Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/_63fTTRKLxGWtSr0dmsTjXYWoto.roa
File: _63fTTRKLxGWtSr0dmsTjXYWoto.roa (raw, json)
Hash identifier: QZW16jPAloTUyYeodAeoy84U8pIVPa6mFOg4rwpSUq8=
Subject key identifier: FF:AD:DF:4D:34:4A:2F:11:96:B5:2A:F4:76:6B:13:8D:76:16:A2:DA
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0184AB0EECB6FEE2922FC3CDFD3056B339C0
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/_63fTTRKLxGWtSr0dmsTjXYWoto.roa
Signing time: Thu 24 Nov 2022 19:13:12 +0000
ROA not before: Thu 24 Nov 2022 19:13:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204843
IP address blocks: 163.5.100.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ab:0e:ec:b6:fe:e2:92:2f:c3:cd:fd:30:56:b3:39:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Nov 24 19:13:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ffaddf4d344a2f1196b52af4766b138d7616a2da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:58:27:a0:fd:c0:49:80:e8:e9:0a:5a:55:e9:
21:bc:ee:be:c1:40:fd:b8:b2:da:85:60:da:6f:37:
71:92:80:15:79:25:94:5b:11:ab:99:c0:bd:79:33:
51:70:7e:fe:de:84:30:06:00:bd:71:12:c7:54:d5:
70:6c:3f:fe:39:98:b0:4d:ab:22:b1:21:12:52:0c:
0a:22:ac:3f:af:c7:9a:89:ac:cb:dc:f8:7d:95:c9:
97:20:b4:19:07:d1:23:31:4a:0a:10:5c:a7:bc:53:
f4:36:9a:bf:d6:48:0f:c0:ec:3a:c3:c8:8c:06:e4:
18:31:33:c2:0f:38:a6:ba:d0:57:8a:c7:2d:ec:05:
d1:12:61:d4:0d:20:fd:c1:ed:88:09:23:f4:82:1c:
53:00:1e:d4:ce:23:aa:75:2a:7e:de:26:4a:f4:72:
0f:af:c6:14:4a:1d:b5:9c:81:f3:df:9e:ec:07:c3:
a4:90:6e:c1:95:6d:a0:a5:b9:1b:0d:32:d2:ed:4b:
cc:d8:5f:98:1e:2c:53:1c:ba:d0:fe:87:88:f0:0d:
35:13:38:01:55:3c:68:1b:02:44:2e:05:ee:d3:04:
13:01:61:5d:ae:3a:3a:d5:b5:04:7f:19:45:02:c3:
99:24:f9:63:0d:98:a9:11:f2:37:d7:50:37:51:9f:
68:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:AD:DF:4D:34:4A:2F:11:96:B5:2A:F4:76:6B:13:8D:76:16:A2:DA
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/_63fTTRKLxGWtSr0dmsTjXYWoto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.100.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:1e:9a:ff:1a:bb:ad:68:7c:63:62:bc:3d:4d:e0:df:2f:60:
3e:54:31:90:9c:7d:e4:fc:92:f1:81:d2:0c:10:27:4e:96:06:
35:d4:90:a3:6d:25:f8:d3:03:81:6c:36:2a:9d:b0:55:ed:cc:
31:48:e5:f5:f2:60:46:90:8b:40:45:95:a8:d4:2a:22:7d:84:
42:ff:46:7b:98:4b:df:02:35:a9:62:6e:87:4e:a6:6a:a5:90:
72:d1:b9:e3:f6:7e:d6:a8:76:66:b3:f5:ea:9c:37:7d:ed:ff:
d1:42:1b:cb:b9:94:93:5c:51:5d:56:8c:95:8b:ce:3c:6c:b7:
0b:79:17:63:80:28:e7:e5:ca:7c:24:6a:66:06:73:a9:63:f3:
1f:ec:fb:1b:3b:46:26:9f:c9:19:f0:0a:0b:12:a2:ec:ca:fe:
4c:fc:28:73:a3:4a:73:f2:c0:8c:d3:f7:ac:44:92:b8:0f:24:
22:0c:01:d3:7c:fa:8a:af:3c:cd:fb:a9:e9:b1:b9:f0:c8:ec:
9f:6b:c3:fb:ba:17:0d:03:bb:52:52:9c:a1:7e:94:69:15:64:
bc:9f:eb:6b:85:d6:fb:47:5a:9d:a3:38:32:98:ce:ab:d4:88:
1b:99:a0:34:2a:b7:78:ac:55:01:9b:e2:8f:52:7f:ba:f3:7c:
aa:07:6e:95
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYSrDuy2/uKSL8PN/TBWsznAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjIxMTI0MTkxMzEyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZmFkZGY0ZDM0NGEyZjExOTZiNTJhZjQ3NjZiMTM4ZDc2MTZhMmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFgnoP3ASYDo6QpaVekhvO6+wUD9
uLLahWDabzdxkoAVeSWUWxGrmcC9eTNRcH7+3oQwBgC9cRLHVNVwbD/+OZiwTasi
sSESUgwKIqw/r8eaiazL3Ph9lcmXILQZB9EjMUoKEFynvFP0Npq/1kgPwOw6w8iM
BuQYMTPCDzimutBXisct7AXREmHUDSD9we2ICSP0ghxTAB7UziOqdSp+3iZK9HIP
r8YUSh21nIHz357sB8OkkG7BlW2gpbkbDTLS7UvM2F+YHixTHLrQ/oeI8A01EzgB
VTxoGwJELgXu0wQTAWFdrjo61bUEfxlFAsOZJPljDZipEfI311A3UZ9oYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP+t3000Si8RlrUq9HZrE412FqLaMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvXzYzZlRUUktMeEdXdFNyMGRtc1RqWFlXb3RvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowVkMA0G
CSqGSIb3DQEBCwUAA4IBAQAuHpr/GrutaHxjYrw9TeDfL2A+VDGQnH3k/JLxgdIM
ECdOlgY11JCjbSX40wOBbDYqnbBV7cwxSOX18mBGkItARZWo1CoifYRC/0Z7mEvf
AjWpYm6HTqZqpZBy0bnj9n7WqHZms/XqnDd97f/RQhvLuZSTXFFdVoyVi848bLcL
eRdjgCjn5cp8JGpmBnOpY/Mf7PsbO0Ymn8kZ8AoLEqLsyv5M/Chzo0pz8sCM0/es
RJK4DyQiDAHTfPqKrzzN+6npsbnwyOyfa8P7uhcNA7tSUpyhfpRpFWS8n+trhdb7
R1qdozgymM6r1IgbmaA0Krd4rFUBm+KPUn+683yqB26V
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:10 2023 by rpki-client on console-ams.rpki-client.org