Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/QjMdYa2K5cCFhuV4350HlAQO8Lg.roa
File: QjMdYa2K5cCFhuV4350HlAQO8Lg.roa (raw, json)
Hash identifier: qMP35pPQvTj5g7tPVZbN1FxU6badGvzQXR1TFg+fDH0=
Subject key identifier: 42:33:1D:61:AD:8A:E5:C0:85:86:E5:78:DF:9D:07:94:04:0E:F0:B8
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01825863664F79866ECCBE7BA69D03950C35
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/QjMdYa2K5cCFhuV4350HlAQO8Lg.roa
Signing time: Mon 01 Aug 2022 07:51:25 +0000
ROA not before: Mon 01 Aug 2022 07:51:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7118
IP address blocks: 163.5.180.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:58:63:66:4f:79:86:6e:cc:be:7b:a6:9d:03:95:0c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 1 07:51:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=42331d61ad8ae5c08586e578df9d0794040ef0b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:06:d2:c9:ed:9a:77:60:50:dc:81:15:42:3e:
6b:59:6d:8d:fd:6d:90:a8:4c:e5:c7:25:c3:ac:e8:
74:85:18:e8:8f:84:1a:1a:54:8d:33:71:b3:20:84:
ef:2d:55:ee:03:9e:bf:10:3a:e2:dd:f3:e8:2a:8d:
93:dd:43:1e:d7:0f:4d:57:05:eb:50:f8:b7:ca:8f:
95:48:04:9f:86:11:86:53:98:cf:f0:60:39:2b:f4:
f7:82:47:b4:51:30:f6:93:57:93:c8:26:b5:e8:66:
c9:a8:41:b6:ac:d3:cf:34:8a:7a:92:92:97:7f:3d:
9e:c7:4b:6b:a8:21:2e:98:b9:2a:f9:f2:23:e3:90:
fa:39:b7:95:17:75:01:b6:5f:a3:6a:6a:5c:4b:df:
59:73:9b:5f:c4:6a:7b:db:f1:98:26:03:d7:d3:a3:
26:79:af:bd:a8:37:bf:8b:b3:ae:a5:e3:75:79:3f:
81:79:70:72:a4:e7:3f:98:7c:a0:8b:56:50:97:1e:
d8:4e:45:b6:a1:8c:f9:f2:ee:46:0e:7a:10:1b:b6:
b3:94:af:24:1e:e1:cd:4e:9d:53:a8:40:eb:e4:a0:
dc:a2:72:0a:20:33:07:db:ef:26:4f:e9:67:be:9e:
9b:04:2a:ef:f2:c8:18:72:ad:d9:a0:ca:0f:be:08:
9b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:33:1D:61:AD:8A:E5:C0:85:86:E5:78:DF:9D:07:94:04:0E:F0:B8
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/QjMdYa2K5cCFhuV4350HlAQO8Lg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.180.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:7c:d2:09:c6:ee:9b:22:2a:d7:d5:41:8c:98:ae:21:dc:30:
4e:40:95:49:84:10:73:e0:28:21:cc:20:90:21:5b:f4:b2:26:
ee:02:15:b0:1d:35:e1:13:a3:27:b4:97:2f:aa:7a:c1:8d:e6:
7c:8c:d5:b7:1e:ec:22:a1:50:a4:34:d3:55:00:ba:d9:51:c7:
ba:1d:c9:77:5f:73:dc:59:e9:81:00:5e:d6:0e:73:60:bb:8a:
4b:a0:63:f3:f3:b6:fd:40:44:83:8b:62:60:6e:4a:27:ea:ae:
ce:ab:8c:fc:57:62:0a:50:64:23:fb:f8:b2:64:66:fa:22:1a:
33:ea:1b:9b:d5:a0:e4:3d:13:d0:58:4e:e2:4c:5f:d5:d1:12:
1e:87:0c:a0:43:70:8f:d0:49:12:3f:a3:57:7d:6a:2b:b6:ca:
c5:f1:a2:c3:49:fd:bf:43:38:92:ed:ca:8d:05:a7:93:77:03:
d1:44:72:c3:60:5f:c2:42:a9:0f:7e:ce:de:b6:2b:07:cb:0a:
0b:79:69:9c:a8:e6:b4:92:76:1d:7a:38:f6:d4:85:be:4d:6c:
87:0b:db:bd:ab:d7:29:19:7e:28:32:90:c6:3b:59:f1:c2:40:
36:16:31:39:ef:50:cb:92:51:b8:c6:4d:73:fa:00:8b:e8:c4:
a3:6c:61:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:21 2023 by rpki-client on console-fra.rpki-client.org