Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Y5dpPEvZv8jvpHsvufByOVh20Wk.roa
File: Y5dpPEvZv8jvpHsvufByOVh20Wk.roa (raw, json)
Hash identifier: H2ONqEqG48Quq4yWMvEa847ayr0o2ucAKAAYxF0wJL0=
Subject key identifier: 63:97:69:3C:4B:D9:BF:C8:EF:A4:7B:2F:B9:F0:72:39:58:76:D1:69
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0169C478
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Y5dpPEvZv8jvpHsvufByOVh20Wk.roa
Signing time: Sun 03 Jul 2022 07:49:25 +0000
ROA not before: Sun 03 Jul 2022 07:49:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23708792 (0x169c478)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 3 07:49:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6397693c4bd9bfc8efa47b2fb9f072395876d169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7f:1d:d0:30:3e:f2:04:01:bf:ae:14:37:83:
b8:d6:db:fd:59:a2:78:95:e8:d0:11:89:a9:8f:5d:
c9:48:f1:f8:7b:3b:c1:f6:a7:ca:1b:6a:90:3a:9d:
58:b4:ae:ab:2e:51:5f:a9:65:a9:c3:65:2d:14:da:
2f:a6:d3:d4:7e:c8:38:6c:8c:3c:7f:49:7e:29:33:
2a:32:f6:08:2c:18:2b:ec:76:27:ed:8b:1d:32:12:
bc:4f:2a:b2:34:74:7d:f6:b2:41:c1:94:db:71:09:
dc:30:20:2c:a6:07:56:3a:9b:f1:b4:ed:84:f2:7d:
99:58:4c:d8:21:87:16:cf:8f:32:74:1a:12:3c:5b:
a5:19:1f:ba:91:b8:9a:7c:d7:28:da:58:84:c9:db:
41:f7:0b:39:b6:df:73:21:9c:e9:d4:c5:43:37:25:
fc:41:18:b9:45:d2:41:c5:8e:20:a4:e8:89:11:a7:
96:ac:9c:b9:ec:70:79:75:fa:dc:b9:ed:48:67:2f:
fa:19:4b:ea:d5:ea:35:03:22:ff:e7:4e:d6:13:5d:
fa:e2:a8:ca:93:ce:b6:6a:2f:d9:06:5e:18:b0:27:
bd:b4:1d:70:7a:73:85:66:5e:28:ae:76:4e:18:15:
b5:76:a6:c0:64:72:06:09:df:c7:75:9d:b1:10:9f:
a3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:97:69:3C:4B:D9:BF:C8:EF:A4:7B:2F:B9:F0:72:39:58:76:D1:69
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Y5dpPEvZv8jvpHsvufByOVh20Wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.128.0/23
Signature Algorithm: sha256WithRSAEncryption
02:bf:f7:44:29:23:3a:4e:f1:17:6c:77:f4:6e:4a:7c:2b:f2:
6b:84:30:fa:07:44:1f:6b:d2:5a:4c:3c:d9:69:ca:23:fa:10:
da:4b:b0:5d:c8:b7:af:3f:4a:a9:ff:b6:d9:b1:ea:ef:5b:bc:
22:d8:4c:b6:11:42:f8:0b:95:4b:d7:50:7f:f0:d5:e2:65:24:
6c:43:3c:bf:5a:b0:10:1e:91:43:06:ea:eb:39:7d:d1:d0:89:
cc:c5:75:cb:6f:cd:68:58:e5:90:1a:20:dc:12:02:ae:08:89:
8f:10:4a:24:2c:dd:f2:82:7c:79:c5:56:ea:da:87:be:d1:34:
42:83:34:3c:57:da:4b:e4:87:fe:bc:5b:51:5b:58:8e:cf:7d:
c9:2e:31:1f:48:28:9a:14:8f:a9:1e:22:03:4f:c3:07:9d:88:
16:b3:cf:df:45:90:66:55:3a:95:3e:10:0b:9d:6e:98:d3:96:
c6:fb:e2:c7:1b:f7:9d:0f:74:db:de:02:f0:46:b4:51:06:b7:
ca:a9:9a:4a:90:5a:47:e3:83:ae:ce:21:70:ee:ab:bb:d3:d2:
59:9b:a0:21:29:df:6d:24:8f:bb:7d:44:ed:e7:ea:23:58:58:
38:8e:dd:12:da:03:b0:b9:de:9f:c4:59:20:ff:3b:e4:c9:78:
c4:52:f2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:21 2023 by rpki-client on console-fra.rpki-client.org