Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/OK3PML6NIfNX0vguezxpTx_PUl8.roa
File: OK3PML6NIfNX0vguezxpTx_PUl8.roa (raw, json)
Hash identifier: iZZa99HKm1MS2LYpFFLHKQZbWOdT1mJ1+UgbFVo9IQA=
Subject key identifier: 38:AD:CF:30:BE:8D:21:F3:57:D2:F8:2E:7B:3C:69:4F:1F:CF:52:5F
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0183BC1E2262680AB8FEB6EA71F0AF94F715
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/OK3PML6NIfNX0vguezxpTx_PUl8.roa
Signing time: Sun 09 Oct 2022 09:40:34 +0000
ROA not before: Sun 09 Oct 2022 09:40:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 163.5.190.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:bc:1e:22:62:68:0a:b8:fe:b6:ea:71:f0:af:94:f7:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 9 09:40:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=38adcf30be8d21f357d2f82e7b3c694f1fcf525f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2e:e8:8f:a7:80:ce:9b:ec:fb:40:8c:ef:6c:
c0:4c:5b:de:0f:ae:24:85:12:a1:dc:70:12:51:80:
2e:9b:3e:14:84:13:6b:c0:d0:19:67:54:28:7b:61:
ed:3b:9c:56:b4:cf:87:bf:51:e9:f6:bb:9a:8b:57:
56:d7:14:0b:38:5b:12:03:3c:22:c1:e0:60:c4:57:
5b:38:ad:f6:48:a3:9e:22:39:d1:c0:3c:68:ce:cc:
cc:49:38:78:2b:c1:88:70:05:64:de:7e:a0:14:ae:
a1:7f:df:07:5c:10:7e:7d:da:d3:20:74:79:32:14:
5c:e2:d3:ad:ea:05:16:dc:8b:cc:ec:c5:15:b7:4e:
a4:69:b3:92:db:10:3a:b3:74:ce:89:be:4a:3a:f4:
8a:3f:f3:c8:fc:37:7c:24:ee:81:86:9f:2f:44:60:
02:6f:55:87:2f:40:d6:1a:b5:bb:e8:ef:64:8b:67:
4f:b7:58:8e:c5:31:44:b1:4b:8a:f5:bb:0a:00:51:
9d:ee:2c:a2:dd:ab:2a:3d:95:79:62:f2:c0:86:5c:
6a:8e:99:4e:35:fd:13:ee:1c:70:64:1a:e6:39:44:
0b:3e:30:46:32:a7:d8:97:98:3c:bd:8f:c6:9d:4e:
11:e2:3e:46:64:fb:f4:d1:30:7e:ee:40:98:68:a3:
97:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:AD:CF:30:BE:8D:21:F3:57:D2:F8:2E:7B:3C:69:4F:1F:CF:52:5F
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/OK3PML6NIfNX0vguezxpTx_PUl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.190.0/24
Signature Algorithm: sha256WithRSAEncryption
24:db:1f:dc:b1:f0:e1:72:fb:16:89:b2:ac:56:b6:59:76:d6:
b3:cd:03:42:64:56:eb:e5:1a:29:fe:de:8a:78:47:6b:b9:ff:
39:fe:3b:1a:f9:2d:b6:26:60:a9:fe:51:b5:69:5a:ad:68:d7:
7c:24:0d:5b:fb:99:16:ba:9f:c6:14:02:95:15:7f:65:7b:65:
cd:f7:73:34:d2:d7:09:b1:15:81:89:39:31:1c:91:3a:55:0a:
ac:82:7f:9a:ec:89:9f:ce:22:b0:91:69:42:a8:62:f9:56:23:
9a:b5:9c:c1:88:70:37:2a:06:af:cd:b3:7a:6c:89:a2:80:dc:
f4:13:86:d3:82:7f:ac:e5:f4:cf:f4:cf:0d:2c:dc:8a:ad:fa:
60:7f:13:aa:ff:e5:93:a0:44:31:8d:b2:53:89:1b:8b:f5:eb:
b3:90:54:9f:80:ab:9c:4d:48:b8:60:c6:70:98:5a:f7:15:2d:
30:b1:c3:da:06:8c:85:27:bd:ff:dc:93:0a:16:0a:7d:c6:cb:
f0:37:6f:a5:83:27:08:e6:3d:2f:6d:f1:9e:45:f5:e8:67:e4:
11:0f:9b:33:59:36:4c:41:e2:d9:91:99:bc:a8:b9:25:7f:84:
f0:d9:ab:c4:3c:9c:69:42:5e:5e:41:f2:a4:cc:8f:78:5f:71:
37:3b:55:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:09 2023 by rpki-client on console-ams.rpki-client.org