Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/RscFkYyxAXKQh6_-_ax7KRe3KUs.roa
File: RscFkYyxAXKQh6_-_ax7KRe3KUs.roa (raw, json)
Hash identifier: qWOkCwqgUCyHd1rjhCS/zkNQmAxD5o2zCn+2pTvEHxE=
Subject key identifier: 46:C7:05:91:8C:B1:01:72:90:87:AF:FE:FD:AC:7B:29:17:B7:29:4B
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0183BC1E21E65122019CDF02E9DA518C0183
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/RscFkYyxAXKQh6_-_ax7KRe3KUs.roa
Signing time: Sun 09 Oct 2022 09:40:34 +0000
ROA not before: Sun 09 Oct 2022 09:40:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 163.5.190.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:bc:1e:21:e6:51:22:01:9c:df:02:e9:da:51:8c:01:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 9 09:40:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=46c705918cb101729087affefdac7b2917b7294b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:54:22:0b:09:7a:06:e7:f0:e8:71:ee:e9:9e:
32:01:6b:43:5b:51:5f:36:22:7c:a4:63:fc:54:75:
33:75:6d:6f:b2:98:54:27:ef:d4:c0:49:51:e8:00:
15:65:97:3a:5b:0b:09:43:00:12:18:4f:cb:aa:46:
46:0b:19:7d:df:a8:71:82:89:b2:e2:b2:c8:a9:55:
7e:8a:f1:01:a1:31:1c:16:87:68:f8:d8:ec:b0:9e:
a4:2c:e2:14:06:79:b3:f1:08:63:ff:b1:57:fa:4e:
d4:24:73:f6:1d:67:4b:fa:da:64:69:d3:19:d3:d9:
9a:ad:82:84:a4:a6:d6:ac:7f:5f:15:4e:66:20:60:
3c:bb:f1:a5:09:a1:18:87:d3:bc:c5:a2:96:f9:a7:
33:cd:b9:41:89:ab:95:18:66:b1:0a:f1:d5:ca:b9:
34:c0:e6:23:f9:63:aa:22:25:ca:a2:ed:81:1a:88:
2a:fc:81:65:5c:46:69:30:a6:71:f0:59:2b:8e:b7:
28:53:41:6b:36:b5:ed:16:fe:05:70:e5:85:4b:9f:
5d:b5:3a:9f:94:36:af:c0:a9:e6:8b:14:ae:be:61:
8b:68:31:cc:de:8c:96:45:40:7f:cd:60:57:0d:90:
16:ee:6a:c7:80:a6:30:2f:98:0e:18:45:83:03:f5:
8c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C7:05:91:8C:B1:01:72:90:87:AF:FE:FD:AC:7B:29:17:B7:29:4B
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/RscFkYyxAXKQh6_-_ax7KRe3KUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.190.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:ab:1f:a0:23:65:be:ac:84:90:9d:92:21:2a:d6:36:22:52:
2c:ca:2d:18:a4:99:6f:df:fd:fc:f8:63:4b:de:7c:5a:c1:6f:
ba:e0:38:e9:d3:3c:be:24:f6:54:54:5d:e0:4a:ef:3e:9d:aa:
3e:58:63:7c:aa:47:82:85:35:4b:ae:95:01:50:a8:09:4a:3e:
6b:ac:5d:b8:4f:16:d4:db:f2:56:ae:4b:3f:84:68:e1:29:43:
af:3c:06:2b:87:b2:4f:ae:2b:4c:14:f8:16:fc:3e:84:e6:93:
1a:ce:7f:7d:ef:c1:2c:85:01:58:89:65:bf:5c:20:ed:a1:66:
b0:b2:01:5a:28:1a:d6:e0:68:21:00:9f:a9:fc:24:6a:e6:0d:
0f:ac:86:c3:a8:3f:80:31:f1:d6:cf:e0:15:d6:ba:36:cc:f1:
d3:82:d8:17:ef:78:f1:35:e2:d3:29:64:3e:99:3f:d2:0d:cf:
a3:86:fd:76:23:3c:c9:c8:64:1c:1c:a6:ed:f4:15:3b:ea:af:
ad:c7:e2:2b:37:86:58:b4:66:23:b7:66:97:80:f3:64:d1:85:
76:ff:74:26:6d:22:2f:b6:b5:5e:d8:f3:92:cb:7e:a4:1a:12:
e9:98:44:7a:c2:6d:86:4e:07:69:ff:a3:02:e6:00:29:8c:ea:
fd:91:5f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:09 2023 by rpki-client on console-ams.rpki-client.org