Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/bpkBIZqvknir6-a2FsLkNeknNbk.roa
File: bpkBIZqvknir6-a2FsLkNeknNbk.roa (raw, json)
Hash identifier: Ll4/Hk4AEnVaVqAi5arYmKdy0QIJDVjOcb23DvQVSdI=
Subject key identifier: 6E:99:01:21:9A:AF:92:78:AB:EB:E6:B6:16:C2:E4:35:E9:27:35:B9
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0183036E48EAED2E59F3C65C7F7FF25DA555
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/bpkBIZqvknir6-a2FsLkNeknNbk.roa
Signing time: Sat 03 Sep 2022 12:58:22 +0000
ROA not before: Sat 03 Sep 2022 12:58:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40676
IP address blocks: 163.5.240.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
163.5.244.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:03:6e:48:ea:ed:2e:59:f3:c6:5c:7f:7f:f2:5d:a5:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 3 12:58:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6e9901219aaf9278abebe6b616c2e435e92735b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fe:f3:58:ee:50:73:c8:17:67:bf:6c:80:ef:
16:c3:d8:b7:14:ef:20:72:b5:75:db:eb:0e:02:c4:
c0:fb:3b:81:18:dd:35:c1:b4:0b:ad:0b:ae:eb:7c:
f6:b8:25:91:c6:ca:f0:d1:d2:4b:cb:e3:f2:34:3b:
09:0f:bc:6e:2f:c7:d8:30:3c:f1:25:5d:31:71:9d:
34:ff:ab:32:17:18:90:c3:98:01:9a:4a:58:2f:3b:
90:5e:f8:3a:07:af:d6:11:28:a5:56:2d:2a:51:5e:
c4:c6:3d:ea:21:c3:62:4d:34:5e:6e:83:56:3d:47:
65:a8:d1:9c:9f:a6:33:12:93:a9:78:1e:a8:d1:05:
16:27:83:8f:2b:eb:b3:b5:1f:d0:ab:15:53:e3:19:
f5:50:96:60:09:c0:89:d9:51:a8:96:8c:e7:1f:64:
5e:c9:ce:b4:03:a5:b9:67:b9:fa:78:6b:f8:a2:fb:
36:56:1c:a5:25:09:f2:ee:00:aa:84:e1:e0:cb:8b:
86:77:e3:da:35:bb:2c:bb:83:cb:c9:4e:66:b8:5b:
85:b0:b4:f1:57:12:1a:6c:99:cf:e2:bc:ca:8a:6f:
7c:f1:62:07:14:40:e2:c0:64:ca:14:b4:b3:9e:cb:
3d:6c:0c:57:a6:ca:91:2f:d9:c9:f3:4e:24:d6:4f:
32:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:99:01:21:9A:AF:92:78:AB:EB:E6:B6:16:C2:E4:35:E9:27:35:B9
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/bpkBIZqvknir6-a2FsLkNeknNbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.238.0/24
163.5.240.0/24
163.5.244.0/24
Signature Algorithm: sha256WithRSAEncryption
06:23:41:bc:ee:81:b6:ac:ac:78:da:82:50:1d:fd:40:5f:10:
fd:39:11:58:40:18:49:6b:eb:60:aa:c4:bb:b6:f4:e1:fb:24:
9f:ac:2a:07:cd:6e:eb:49:f2:15:be:17:6a:f6:4e:a5:bc:bf:
5a:b3:98:d9:ca:5f:3a:07:f3:5f:d3:6b:f8:13:bf:ab:43:18:
27:a5:c2:58:0a:7c:55:ef:5d:9f:a1:91:1d:3d:ed:c3:69:3b:
7c:e3:f4:77:62:90:44:a0:ac:64:5c:31:f2:ac:95:19:4f:42:
62:e1:27:3f:d7:86:cd:19:7b:bb:64:f6:06:8f:23:b0:01:23:
b7:c1:7c:19:d0:ae:a9:72:f5:6a:4a:08:e0:3b:6d:21:de:6a:
79:09:ba:cc:b2:65:8c:d6:7d:bb:95:f2:a9:68:ff:51:13:0e:
28:c4:0d:1a:4b:cc:7b:43:77:dd:ef:6a:ca:83:19:9e:06:8d:
86:84:61:6b:02:4f:52:e5:cb:7b:60:33:49:0f:d7:a2:88:2c:
a5:e1:92:72:f5:63:5e:9d:84:32:ad:64:e2:11:39:15:97:9b:
26:eb:3a:f2:5e:fc:d5:22:63:63:c5:05:87:ea:8c:aa:91:3c:
4d:68:9d:28:dc:9e:18:35:28:23:06:0a:25:0e:cb:f9:a9:4b:
5d:b6:01:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:21 2023 by rpki-client on console-fra.rpki-client.org