d8:a9:d6:a4:02:df:80:05:
d2:43:9b:54:ad:6d:9c:3d:e5:ad:8e:f8:5b:f4:2d:
c4:af:11:4d:4f:fa:bc:cc:3b:b7:9d:9b:96:cb:d2:
ba:8e:7e:9d:26:05:48:11:97:ad:a6:52:e6:b9:dd:
54:6c:ed:67:f5:60:7e:9e:40:4f:a0:25:79:fb:34:
9d:6d:7f:36:e1:10:ec:2c:5a:20:58:f7:d4:75:ba:
be:fc:e9:b3:1d:ee:aa:3c:31:a7:24:d9:dc:c5:2f:
15:db:86:ee:85:03:51:bc:e3:16:ba:60:e8:f3:14:
af:4a:1b:a7:92:3d:e6:52:db:63:cd:82:80:64:1d:
0c:f4:ce:ac:d3:37:d1:e4:da:7c:d9:0a:dc:e6:a2:
88:8b:f9:c6:d0:ae:eb:a0:29:23:27:30:e3:f6:fe:
db:66:75:77:70:b3:d1:a8:d5:fd:43:c7:8d:9a:60:
6a:bc:c8:41:51:3a:9e:d6:36:62:27:f4:f0:60:dc:
c1:7c:bc:69:aa:41:4a:e8:f8:db:1a:5e:2f:a3:18:
0e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B3:01:41:C1:3A:C9:25:3A:53:70:83:02:DA:54:6B:BF:15:CA:65
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/MrMBQcE6ySU6U3CDAtpUa78VymU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.115.0/24
163.5.170.0-163.5.172.255
163.5.174.0/24
163.5.185.0/24
163.5.194.0/24
163.5.198.0/24
Signature Algorithm: sha256WithRSAEncryption
27:40:c4:bf:fe:7a:a6:84:f5:40:a2:dd:b6:34:af:1b:af:aa:
a3:66:2b:b1:c5:40:15:34:e7:25:af:28:0d:7e:09:b6:0b:01:
89:44:10:ca:60:df:37:28:78:4f:39:5b:2f:b9:36:b5:a1:ac:
c6:e7:bd:e6:20:d5:31:2f:f3:d3:ea:70:06:6b:e8:f3:ba:5b:
2f:bb:00:2e:8d:00:3c:53:37:18:98:33:be:6f:59:55:63:c3:
d4:19:be:a7:5b:06:30:7c:36:91:44:30:77:cb:9b:c3:e6:26:
e6:a1:db:ca:dc:46:62:35:8f:e5:47:a0:4b:a9:bc:0d:3a:d7:
4b:17:70:35:f7:83:6c:c8:99:90:a9:7a:12:32:64:ec:57:2d:
84:9c:d8:34:22:7b:73:52:53:90:dc:b5:c5:1c:65:0c:5a:33:
f7:fe:b5:1b:07:9e:f9:64:94:68:23:ad:20:b1:fe:9f:df:4a:
a6:7f:f2:f1:a9:bc:4c:d2:8b:d4:47:70:9c:f2:57:cc:29:df:
de:3d:a1:88:30:d3:13:a8:3a:13:44:d2:9a:81:77:c7:6d:44:
6f:39:ec:0f:d5:ec:ea:71:4b:3c:72:41:93:0e:d2:9f:66:48:
ce:bb:03:15:24:8c:2a:be:ba:63:a8:1a:f5:c0:d5:4c:e1:40:
8b:7e:82:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:09 2023 by rpki-client on console-ams.rpki-client.org