Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/YnlhncfBgoMQL4sEpzpU8hN3Lvs.roa
File: YnlhncfBgoMQL4sEpzpU8hN3Lvs.roa (raw, json)
Hash identifier: O6i9sjLDRvaBvRJFwxKFnkp2W8L7O3FxRH+nOixGqUQ=
Subject key identifier: 62:79:61:9D:C7:C1:82:83:10:2F:8B:04:A7:3A:54:F2:13:77:2E:FB
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0184574CD5189CB8590B3CD2593D83B8D1EA
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/YnlhncfBgoMQL4sEpzpU8hN3Lvs.roa
Signing time: Tue 08 Nov 2022 12:52:43 +0000
ROA not before: Tue 08 Nov 2022 12:52:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43043
IP address blocks: 163.5.107.0/24 maxlen: 24
163.5.137.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:57:4c:d5:18:9c:b8:59:0b:3c:d2:59:3d:83:b8:d1:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Nov 8 12:52:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6279619dc7c18283102f8b04a73a54f213772efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:01:f4:97:ee:7f:86:10:5d:8f:1c:10:8a:5f:
b6:25:9e:fc:87:11:fd:bf:4d:20:9d:dc:24:d9:56:
19:e4:16:ca:94:d0:ee:4f:f6:74:9c:7a:6f:d9:5e:
2f:16:01:e7:ed:a6:93:dc:10:26:87:03:d5:c5:bb:
75:7e:9a:ef:fb:0e:b6:e2:56:b2:a0:e5:e1:c4:48:
9a:1f:79:ea:c8:d3:a0:f3:e8:53:15:93:4b:0b:ae:
20:4c:f6:c3:b5:9e:bf:eb:30:e3:d4:75:36:25:d5:
7f:68:fc:93:5a:84:2d:97:1e:26:f9:f9:99:65:93:
3b:10:20:cc:f8:71:89:52:c2:03:b9:12:b9:a6:77:
98:41:97:51:a8:d9:1c:11:d8:94:35:35:68:74:80:
09:b8:f8:63:01:81:20:36:af:40:a3:7a:d5:3f:b3:
71:ad:34:9b:90:32:07:6d:f7:67:56:2c:3a:d4:60:
72:c1:c2:51:d6:47:bb:d7:32:09:34:96:ea:02:51:
53:83:49:93:fb:fd:31:22:4d:f0:2d:67:85:52:cb:
03:80:53:32:be:28:40:df:d4:db:b1:30:d7:64:73:
1f:1a:d3:91:03:f9:84:a1:18:a6:06:6a:92:b8:2b:
5b:02:b9:13:2c:b3:f5:55:b0:0e:02:1e:ad:03:e1:
92:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:79:61:9D:C7:C1:82:83:10:2F:8B:04:A7:3A:54:F2:13:77:2E:FB
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/YnlhncfBgoMQL4sEpzpU8hN3Lvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.107.0/24
163.5.137.0/24
Signature Algorithm: sha256WithRSAEncryption
37:d2:6a:e7:dc:6b:9f:05:bc:9b:7d:41:bb:ca:aa:17:62:00:
61:ce:23:17:25:81:f3:72:89:f1:1a:e6:c8:9f:c6:97:17:f9:
78:d3:0f:b5:7d:5c:c8:57:97:11:0d:84:2f:f1:63:51:97:3f:
0d:ff:69:27:25:e9:f2:d2:78:40:79:75:e5:48:4a:9d:bc:f1:
31:9f:ed:81:42:1c:c6:e9:ca:00:a4:7d:51:95:57:be:8b:e8:
12:fe:1c:b9:ee:48:69:78:f7:06:0f:e3:b7:33:27:7c:3a:46:
95:97:53:2a:d4:ce:db:9a:af:e2:9a:61:9e:84:bc:81:7c:b9:
67:38:f9:f2:da:e4:b0:40:3b:16:41:59:df:f9:8d:2c:16:1e:
29:8c:c6:a9:31:79:38:21:83:ab:77:de:a4:06:25:02:ed:fa:
bd:83:9e:b4:ab:63:f4:54:9b:ed:35:0d:1b:41:8d:11:23:2e:
89:ec:6e:84:eb:3d:ac:8c:89:1b:6b:92:34:86:6e:c1:fe:c6:
b9:66:5d:fa:43:f8:06:62:93:f8:16:41:39:ff:ee:1d:fb:45:
fe:43:1b:0f:3d:8e:b4:66:ce:b0:9e:7f:04:d0:11:35:87:6e:
b2:f2:c1:40:a0:15:e0:ba:79:af:cc:e7:ea:f2:96:d8:19:55:
23:a6:59:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:10 2023 by rpki-client on console-ams.rpki-client.org