Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/QxjpQ8jUeqzc5wZUAUQJdiZXgAQ.roa
File: QxjpQ8jUeqzc5wZUAUQJdiZXgAQ.roa (raw, json)
Hash identifier: UT4TGmxb9kC7VjRDVG2Cr/wGyZQmS14m3xCWIm7/rH0=
Subject key identifier: 43:18:E9:43:C8:D4:7A:AC:DC:E7:06:54:01:44:09:76:26:57:80:04
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018281E7177413DF5D0FD14D262EAA4759E0
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/QxjpQ8jUeqzc5wZUAUQJdiZXgAQ.roa
Signing time: Tue 09 Aug 2022 09:19:41 +0000
ROA not before: Tue 09 Aug 2022 09:19:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 163.5.179.0/24 maxlen: 24
163.5.152.0/24 maxlen: 24
163.5.166.0/24 maxlen: 24
163.5.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:81:e7:17:74:13:df:5d:0f:d1:4d:26:2e:aa:47:59:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 9 09:19:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4318e943c8d47aacdce706540144097626578004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:63:62:3c:ca:4b:c8:53:10:b7:cb:3f:79:80:
de:e0:07:5f:2b:58:93:dc:85:19:f4:06:fd:dd:98:
b3:3f:3b:23:09:aa:83:bc:64:c6:c8:bd:66:2e:36:
78:0e:c7:5d:29:be:b1:81:39:f9:6c:46:c9:1b:b0:
cc:c5:75:d1:1f:2c:7b:af:55:46:8c:12:7f:90:42:
fb:08:c8:76:ef:96:6f:69:67:8c:62:36:b6:fd:00:
b5:e0:98:dc:0c:90:1d:f5:59:04:75:49:b4:5c:d6:
6a:29:7b:bb:36:d4:75:87:7f:fc:f3:91:79:10:33:
69:13:e6:5d:68:48:01:39:b5:03:e3:bc:a3:9b:58:
31:96:88:c4:b3:d3:e8:d0:10:33:58:6b:26:3e:7e:
fb:1e:c8:6f:3f:a2:ed:90:d4:73:73:2d:7e:4a:27:
cf:ef:f9:a8:d8:cb:1c:7f:03:15:ef:57:34:22:56:
70:f8:fa:21:d8:50:57:68:62:3b:7d:7e:cb:18:8e:
4b:70:54:55:42:8c:6a:95:5b:49:36:31:07:23:01:
46:61:2b:2f:6e:4d:19:ef:ee:0e:56:f1:aa:e0:23:
c7:e3:e2:ff:da:14:ae:42:71:66:49:ad:17:08:a3:
a4:79:37:35:11:1c:08:41:37:dd:0c:f7:5e:17:bd:
bc:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:18:E9:43:C8:D4:7A:AC:DC:E7:06:54:01:44:09:76:26:57:80:04
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/QxjpQ8jUeqzc5wZUAUQJdiZXgAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.152.0/24
163.5.166.0/24
163.5.169.0/24
163.5.179.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:8e:a8:17:cb:10:d1:78:14:80:f9:a6:4d:0a:c9:aa:05:9a:
4e:d0:23:cb:e5:4b:cd:62:29:1c:b5:b3:c6:de:a4:b9:e7:ce:
22:69:d8:5d:dc:00:dc:7a:84:87:74:ba:66:13:70:04:4b:d7:
8c:43:bf:60:73:40:8f:b5:08:13:3d:19:5e:5f:36:c4:6a:b1:
40:1f:54:04:dc:33:d5:b2:6d:0d:c3:6f:db:99:76:b4:eb:b5:
b9:48:32:bc:14:92:a8:78:d8:bc:ed:01:ed:6e:c5:18:b0:d1:
3c:06:c6:8f:94:be:50:e6:4c:9e:f8:fe:35:d5:3a:cc:56:81:
86:4e:37:94:a9:14:a3:c5:a9:ea:08:23:aa:3d:be:7d:b9:e8:
c8:94:5f:13:b5:3c:ae:a9:0e:9e:47:79:79:26:3b:7c:c6:73:
ff:d5:3e:84:f7:70:40:04:7f:70:e5:c7:45:a6:2a:4b:33:9a:
42:bb:8a:87:e1:87:0f:55:c5:e4:0a:0f:77:2d:93:3f:63:e5:
79:09:47:4a:70:63:57:cc:ab:c0:c3:6e:6a:a4:84:f6:2c:92:
b6:e8:cf:86:62:c5:33:f0:9c:7e:83:31:cd:1a:80:d5:2e:ed:
49:e4:fa:44:26:46:5f:47:ae:0b:25:3e:74:bc:66:11:75:2a:
02:3b:d1:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:21 2023 by rpki-client on console-fra.rpki-client.org