Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/QGLemwYsQx1S0NM0HzHqz-w24cw.roa
File: QGLemwYsQx1S0NM0HzHqz-w24cw.roa (raw, json)
Hash identifier: BUbUD4BLVT8a1PAIYPSBjocbosMBD4gP+zNLZd0/WIQ=
Subject key identifier: 40:62:DE:9B:06:2C:43:1D:52:D0:D3:34:1F:31:EA:CF:EC:36:E1:CC
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01843965542480DB533B8DF441816BCC2D0A
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/QGLemwYsQx1S0NM0HzHqz-w24cw.roa
Signing time: Wed 02 Nov 2022 17:30:52 +0000
ROA not before: Wed 02 Nov 2022 17:30:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 163.5.215.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:39:65:54:24:80:db:53:3b:8d:f4:41:81:6b:cc:2d:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Nov 2 17:30:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4062de9b062c431d52d0d3341f31eacfec36e1cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:37:ef:69:8d:13:ab:83:e6:73:30:9a:36:9a:
94:6f:58:c2:d9:cd:c8:7b:fe:46:86:66:b1:c8:a4:
7a:84:04:b2:78:33:a3:ae:68:f0:b7:7a:bb:e0:b5:
97:68:b2:6c:4e:dd:0d:2c:13:9d:a3:e9:77:8b:c8:
93:db:34:4f:a2:cb:36:f1:89:8c:ba:5e:31:61:93:
bb:05:c9:7f:e5:1d:9b:b5:a0:13:05:6d:7b:cd:0f:
2b:2e:45:8e:6c:72:04:8f:14:f1:94:a3:8d:fc:fd:
0e:4c:ba:37:c5:39:b6:2c:ca:6f:e9:2d:32:a6:ee:
ba:46:5a:b8:97:8f:97:86:22:cb:d6:96:d6:29:a9:
66:0a:9c:97:ea:ae:f8:36:50:47:70:8d:21:a1:4b:
b5:6f:ac:c7:47:8f:71:72:de:2b:1c:14:3b:bb:41:
2d:93:b9:8b:c1:e1:b2:1f:11:81:d1:1b:ab:7c:4a:
eb:c9:1a:74:58:ed:e8:3a:67:bf:82:ca:6b:e4:ae:
17:00:20:70:e4:8a:9b:47:93:5c:4f:49:8d:f4:97:
1c:64:77:68:3f:c9:04:26:6d:9a:47:9c:48:b5:00:
6c:80:79:a1:99:a7:ff:e2:d3:34:0b:5a:f8:6f:5a:
7f:04:f3:09:8f:b7:b9:32:d0:d5:29:31:41:8c:14:
1c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:62:DE:9B:06:2C:43:1D:52:D0:D3:34:1F:31:EA:CF:EC:36:E1:CC
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/QGLemwYsQx1S0NM0HzHqz-w24cw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.163.0/24
163.5.215.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:dd:7f:04:3c:66:5a:39:47:4b:55:4a:8c:c0:b3:43:3a:61:
35:84:71:0e:c9:97:2a:dd:74:34:94:fb:eb:e4:bb:95:c3:e9:
33:ff:3f:bd:72:02:ab:06:26:c3:67:50:b7:dd:28:be:c5:2f:
e4:eb:33:c7:c6:55:36:4b:4a:1a:b6:fb:f5:22:3e:f5:08:4d:
2e:47:fc:e5:44:d8:dc:f0:89:ac:0a:8f:31:ab:44:d5:1c:6c:
bb:25:49:a4:8a:b1:54:b1:a9:c7:cc:33:8e:04:e8:c5:e7:4e:
f5:d4:9d:5c:ef:c3:d1:9b:27:6c:6a:13:23:32:81:4c:c2:85:
ed:6b:85:7c:f2:b9:34:a2:4f:12:74:70:44:5f:76:02:1d:b9:
d5:4f:80:e0:a0:a9:54:45:d7:9c:15:60:be:51:9a:fb:d8:c2:
0c:c4:63:c4:de:96:2b:8c:7b:e9:03:2c:11:fa:ca:1d:48:76:
81:c8:40:5c:63:eb:05:0b:fd:a2:1e:89:73:74:9e:9e:73:28:
83:6f:10:93:35:d0:69:f1:d0:92:c3:db:c9:45:de:55:c3:d0:
ad:ac:8d:8d:73:db:b4:85:03:f4:e0:f5:26:6a:86:2c:71:7e:
52:37:89:33:da:70:2e:fb:d4:56:4f:c1:94:6a:18:df:23:b5:
7b:1e:a1:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:20 2023 by rpki-client on console-fra.rpki-client.org