Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/WTVPTwe01tSb8IBhJSgNEa5nlGc.roa
File: WTVPTwe01tSb8IBhJSgNEa5nlGc.roa (raw, json)
Hash identifier: viVKsbfGXTf7fqpq53peiOfavKYKrreL9bsvouYDH6o=
Subject key identifier: 59:35:4F:4F:07:B4:D6:D4:9B:F0:80:61:25:28:0D:11:AE:67:94:67
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0182F0337F8687CA2910049DDC415CBBB829
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/WTVPTwe01tSb8IBhJSgNEa5nlGc.roa
Signing time: Tue 30 Aug 2022 19:21:22 +0000
ROA not before: Tue 30 Aug 2022 19:21:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204372
IP address blocks: 163.5.230.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f0:33:7f:86:87:ca:29:10:04:9d:dc:41:5c:bb:b8:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 30 19:21:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=59354f4f07b4d6d49bf0806125280d11ae679467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:78:b5:98:51:82:e1:ed:34:45:f0:7f:38:fe:
f5:5a:e9:96:46:9b:1a:6e:7c:59:65:de:3b:18:e3:
24:a4:59:c9:b7:e5:13:52:1f:21:e3:2b:19:89:32:
ed:7e:88:d9:f4:d4:fb:a5:ef:ad:d5:ed:0e:55:14:
e6:4c:74:bc:7c:1b:31:d0:f0:64:fb:42:40:07:b6:
da:25:21:05:75:4a:5f:f5:15:4a:e2:ac:82:69:02:
fe:8b:89:3b:02:85:2c:c9:29:4a:75:0f:2c:7b:87:
2b:47:d2:08:21:9c:bc:e4:44:04:29:a9:5b:7e:fe:
95:5a:ac:63:3c:ad:04:86:02:34:0a:52:f9:cd:a6:
b0:24:d1:be:6c:27:4b:52:42:c0:2a:47:f4:32:a0:
93:91:36:00:3b:21:21:86:af:68:a8:13:41:1a:f9:
bf:ab:6f:9a:7e:18:2b:fd:67:dd:af:5a:42:54:b0:
9a:34:02:c1:c2:89:cb:fd:03:44:e6:ec:1c:d5:8b:
a3:78:88:ec:74:ca:1c:30:8d:c0:44:75:3f:ab:81:
a4:24:34:a9:99:e8:e2:b0:93:b8:03:bb:7e:b3:88:
45:ea:52:bb:24:0a:d1:80:d2:52:d4:29:8a:b5:48:
13:79:b7:4e:f5:62:09:1b:f6:a1:0e:95:2f:c2:96:
55:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:35:4F:4F:07:B4:D6:D4:9B:F0:80:61:25:28:0D:11:AE:67:94:67
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/WTVPTwe01tSb8IBhJSgNEa5nlGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.161.0/24
163.5.230.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:e8:bb:05:cc:b9:70:53:6d:44:14:33:23:da:74:fa:f8:34:
ae:bc:08:a2:09:87:92:c2:00:9f:d7:4e:86:f7:5f:56:c3:8d:
15:3a:7a:92:e3:65:d8:d8:3a:f1:fb:4d:db:c2:de:93:d1:8c:
de:cc:8d:a1:99:c7:e8:fa:08:1b:27:b3:62:66:ee:5a:6b:30:
7f:46:64:64:43:25:0c:4b:c6:e4:d2:21:2e:91:3e:0a:05:19:
dc:1b:83:68:e5:04:f3:65:11:d3:91:73:66:ce:06:54:6e:33:
81:86:26:19:df:b7:59:3d:49:1c:4d:79:43:ce:c8:d7:62:97:
c4:6f:b0:b6:b2:ca:3b:36:7b:66:2e:33:f5:d4:09:d5:9c:bf:
ec:4c:67:4a:a6:e0:a8:e2:67:8a:bc:b7:24:ab:c2:96:86:4c:
a8:73:b5:0c:60:00:26:e7:2c:26:31:ce:7d:42:ea:e6:c6:f9:
64:5a:b8:c4:41:22:b9:b6:37:7b:69:84:2d:e0:15:aa:df:fe:
ec:ca:58:79:71:c0:12:9a:b4:9a:23:3b:de:c3:ee:8a:49:ad:
e9:ad:19:4e:79:34:6b:c9:8d:85:4f:b3:a0:33:15:85:84:89:
20:db:3f:f1:e6:05:27:71:02:73:ed:3b:dc:25:fd:96:8a:7b:
44:d5:cd:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:10 2023 by rpki-client on console-ams.rpki-client.org