Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/b5LntTK3pNN2_GVSUaDtu7YvMiI.roa
File: b5LntTK3pNN2_GVSUaDtu7YvMiI.roa (raw, json)
Hash identifier: ACrwz14k88kKyGwBfbKi3kp3oJ4ms6d3ede6CfA2NTo=
Subject key identifier: 6F:92:E7:B5:32:B7:A4:D3:76:FC:65:52:51:A0:ED:BB:B6:2F:32:22
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01855E8BDD03B3150B32CCD7A6E80EE5499D
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/b5LntTK3pNN2_GVSUaDtu7YvMiI.roa
Signing time: Thu 29 Dec 2022 15:41:42 +0000
ROA not before: Thu 29 Dec 2022 15:41:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61003
IP address blocks: 163.5.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5e:8b:dd:03:b3:15:0b:32:cc:d7:a6:e8:0e:e5:49:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Dec 29 15:41:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6f92e7b532b7a4d376fc655251a0edbbb62f3222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:43:de:f5:28:d6:99:11:ee:75:9f:76:52:ba:
b2:87:6b:b2:5a:e6:34:3d:b4:d0:65:a3:73:7b:26:
4a:89:d1:cc:84:80:4d:89:e1:a4:67:eb:4f:72:de:
fb:65:39:a3:11:d9:89:b1:1e:2a:7d:39:56:db:bd:
6a:93:c9:9c:1d:95:01:35:38:e4:2e:94:d6:57:29:
10:e3:89:e7:32:f4:0f:d8:ec:fa:57:6e:52:9d:bb:
4b:0d:a4:76:51:ed:c2:92:db:ba:d6:e4:02:a7:92:
c5:9f:f8:2f:0f:2e:ea:8a:9c:8c:4e:3d:da:12:5a:
83:c7:41:6c:dd:5d:3a:ed:10:dd:be:e3:e0:21:72:
0f:81:61:4f:ac:0f:4a:7c:23:9d:9c:4d:55:c6:ee:
16:af:5e:ea:0d:09:d7:97:78:9e:55:d3:ac:0b:46:
31:8e:ff:01:88:b2:13:91:e9:f7:25:08:2b:05:4f:
6b:36:b0:f2:07:e6:43:7b:8d:a4:7c:d7:fb:45:bc:
5f:e0:bb:55:4f:c7:58:7d:c6:6a:e9:c3:42:09:fd:
99:25:37:a3:84:14:3a:d0:52:23:06:2e:f7:c0:16:
31:c0:ab:26:fb:cf:26:ff:01:37:52:e8:48:d6:60:
7f:33:71:89:c2:33:ec:69:36:9a:90:2a:9a:8a:8c:
2c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:92:E7:B5:32:B7:A4:D3:76:FC:65:52:51:A0:ED:BB:B6:2F:32:22
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/b5LntTK3pNN2_GVSUaDtu7YvMiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.134.0/24
Signature Algorithm: sha256WithRSAEncryption
73:c4:e7:e3:fa:6b:42:1f:93:2f:5b:26:27:d6:55:77:81:4b:
56:99:b5:93:6a:8d:76:31:84:cf:a4:ce:48:cc:f8:eb:fb:de:
f7:4d:7c:04:de:2f:1c:a3:0e:06:f3:31:a5:b3:c5:12:9c:4b:
a6:af:f4:a4:14:37:cc:bf:dd:f9:eb:0f:1a:27:b2:79:15:c1:
51:9e:00:15:47:f2:ae:0d:d3:f8:33:f1:a8:7a:93:a4:2b:1d:
e1:98:1f:a3:65:02:3a:6f:a7:1b:e7:ba:2b:88:bd:23:2c:f8:
12:fc:0c:cf:c2:3f:d0:3d:02:70:f3:29:bf:66:e9:b9:2f:ed:
11:42:01:91:fe:5a:7c:80:c2:bb:b4:dc:d8:36:ea:4c:bb:6e:
75:c7:0b:2e:f0:06:44:f3:45:c5:4c:a5:b9:5a:9a:7d:84:3f:
b2:0f:5c:38:68:55:2d:9c:2e:45:30:04:f4:a9:6a:a4:a2:f9:
33:9b:5f:56:0f:cc:b8:c3:b5:06:1e:25:62:fd:ea:1c:8f:43:
d7:7b:f5:1f:a2:dd:73:59:79:07:10:95:46:78:91:a1:d0:0c:
c5:97:ad:c5:92:8e:c6:61:5f:c2:d7:ea:1c:dc:49:49:28:ac:
ba:43:da:dd:a5:36:ff:f4:e8:b0:7a:12:82:46:0a:48:f5:3a:
7c:d9:e7:bb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVei90DsxULMszXpugO5UmdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjIxMjI5MTU0MTQyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjkyZTdiNTMyYjdhNGQzNzZmYzY1NTI1MWEwZWRiYmI2MmYzMjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEPe9SjWmRHudZ92Urqyh2uyWuY0
PbTQZaNzeyZKidHMhIBNieGkZ+tPct77ZTmjEdmJsR4qfTlW271qk8mcHZUBNTjk
LpTWVykQ44nnMvQP2Oz6V25SnbtLDaR2Ue3Cktu61uQCp5LFn/gvDy7qipyMTj3a
ElqDx0Fs3V067RDdvuPgIXIPgWFPrA9KfCOdnE1Vxu4Wr17qDQnXl3ieVdOsC0Yx
jv8BiLITken3JQgrBU9rNrDyB+ZDe42kfNf7Rbxf4LtVT8dYfcZq6cNCCf2ZJTej
hBQ60FIjBi73wBYxwKsm+88m/wE3UuhI1mB/M3GJwjPsaTaakCqaiowsGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG+S57Uyt6TTdvxlUlGg7bu2LzIiMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvYjVMbnRUSzNwTk4yX0dWU1VhRHR1N1l2TWlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowWGMA0G
CSqGSIb3DQEBCwUAA4IBAQBzxOfj+mtCH5MvWyYn1lV3gUtWmbWTao12MYTPpM5I
zPjr+973TXwE3i8cow4G8zGls8USnEumr/SkFDfMv9356w8aJ7J5FcFRngAVR/Ku
DdP4M/GoepOkKx3hmB+jZQI6b6cb57oriL0jLPgS/AzPwj/QPQJw8ym/Zum5L+0R
QgGR/lp8gMK7tNzYNupMu251xwsu8AZE80XFTKW5Wpp9hD+yD1w4aFUtnC5FMAT0
qWqkovkzm19WD8y4w7UGHiVi/eocj0PXe/Ufot1zWXkHEJVGeJGh0AzFl63Fko7G
YV/C1+oc3ElJKKy6Q9rdpTb/9OiwehKCRgpI9Tp82ee7
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:10 2023 by rpki-client on console-ams.rpki-client.org