Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Wm17iZhUE8fu-Cbvw7-uGqNJBSg.roa
File: Wm17iZhUE8fu-Cbvw7-uGqNJBSg.roa (raw, json)
Hash identifier: CdwhwTON3nSmcGuRvHZs5k1qaJEys26x65uJZeHvzyE=
Subject key identifier: 5A:6D:7B:89:98:54:13:C7:EE:F8:26:EF:C3:BF:AE:1A:A3:49:05:28
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01844241F9D1A56D2A334D6EB40547A2CC1C
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Wm17iZhUE8fu-Cbvw7-uGqNJBSg.roa
Signing time: Fri 04 Nov 2022 10:48:50 +0000
ROA not before: Fri 04 Nov 2022 10:48:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212669
IP address blocks: 163.5.146.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:42:41:f9:d1:a5:6d:2a:33:4d:6e:b4:05:47:a2:cc:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Nov 4 10:48:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5a6d7b89985413c7eef826efc3bfae1aa3490528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:57:97:f2:8d:d1:50:1b:40:81:49:a1:3e:28:
58:f9:f0:3d:ab:f8:0e:e9:81:c9:92:86:d7:d5:ff:
49:ec:1e:62:1c:da:d5:e4:2d:69:ae:2a:0f:5b:a7:
f7:e6:1b:59:9d:3a:eb:cd:3b:42:62:ba:61:c3:1d:
da:6a:9b:3b:43:c7:22:5c:c3:b7:41:44:ed:87:6d:
6b:46:3d:2c:8b:3a:5f:b9:54:7d:d5:b4:16:2f:d1:
f2:27:52:2e:b8:de:40:8a:1a:9f:8c:d8:39:28:b6:
8f:e9:9f:48:b8:e9:d7:4b:42:53:d9:07:0f:ae:55:
23:72:29:cf:a7:90:75:22:de:94:21:f1:f5:b5:68:
f4:a4:16:7d:eb:af:c1:c7:48:1e:71:a1:3b:80:18:
cb:c4:c5:d0:a9:41:60:b2:6d:76:64:65:14:8f:97:
e5:a8:a1:62:3a:79:5e:da:2b:b5:6f:94:57:44:eb:
33:39:46:86:c8:a9:17:2c:b2:47:08:89:ca:f6:0a:
3d:5d:82:0c:5a:3f:1b:31:3c:63:b0:bb:ef:d6:9d:
1e:5b:f5:2b:15:e4:83:c2:bc:8b:7c:e2:74:c9:85:
55:94:d8:6a:d5:86:12:07:3c:00:3f:31:fe:a8:8a:
8c:fb:61:8f:07:88:8a:eb:d5:67:bb:cc:f3:27:7e:
ea:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:6D:7B:89:98:54:13:C7:EE:F8:26:EF:C3:BF:AE:1A:A3:49:05:28
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Wm17iZhUE8fu-Cbvw7-uGqNJBSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.146.0/24
163.5.162.0/24
Signature Algorithm: sha256WithRSAEncryption
84:28:e5:f7:1f:f6:e4:13:85:21:49:b4:aa:2d:80:5c:7e:0d:
bc:a4:91:c8:ee:96:2d:f9:cc:c4:f0:2a:41:e0:93:dc:4a:c4:
cb:52:9f:79:e2:a8:a6:46:36:2b:a9:3a:42:1e:81:9a:d3:c6:
36:e8:d7:c3:45:89:91:74:72:86:7a:fd:e5:18:b8:28:5b:68:
a3:95:33:9f:a1:ce:2e:85:03:db:a3:93:12:58:59:7e:0c:86:
00:3c:11:69:58:23:53:d4:3a:e3:6a:0c:61:6a:14:a2:a4:56:
99:d2:a9:32:4d:5b:e5:99:d8:0b:52:46:c3:1a:54:dc:c7:af:
68:e7:5d:1d:32:4f:36:ec:12:25:e2:4c:dd:8a:2a:7a:b3:db:
a8:da:e7:17:05:c9:f1:94:92:14:6c:3c:c3:26:e7:04:f0:e2:
3b:fd:f0:ec:b8:4c:70:df:c5:f2:a4:61:74:17:88:66:7d:31:
23:49:a5:62:e1:f1:f6:97:a3:6b:2e:e6:96:53:24:50:af:88:
42:c7:d7:40:aa:72:58:0c:db:94:d0:be:f7:f3:2c:e2:50:24:
49:42:a6:66:0d:bd:12:0e:32:ac:e6:7d:77:c3:48:fb:85:d2:
7a:30:8e:ca:7c:4d:e5:3f:a3:4d:fe:c4:bb:b5:93:0f:83:4d:
df:5f:35:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:10 2023 by rpki-client on console-ams.rpki-client.org