Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/awoTMQgzl1vacVubPc6vo_KLFak.roa
File: awoTMQgzl1vacVubPc6vo_KLFak.roa (raw, json)
Hash identifier: KTodY0IRdiZ7T+YfHGj7KKzXeYyjCd0rYjbnaOU6Hwg=
Subject key identifier: 6B:0A:13:31:08:33:97:5B:DA:71:5B:9B:3D:CE:AF:A3:F2:8B:15:A9
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018465B22043BFBDE3918D7A93C5F80D3930
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/awoTMQgzl1vacVubPc6vo_KLFak.roa
Signing time: Fri 11 Nov 2022 07:58:03 +0000
ROA not before: Fri 11 Nov 2022 07:58:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 163.5.216.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:65:b2:20:43:bf:bd:e3:91:8d:7a:93:c5:f8:0d:39:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Nov 11 07:58:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6b0a13310833975bda715b9b3dceafa3f28b15a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bc:aa:75:4e:35:4e:f0:5c:03:2e:d9:6e:47:
cc:48:b6:f6:98:e7:42:e3:f3:eb:b4:70:01:9c:4a:
fa:25:c1:63:31:25:5c:21:39:f1:4f:0b:5e:79:3f:
93:c5:ff:5d:5f:1f:20:0f:78:32:23:6a:59:53:ef:
e6:fc:d8:20:6f:14:b4:ee:a2:b8:71:90:4e:1c:72:
f5:d3:e2:66:ba:11:89:0c:d1:f2:47:32:dc:40:c6:
06:d5:1e:e3:90:82:04:9c:d6:90:e7:f6:bc:c5:c9:
74:4a:f7:38:62:cb:da:18:05:ee:d7:bb:48:4f:85:
3c:53:a7:50:c0:47:06:25:e1:b9:63:e2:18:7e:7a:
48:e9:a2:a8:d3:06:2b:1b:48:b5:f6:06:71:de:48:
67:ba:85:2b:4f:e9:6e:a3:7b:96:0c:fa:95:26:83:
a9:89:1b:59:57:3c:f0:c7:b7:c7:07:53:f1:b0:03:
9b:3d:98:17:eb:be:b6:97:6c:20:e6:c1:c8:6f:9a:
03:f9:2d:43:5b:8d:21:e2:63:43:7c:6f:10:60:e3:
6e:80:ff:ee:6c:bd:af:cc:4c:2a:1c:e6:27:a2:43:
83:08:ff:db:df:2b:6d:94:42:8f:d8:45:95:58:0d:
21:14:4b:97:ad:f2:5b:61:b4:2e:57:5b:6b:2c:68:
2c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:0A:13:31:08:33:97:5B:DA:71:5B:9B:3D:CE:AF:A3:F2:8B:15:A9
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/awoTMQgzl1vacVubPc6vo_KLFak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.216.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:14:15:19:c5:71:ae:be:ae:45:93:7c:47:cf:5f:88:f9:ca:
04:34:47:50:2b:10:9c:8d:e7:04:e0:f6:1e:d3:12:58:4c:57:
12:77:b9:d3:12:f2:4e:ad:de:f1:43:d2:35:a6:82:4f:1e:5c:
fd:63:62:93:d4:7c:76:19:6c:ba:36:e3:55:38:f9:d9:6a:52:
d4:0f:38:71:b9:c5:38:25:ea:ef:94:c2:63:cd:54:33:c8:f1:
25:88:4e:4e:92:58:36:22:a3:45:b4:91:f2:23:b5:f4:c2:b5:
66:59:85:74:d9:87:eb:6f:1d:05:90:93:c8:aa:49:42:30:32:
7d:ee:e7:b1:4b:c9:b0:be:ec:87:31:a4:75:2e:0f:cf:60:f7:
16:5e:89:15:14:6a:98:3b:66:68:2a:a4:32:db:93:04:03:49:
b4:f8:66:6d:56:72:90:22:44:5a:80:95:fe:77:5d:15:92:82:
10:b5:47:b0:13:f5:8e:7d:09:0c:69:d0:bf:30:20:59:73:2d:
de:e0:5f:81:cb:30:d1:4d:6b:5d:51:b3:f4:ff:e3:8e:4c:b3:
b8:04:11:9e:08:d6:4d:6e:5e:01:d8:41:28:c1:55:26:72:bd:
11:6b:d8:01:da:0d:22:a7:c4:69:fc:5d:b0:d7:2c:31:5e:43:
69:5d:cc:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:06 2024 by rpki-client on console-fra.rpki-client.org