Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/brNo_VYOJ996TQ6rlpCAkos8KOc.roa
File: brNo_VYOJ996TQ6rlpCAkos8KOc.roa (raw, json)
Hash identifier: zQPReU8qAnN3/SW2o0COaElxl1e52uP5QVuXDAiHMRM=
Subject key identifier: 6E:B3:68:FD:56:0E:27:DF:7A:4D:0E:AB:96:90:80:92:8B:3C:28:E7
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018465AACD4E71949B3663D273327E247335
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/brNo_VYOJ996TQ6rlpCAkos8KOc.roa
Signing time: Fri 11 Nov 2022 07:50:03 +0000
ROA not before: Fri 11 Nov 2022 07:50:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140947
IP address blocks: 163.5.211.0/24 maxlen: 24
163.5.103.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:65:aa:cd:4e:71:94:9b:36:63:d2:73:32:7e:24:73:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Nov 11 07:50:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6eb368fd560e27df7a4d0eab969080928b3c28e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2f:ff:14:6b:3e:04:2f:bc:7c:10:3e:5d:f0:
03:85:25:49:d8:a3:ff:e4:e3:bd:4e:67:17:8a:dd:
17:5c:9c:d0:11:ce:5a:e9:22:43:9f:8a:67:d5:0f:
1e:6f:57:da:17:fd:50:ba:28:2f:b1:c9:40:b6:7f:
0c:ae:16:96:d6:42:f5:70:c8:9d:f6:33:c1:20:48:
49:b3:89:77:c7:a6:fd:33:89:96:f3:02:56:97:c2:
ff:58:b3:12:dc:9f:d4:b0:ed:ff:cc:b4:4f:3e:ec:
60:b4:cd:71:67:2b:07:b3:f8:42:59:1d:41:71:94:
7e:35:49:a3:0b:17:07:ae:1d:b3:33:45:cc:48:d4:
22:b7:62:36:8a:0b:c6:c9:a5:02:9e:93:5a:21:1a:
02:12:0a:b7:b5:e6:06:3c:53:ec:d7:7d:1e:a0:0f:
5f:74:b6:fb:91:f0:3d:09:fd:ca:75:56:3b:41:cd:
40:ce:04:cf:01:a0:25:85:7a:d7:1b:20:11:78:7f:
10:b7:e9:2f:ce:69:5f:ca:b0:b6:7c:8f:94:38:0d:
fb:e9:c0:64:16:67:a8:e9:4c:ef:74:13:37:d5:bc:
dd:d3:5f:8a:7a:b6:0b:1a:58:53:75:5a:53:4c:a7:
6e:59:76:5f:f4:b2:9e:15:2d:74:8e:55:8a:5f:23:
46:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B3:68:FD:56:0E:27:DF:7A:4D:0E:AB:96:90:80:92:8B:3C:28:E7
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/brNo_VYOJ996TQ6rlpCAkos8KOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.103.0/24
163.5.211.0/24
Signature Algorithm: sha256WithRSAEncryption
59:5e:5f:86:e0:60:6d:ce:6d:96:9a:60:4d:8a:56:c7:a5:d9:
28:67:b5:31:7f:1a:89:1e:6c:49:b2:94:77:db:8c:1f:c5:6d:
35:40:ab:9a:79:f8:8a:c1:de:2a:9b:96:6e:aa:9e:3f:69:ca:
89:6f:9e:6d:1e:43:64:1b:bd:13:69:b9:a0:d1:4d:6b:11:9d:
74:b9:0c:d3:1c:c9:d6:6e:56:a9:bc:6a:6a:24:3d:74:0f:79:
88:61:54:31:47:d7:b9:cb:8a:be:fb:d5:2c:1c:c3:fb:04:12:
4f:80:ca:13:d6:0a:24:88:15:0d:26:3b:72:ed:8c:cb:98:5c:
e7:28:58:64:5e:27:8e:0c:37:a3:06:72:3c:ad:92:9f:09:0d:
b6:4e:df:e0:96:8d:20:f1:52:3e:ee:5e:40:5c:a8:81:fd:fa:
50:91:c5:70:9e:5b:aa:31:8c:9c:64:46:f7:1d:51:0b:a7:2c:
2a:df:db:b1:86:10:90:95:67:15:62:1f:87:1b:db:69:d4:94:
2a:cb:15:d9:e0:bc:89:ed:3c:f8:34:00:0a:08:9b:68:f3:b6:
05:10:f3:e5:1f:c9:69:f8:fb:9e:43:ce:6b:10:c8:46:d6:44:
1c:c4:44:95:a5:43:df:85:56:31:a2:8e:be:05:ef:2a:00:2a:
5f:19:68:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:21 2023 by rpki-client on console-fra.rpki-client.org