Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/_m-OwWKQTWFgkPehZYdTzf6kHbo.roa
File: _m-OwWKQTWFgkPehZYdTzf6kHbo.roa (raw, json)
Hash identifier: v2icdKFeWc5azW76kd2IF0/USXc2Fr3XSmv+l29+IF4=
Subject key identifier: FE:6F:8E:C1:62:90:4D:61:60:90:F7:A1:65:87:53:CD:FE:A4:1D:BA
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0183EFE1BC54774943C9A1E841E5E787E8AF
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/_m-OwWKQTWFgkPehZYdTzf6kHbo.roa
Signing time: Wed 19 Oct 2022 10:54:51 +0000
ROA not before: Wed 19 Oct 2022 10:54:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14445
IP address blocks: 163.5.174.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.194.0/24 maxlen: 24
163.5.115.0/24 maxlen: 24
163.5.171.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ef:e1:bc:54:77:49:43:c9:a1:e8:41:e5:e7:87:e8:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 19 10:54:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fe6f8ec162904d616090f7a1658753cdfea41dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e4:3f:fc:92:56:8c:6e:0b:b9:eb:5e:a8:40:
72:40:80:da:7e:84:4c:a5:11:24:b5:63:bd:e8:e2:
f6:ef:c2:aa:44:31:ce:90:53:e7:6e:33:9a:6e:84:
37:8f:15:0c:f4:4a:84:77:d5:e4:69:81:7d:72:e4:
14:4e:ef:c6:7c:54:07:1a:f9:52:ec:ba:d6:a9:38:
bd:39:fc:d9:7a:dd:6e:3f:80:29:35:9e:f4:6d:47:
70:89:d7:17:8c:4a:8b:6f:9a:b8:d1:80:f9:80:5a:
79:bb:8d:e6:39:3f:da:33:8b:75:46:1e:33:7e:ea:
a2:2d:7f:8a:be:fe:7b:73:07:65:67:31:24:1a:f6:
b4:09:ac:a1:0d:f9:ad:9d:bb:17:e8:d7:8a:da:70:
c6:76:14:eb:4a:53:b7:7c:48:0c:98:a1:f5:46:56:
90:17:8b:c5:eb:35:94:66:3f:13:c4:ce:48:8b:47:
1b:27:bb:ef:35:95:d9:4c:53:43:3c:56:11:d6:e4:
7b:c4:5b:c6:d3:1d:12:94:fe:03:97:c4:22:34:20:
e3:38:e9:92:b9:6c:28:e1:c4:09:e1:d8:c8:f5:2b:
da:07:92:6a:79:5f:36:79:b7:5d:ec:f8:60:fb:66:
68:52:5c:5d:6a:4f:bf:09:2d:c4:c1:e5:d5:7f:d1:
0e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:6F:8E:C1:62:90:4D:61:60:90:F7:A1:65:87:53:CD:FE:A4:1D:BA
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/_m-OwWKQTWFgkPehZYdTzf6kHbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.115.0/24
163.5.170.0/23
163.5.174.0/24
163.5.194.0/24
163.5.198.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:0a:4f:fc:48:69:b7:30:82:75:a1:ac:27:d6:32:c2:c1:b4:
40:78:38:86:01:c4:ac:04:6a:09:13:5f:b3:c0:97:ec:7b:9a:
5f:53:62:cd:65:2b:10:0c:6f:d6:b0:fd:15:0c:7d:6e:65:a3:
89:df:7a:45:b2:65:08:d8:2e:9e:02:03:51:bc:13:d0:70:b1:
9d:d3:bc:33:01:dd:d4:6e:53:49:1b:7f:a6:1d:67:8b:61:ad:
d8:60:96:49:0a:ed:bf:d9:9d:20:65:4a:68:0d:b7:75:b6:6b:
21:a6:a3:d9:bd:43:33:40:03:18:11:d7:bc:a9:2b:e6:5d:ac:
fc:f2:64:c0:05:5c:52:ec:f7:e4:54:ae:4b:75:68:6e:6b:f5:
49:73:be:6d:e9:b5:67:eb:f0:11:c1:3e:65:ff:01:e9:e3:1c:
1b:52:10:c4:48:6e:d5:18:58:62:5d:12:49:8d:3e:15:15:50:
b3:89:de:79:55:22:b6:e7:33:ac:1b:1c:d3:27:cd:bb:92:27:
7a:1a:ba:eb:c3:67:e4:aa:c8:15:84:19:a7:e0:db:61:61:20:
b6:24:ff:cb:d7:dc:88:7c:43:ba:5b:31:f3:07:86:b9:ab:fe:
0e:5e:ae:13:6d:43:18:74:81:2e:84:ad:92:35:68:15:ec:4b:
ae:f7:b2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:21 2023 by rpki-client on console-fra.rpki-client.org