Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/cBIUNu8TyXZ_7xf0bI4gVClOzWk.roa
File: cBIUNu8TyXZ_7xf0bI4gVClOzWk.roa (raw, json)
Hash identifier: VH0ZyILaf4SnmGH4KYhBjhL017pduoJYn/BZY+q9Sic=
Subject key identifier: 70:12:14:36:EF:13:C9:76:7F:EF:17:F4:6C:8E:20:54:29:4E:CD:69
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0182D5BE86B19679CE617B02E110236CEA68
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/cBIUNu8TyXZ_7xf0bI4gVClOzWk.roa
Signing time: Thu 25 Aug 2022 16:03:29 +0000
ROA not before: Thu 25 Aug 2022 16:03:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210439
IP address blocks: 163.5.233.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d5:be:86:b1:96:79:ce:61:7b:02:e1:10:23:6c:ea:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 25 16:03:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=70121436ef13c9767fef17f46c8e2054294ecd69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:9a:9f:bd:10:3e:e4:ec:ae:1b:66:28:a6:d7:
6f:c5:d8:bf:9b:77:9a:95:46:e0:66:e4:d6:18:75:
a9:aa:7c:95:74:70:5d:ae:71:d7:09:22:1c:29:29:
55:a8:8f:f8:eb:41:ea:6d:77:2c:d5:16:3b:af:ba:
3f:9b:9e:e9:c8:b6:18:75:5d:a5:25:28:bb:12:26:
45:5e:3d:ed:30:5f:8c:43:5d:00:d9:b0:fa:70:f6:
88:15:76:ef:a2:12:8e:99:9e:52:55:a5:4a:63:e2:
71:78:d9:23:84:1f:01:40:8a:f4:dc:f1:de:17:ab:
40:76:2c:db:d2:36:9d:cc:1a:e7:bd:84:e9:e0:5c:
d6:77:51:6c:0c:82:4c:1d:62:49:e1:09:58:22:fe:
be:af:21:6d:8f:52:47:74:5a:2a:27:f0:d0:97:c4:
cb:28:f6:b8:6b:5d:02:79:94:85:2f:e0:8b:7c:0a:
30:d8:0e:61:2f:27:ec:da:d1:8f:fd:24:6d:01:c9:
4e:ae:4a:96:7c:e0:78:f6:17:c6:cd:b5:dd:c7:32:
3c:17:09:aa:b0:66:5c:88:c3:11:c6:4f:38:1b:ee:
82:ec:9f:aa:33:e2:f7:16:21:0e:34:38:b4:ac:21:
6f:2f:87:1c:27:39:cb:42:b7:58:ee:b2:ca:d6:92:
cf:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:12:14:36:EF:13:C9:76:7F:EF:17:F4:6C:8E:20:54:29:4E:CD:69
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/cBIUNu8TyXZ_7xf0bI4gVClOzWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.233.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:62:ea:cf:a6:42:0c:56:67:c2:c5:74:85:4b:bb:80:14:f2:
51:97:ef:01:7a:14:a7:b9:7f:95:f7:45:3a:8b:8a:54:1a:e0:
5f:22:ae:e3:d5:88:c6:c3:27:be:cd:06:ed:c2:f8:6e:b1:66:
66:8a:28:85:3f:fa:ad:50:19:43:a0:6b:f1:5a:0e:69:89:6a:
59:bd:55:97:6e:38:e8:d1:58:37:84:17:49:be:b3:5e:f4:b5:
bc:86:63:13:64:05:e6:f9:b1:c7:67:78:0b:12:0a:87:ed:01:
ce:57:d8:66:1b:9c:de:62:68:3b:c2:87:dd:15:a4:03:87:f2:
31:66:91:25:f5:6f:7f:79:2e:cc:38:57:44:53:35:19:3f:88:
bc:bd:d8:a8:9d:c2:25:0a:8b:ae:19:81:d4:3f:7b:ee:9e:e5:
8c:1f:8e:cf:69:19:0b:8d:a8:f5:83:e5:2b:c0:dd:df:a9:46:
09:f3:da:e2:ee:c0:5d:32:10:8d:78:52:d5:ba:90:6f:a1:79:
86:9b:37:a5:a5:e8:dd:08:19:13:5d:95:a0:bf:71:1d:67:e1:
f1:f5:20:89:3c:ff:f8:43:79:8f:44:f9:03:58:e9:32:a6:33:
e1:b9:82:4a:b9:55:c5:de:15:7b:2a:ac:c0:2a:0b:e7:c0:e1:
53:48:87:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:10 2023 by rpki-client on console-ams.rpki-client.org