Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/OWOHCFCo8dleCq3CmD3Up0_oS5g.roa
File: OWOHCFCo8dleCq3CmD3Up0_oS5g.roa (raw, json)
Hash identifier: Bkeo8HPvOazypof/cy0FqwAm60EmP5aO7cfbpVkm0/I=
Subject key identifier: 39:63:87:08:50:A8:F1:D9:5E:0A:AD:C2:98:3D:D4:A7:4F:E8:4B:98
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0183C7F1D10DDC7FF9C73F88B0A5C16CD8D1
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/OWOHCFCo8dleCq3CmD3Up0_oS5g.roa
Signing time: Tue 11 Oct 2022 16:47:37 +0000
ROA not before: Tue 11 Oct 2022 16:47:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 63023
IP address blocks: 163.5.79.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c7:f1:d1:0d:dc:7f:f9:c7:3f:88:b0:a5:c1:6c:d8:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 11 16:47:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3963870850a8f1d95e0aadc2983dd4a74fe84b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:28:6e:4b:88:9e:c2:4c:6f:54:d6:ea:66:e8:
ae:b5:40:78:82:2a:62:19:46:6c:d1:c6:ce:76:28:
fb:db:28:64:c8:1e:d9:bf:2e:09:9e:4a:85:e9:b6:
88:cf:bd:5e:24:43:88:b5:f1:b2:0c:82:3f:1c:52:
b6:5d:25:9b:6e:7b:c6:f3:e2:03:2f:8e:a0:15:56:
5e:34:93:a8:8c:5f:62:96:2f:e3:06:09:b3:33:f5:
67:45:82:00:94:ea:c5:04:fb:14:66:ab:c2:2d:28:
72:96:2d:73:38:c0:39:f4:a4:04:c6:35:7a:57:e8:
1e:ca:d1:e1:9f:28:2e:51:52:1d:17:18:5c:ad:ca:
8a:01:9e:87:ae:2b:e8:88:9a:1e:3b:9d:93:22:17:
68:42:23:85:18:7f:dc:40:c9:34:93:c1:c1:7c:96:
f2:6b:c4:b1:cc:0d:34:3f:ca:53:96:96:6b:76:e2:
c8:bf:aa:fb:67:ff:3a:81:f2:43:28:23:d2:c5:73:
30:60:59:0d:8a:77:8e:4f:50:58:f9:bf:17:19:2c:
56:d1:0b:29:a8:1f:d7:5f:20:1b:ac:89:1d:72:56:
9b:b3:7d:85:a2:3f:7b:7e:1b:a7:e6:5c:34:03:b9:
2f:6d:91:76:06:d7:5b:64:fd:e2:63:52:0c:2d:e8:
09:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:63:87:08:50:A8:F1:D9:5E:0A:AD:C2:98:3D:D4:A7:4F:E8:4B:98
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/OWOHCFCo8dleCq3CmD3Up0_oS5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.79.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:f7:6d:ec:c0:26:88:80:15:4e:ef:c0:e6:6b:0f:07:7b:2d:
f6:c8:13:72:8c:35:99:f5:e1:30:15:1d:d0:73:fb:a4:10:7c:
9e:ac:96:37:b6:1e:b6:7d:cb:38:0e:3b:1f:6a:52:57:87:4c:
db:45:74:0f:9d:de:1c:92:50:b8:56:b5:f3:c2:d8:7c:4d:f0:
f3:21:7f:38:d9:da:e4:c1:17:23:a1:70:c1:c3:70:2d:d9:c8:
a4:96:10:8e:6d:41:77:a3:46:8a:e7:4d:32:51:c8:cb:dd:3b:
75:70:da:f3:f9:9a:5f:cf:93:78:7c:59:97:bb:0f:3a:b6:91:
5c:98:d0:58:f7:d9:0b:cd:bd:4f:c1:03:19:9a:d8:bc:76:80:
bb:cf:ee:9f:21:79:8c:b9:49:8b:60:0b:86:92:62:c0:98:71:
d6:f3:7c:ec:51:ad:17:33:a0:38:09:aa:65:d3:08:21:85:85:
5e:9a:f6:64:38:55:e3:21:70:68:f0:63:31:e2:be:92:84:13:
74:90:d3:4b:ce:7f:6d:02:8a:44:47:34:33:da:aa:80:08:bb:
fb:7d:bf:a7:fa:b9:93:18:e1:7e:ae:bd:d1:12:8e:04:01:ef:
d3:e8:62:b6:9b:94:82:d5:9a:f4:76:c2:a6:9c:a7:ec:a3:5a:
8c:ac:b5:c7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYPH8dEN3H/5xz+IsKXBbNjRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjIxMDExMTY0NzM3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTYzODcwODUwYThmMWQ5NWUwYWFkYzI5ODNkZDRhNzRmZTg0Yjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsihuS4iewkxvVNbqZuiutUB4gipi
GUZs0cbOdij72yhkyB7Zvy4JnkqF6baIz71eJEOItfGyDII/HFK2XSWbbnvG8+ID
L46gFVZeNJOojF9ili/jBgmzM/VnRYIAlOrFBPsUZqvCLShyli1zOMA59KQExjV6
V+geytHhnyguUVIdFxhcrcqKAZ6HrivoiJoeO52TIhdoQiOFGH/cQMk0k8HBfJby
a8SxzA00P8pTlpZrduLIv6r7Z/86gfJDKCPSxXMwYFkNineOT1BY+b8XGSxW0Qsp
qB/XXyAbrIkdclabs32Foj97fhun5lw0A7kvbZF2BtdbZP3iY1IMLegJfwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDljhwhQqPHZXgqtwpg91KdP6EuYMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvT1dPSENGQ284ZGxlQ3EzQ21EM1VwMF9vUzVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowVPMA0G
CSqGSIb3DQEBCwUAA4IBAQAq923swCaIgBVO78Dmaw8Hey32yBNyjDWZ9eEwFR3Q
c/ukEHyerJY3th62fcs4DjsfalJXh0zbRXQPnd4cklC4VrXzwth8TfDzIX842drk
wRcjoXDBw3At2ciklhCObUF3o0aK500yUcjL3Tt1cNrz+Zpfz5N4fFmXuw86tpFc
mNBY99kLzb1PwQMZmti8doC7z+6fIXmMuUmLYAuGkmLAmHHW83zsUa0XM6A4Capl
0wghhYVemvZkOFXjIXBo8GMx4r6ShBN0kNNLzn9tAopERzQz2qqACLv7fb+n+rmT
GOF+rr3REo4EAe/T6GK2m5SC1Zr0dsKmnKfso1qMrLXH
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:20 2023 by rpki-client on console-fra.rpki-client.org