Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/O2gP2fxQdjzMXZhUk_1qbgSpHE4.roa
File: O2gP2fxQdjzMXZhUk_1qbgSpHE4.roa (raw, json)
Hash identifier: 00G1PAGns4q7vjYgnb+xJevUGUxfLmJCCrBO2PmBLx8=
Subject key identifier: 3B:68:0F:D9:FC:50:76:3C:CC:5D:98:54:93:FD:6A:6E:04:A9:1C:4E
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018288736C0D366C16D178AF64D33157A3F1
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/O2gP2fxQdjzMXZhUk_1qbgSpHE4.roa
Signing time: Wed 10 Aug 2022 15:50:41 +0000
ROA not before: Wed 10 Aug 2022 15:50:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 163.5.215.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:88:73:6c:0d:36:6c:16:d1:78:af:64:d3:31:57:a3:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 10 15:50:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3b680fd9fc50763ccc5d985493fd6a6e04a91c4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:78:0c:a9:c4:45:98:7b:16:fe:82:ff:e3:3b:
49:b2:ca:df:74:a0:dd:04:d6:b6:3b:38:f2:7e:97:
47:71:65:be:e6:da:66:70:00:54:98:b9:b9:a8:1d:
6f:56:f8:1f:04:37:0b:1b:24:63:1e:94:e6:a0:b0:
cf:b2:0d:02:8c:08:9b:c9:a9:67:6e:8f:aa:39:8f:
67:ab:e7:c6:32:ed:88:41:7e:b2:d0:e4:2a:2b:4b:
e7:4f:7b:68:fe:47:2c:b5:38:4a:ad:f4:29:85:01:
76:df:bb:bf:53:f6:14:87:15:85:88:fb:cb:ed:83:
52:d8:26:53:20:80:15:ae:98:12:8b:e3:9d:80:25:
fc:5e:f5:5e:6f:8c:dd:bc:af:4a:55:87:7e:72:c4:
e7:b0:da:45:3d:08:98:62:3b:e4:c3:61:22:5a:33:
18:b2:dc:0e:d1:54:a2:f1:7f:fe:b6:f6:c9:dc:f3:
95:5e:32:1c:cb:de:39:a3:09:2f:c1:b9:ce:62:10:
c1:ef:95:63:5c:b8:00:a6:3d:3b:8d:c2:97:28:42:
4c:08:7d:b6:5e:84:30:8c:94:c7:7c:2d:60:e7:dd:
cd:6a:47:6e:26:af:b7:92:1a:eb:d5:ea:4f:ae:2c:
a5:b7:65:d8:4a:d7:f2:76:ab:2b:74:3f:7b:56:53:
1d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:68:0F:D9:FC:50:76:3C:CC:5D:98:54:93:FD:6A:6E:04:A9:1C:4E
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/O2gP2fxQdjzMXZhUk_1qbgSpHE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.128.0/23
163.5.163.0/24
163.5.215.0/24
Signature Algorithm: sha256WithRSAEncryption
37:54:7a:49:54:da:0b:46:a5:67:32:d4:83:38:1a:7a:15:0f:
09:a5:30:5a:1d:02:3b:b5:a8:0c:d1:3a:a5:67:7b:2b:d6:a7:
dd:87:75:84:8a:7b:cb:47:6a:df:1d:1e:af:3a:d2:5e:b3:63:
bd:b6:41:2b:05:72:8f:af:32:ed:a9:a9:05:bc:bb:9a:aa:44:
8c:59:c3:73:d3:ca:3a:59:0e:3a:1b:88:61:44:c6:10:ac:79:
3c:1b:dc:10:91:94:70:20:db:df:9c:2d:6a:7f:a3:ae:70:f2:
71:11:ba:62:4a:e8:df:8e:2b:0c:31:ed:27:62:5e:f6:9e:3c:
fc:60:77:9d:98:96:33:af:06:b2:ad:ea:38:0c:b1:9c:cc:c8:
a0:3d:8d:71:b1:e5:c4:7a:cc:06:01:0e:a3:2c:3c:f3:c2:41:
3f:54:a0:73:a7:24:f9:66:40:58:77:86:c8:48:20:8d:4f:86:
cf:e9:bd:9c:ac:37:57:09:58:3d:a7:c3:a5:f6:af:f1:d1:d4:
ad:04:59:16:15:84:c1:27:44:b2:27:1f:9d:9d:cc:32:3f:07:
d9:5f:27:64:27:69:e4:73:93:44:a9:11:ad:56:bb:30:9e:24:
29:b0:d9:37:7e:48:24:32:a2:0e:f4:4d:9b:10:65:9d:36:51:
41:1a:d8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:20 2023 by rpki-client on console-fra.rpki-client.org