Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/aZMcPLOgIhMV0k7MjgdilTyowQA.roa
File: aZMcPLOgIhMV0k7MjgdilTyowQA.roa (raw, json)
Hash identifier: eADDwTtJ8jqNPq7w8fNato2qwtknWrZbxIyrSzGhUg4=
Subject key identifier: 69:93:1C:3C:B3:A0:22:13:15:D2:4E:CC:8E:07:62:95:3C:A8:C1:00
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0184AB19E2BCCADABC6273CB6203B742B2B3
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/aZMcPLOgIhMV0k7MjgdilTyowQA.roa
Signing time: Thu 24 Nov 2022 19:25:11 +0000
ROA not before: Thu 24 Nov 2022 19:25:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3320
IP address blocks: 163.5.225.0/24 maxlen: 24
163.5.229.0/24 maxlen: 24
163.5.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ab:19:e2:bc:ca:da:bc:62:73:cb:62:03:b7:42:b2:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Nov 24 19:25:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=69931c3cb3a0221315d24ecc8e0762953ca8c100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:28:c5:ba:1c:8d:5d:26:50:db:32:87:29:34:
02:8a:18:f2:40:ce:ec:fc:4e:6d:87:28:73:38:7f:
31:31:18:ab:dc:f3:43:fd:c5:6a:ef:92:ad:6f:7b:
a0:0b:9b:ad:87:06:c3:e9:3f:d0:a0:96:2e:37:3a:
a4:d1:3a:50:14:88:e2:10:bd:90:5e:46:b8:ef:b7:
66:8d:12:1a:01:2d:31:89:d9:38:e1:5e:0d:a5:86:
6e:3e:78:b9:9c:91:1f:93:9c:06:c5:a1:02:46:45:
ea:45:06:5a:9d:ba:4d:d8:cc:5e:82:f2:4c:15:cf:
34:27:29:48:24:14:3d:78:6e:99:a7:f8:02:42:27:
0d:d7:1d:b4:3f:87:26:cb:b9:cd:3d:44:7c:6e:0c:
ae:6a:b5:04:fc:70:11:19:fd:bc:24:e4:c8:2a:8b:
df:60:d2:3e:d0:67:f2:9d:09:b1:1a:89:8e:61:92:
d5:43:5d:ae:1d:fd:dd:b5:15:a5:6a:4a:1a:14:94:
58:ea:5b:ea:2e:b7:d8:c8:e3:b8:f2:5c:8c:4e:e1:
80:1d:f0:20:de:c3:dd:ce:ea:31:76:86:dd:6a:da:
42:00:36:1b:0b:0b:02:43:61:81:af:55:9f:04:23:
55:c2:a3:55:4a:ae:80:d3:16:a0:80:d2:cf:fa:1c:
d1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:93:1C:3C:B3:A0:22:13:15:D2:4E:CC:8E:07:62:95:3C:A8:C1:00
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/aZMcPLOgIhMV0k7MjgdilTyowQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.159.0/24
163.5.225.0/24
163.5.229.0/24
Signature Algorithm: sha256WithRSAEncryption
76:ce:f2:56:68:c4:63:78:6e:d9:0f:3e:5d:0e:16:c3:5e:99:
93:f2:6d:ac:00:9b:17:7a:1c:f1:33:a2:48:23:ed:34:1f:16:
a8:ca:f6:2a:ad:39:ef:9a:b3:36:7a:f5:74:5e:65:f0:e0:45:
0f:69:58:0d:88:e4:a3:cb:ce:2b:74:26:bf:d8:19:7c:ae:54:
61:04:fd:1a:27:0f:30:71:d8:52:92:f0:9d:bf:b5:b3:10:ba:
ec:4f:f5:94:b6:51:79:a9:f6:a4:84:f3:39:7e:6c:6f:ef:b3:
eb:b3:ee:87:2d:5d:87:ca:89:29:65:e9:36:fd:31:ea:35:94:
47:a1:b9:6e:d9:46:b6:be:d9:9b:f7:86:34:59:0a:38:b3:48:
bb:64:68:c8:35:d7:5e:a8:02:46:55:9a:44:24:54:bd:8a:5b:
64:88:c0:9c:82:c1:7f:11:b9:cb:33:71:df:fa:a2:e3:80:e0:
e0:1f:77:52:3b:c6:a8:40:6b:9e:b9:25:dd:93:f1:10:0d:23:
3b:05:f0:12:ca:e2:79:08:4e:25:2d:99:a8:c7:3b:69:ad:3d:
40:74:cc:64:d5:85:46:e5:1e:33:fb:f1:ef:bc:85:3f:b5:fb:
55:94:77:6a:34:8d:23:f6:0a:df:7e:b3:39:6e:aa:4f:ac:1a:
e0:4c:09:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:10 2023 by rpki-client on console-ams.rpki-client.org