Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/WHLFcWFPTKcry656JPN3TfngsBc.roa
File: WHLFcWFPTKcry656JPN3TfngsBc.roa (raw, json)
Hash identifier: VQZLQWxNZbBLGs+Z8JEkrD8eAq/RXGnl4jfgYBvBfjk=
Subject key identifier: 58:72:C5:71:61:4F:4C:A7:2B:CB:AE:7A:24:F3:77:4D:F9:E0:B0:17
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01852E3B23EC2B9708CDAAE68D8ED6FCB56D
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/WHLFcWFPTKcry656JPN3TfngsBc.roa
Signing time: Tue 20 Dec 2022 06:31:45 +0000
ROA not before: Tue 20 Dec 2022 06:31:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14445
IP address blocks: 163.5.174.0/24 maxlen: 24
163.5.171.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2e:3b:23:ec:2b:97:08:cd:aa:e6:8d:8e:d6:fc:b5:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Dec 20 06:31:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5872c571614f4ca72bcbae7a24f3774df9e0b017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:07:ac:6d:f8:fa:5c:f7:15:c6:2c:4f:e6:b9:
35:29:37:50:3f:6e:d2:72:af:01:13:92:00:51:5f:
99:1b:ff:16:2a:96:6d:18:e8:df:c3:67:29:56:09:
08:56:c1:9e:f9:08:0e:75:83:10:b2:03:ee:b9:f6:
43:a3:fd:b1:66:c4:f7:82:56:8f:b5:fd:8f:9f:0f:
ac:fa:d6:ed:56:78:0d:cb:a8:0c:60:3c:59:3c:9e:
e5:bb:50:9c:c5:05:3c:bd:09:ec:39:e6:8f:7d:7c:
be:0b:f2:a4:61:a3:ed:e6:d1:8c:14:99:f3:40:6f:
f8:d1:63:ff:02:b9:05:e4:70:ea:cf:f5:35:12:58:
fc:d0:54:0c:87:6d:94:4d:68:ee:55:05:f0:d3:7a:
23:b6:84:0a:11:e9:ce:f2:f0:5c:10:b5:d8:9b:2b:
a8:80:4f:92:93:03:c8:4a:88:53:e4:36:15:a7:b9:
d1:f7:b0:65:09:9f:42:e0:8d:3e:f0:5c:bc:ae:98:
ba:4e:a6:84:8d:c2:73:7b:fc:19:2f:b7:5d:d6:fc:
ca:5a:b0:e2:f8:c8:8f:c8:36:b6:ee:bc:fb:e2:18:
37:9b:20:c3:76:87:02:c6:8d:87:dd:40:6c:5b:44:
37:6e:a9:09:11:e5:fe:cc:39:55:17:5b:5a:1b:d3:
e2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:72:C5:71:61:4F:4C:A7:2B:CB:AE:7A:24:F3:77:4D:F9:E0:B0:17
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/WHLFcWFPTKcry656JPN3TfngsBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.171.0-163.5.172.255
163.5.174.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:41:a7:c3:ef:38:bb:33:8d:22:9d:05:3c:c6:de:39:fa:ae:
89:92:21:64:65:dc:c9:71:83:7c:66:b3:d7:d7:03:1e:ca:65:
f4:cc:b3:46:23:da:aa:10:e3:2b:fa:8f:ef:0f:5d:7d:3a:60:
e3:6a:77:5e:17:36:04:1a:55:8d:eb:05:b5:cc:aa:52:8b:37:
e9:8e:41:0d:8f:30:6d:c0:4c:28:b0:83:8c:eb:f1:83:21:bf:
f8:8f:84:6c:cd:7c:6f:33:bb:36:86:c9:0e:4a:78:dd:d7:bb:
33:6b:54:fa:80:15:fb:a3:f5:58:2e:5e:4e:57:c7:9d:91:02:
ae:17:6e:53:87:f6:cc:24:53:c0:49:44:3b:c8:59:d0:84:9d:
83:36:12:54:c2:64:e6:13:c3:70:71:51:e7:4b:cf:c6:81:14:
4d:6f:28:a5:5e:11:85:8b:e4:78:a1:87:c9:58:ca:87:ba:12:
28:86:7c:e5:d2:e6:73:b6:10:ca:59:ff:83:08:ac:97:66:79:
60:ba:70:bd:92:bf:9d:fc:cc:0f:0e:15:74:ab:f1:ff:39:b6:
0c:f9:20:59:cf:64:e7:b2:2d:f7:f4:6f:c6:c0:6e:e8:12:ca:
8b:5c:98:61:05:4e:59:60:04:15:28:ad:eb:de:60:d7:73:04:
08:cd:82:27
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:10 2023 by rpki-client on console-ams.rpki-client.org