Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/cOo3S9FSasDDNnbg23OmI1lglaU.roa
File: cOo3S9FSasDDNnbg23OmI1lglaU.roa (raw, json)
Hash identifier: Dcd+gBTcziZ5KPzl3bmYd8pJWK6X8FKVL4Qjk1bQcrw=
Subject key identifier: 70:EA:37:4B:D1:52:6A:C0:C3:36:76:E0:DB:73:A6:23:59:60:95:A5
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0183BCB501D6C8D9ACD5EEED74F2F32C965A
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/cOo3S9FSasDDNnbg23OmI1lglaU.roa
Signing time: Sun 09 Oct 2022 12:25:22 +0000
ROA not before: Sun 09 Oct 2022 12:25:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3356
IP address blocks: 163.5.199.0/24 maxlen: 24
163.5.231.0/24 maxlen: 24
163.5.234.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:bc:b5:01:d6:c8:d9:ac:d5:ee:ed:74:f2:f3:2c:96:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 9 12:25:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=70ea374bd1526ac0c33676e0db73a623596095a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d9:ff:f3:06:c9:20:15:c8:5d:1c:29:c1:ba:
fa:db:79:4f:cd:da:a1:0e:03:3f:b4:75:43:de:80:
0e:f5:49:c7:5c:40:24:34:a5:37:0a:fc:46:49:56:
b0:5c:bf:51:60:f8:95:41:55:9a:29:8e:e5:b6:e8:
58:c0:3d:f6:e1:45:0b:26:ad:e4:85:48:e1:1f:60:
89:64:5f:17:1f:57:af:e8:d9:93:3b:13:b1:ba:59:
b9:16:38:89:6a:c3:08:82:37:b1:02:2a:e1:7f:9c:
8e:29:db:de:3b:54:21:e4:05:7d:c2:41:a2:63:9b:
ba:1d:54:32:c7:a4:d2:56:63:5e:20:2d:f3:8d:8e:
ee:17:ae:cf:81:d8:e9:f2:26:5e:c5:c7:ad:b9:eb:
86:23:93:65:d7:c9:b6:46:73:2f:6b:7c:22:52:dd:
1f:d2:c8:4a:23:7a:30:82:be:28:17:79:3a:4f:bb:
83:f2:a9:e0:c3:e0:e4:b6:a1:b2:ca:87:81:bd:14:
aa:41:87:b8:40:03:37:2f:4f:c6:5c:29:3c:61:6e:
d0:69:7e:43:05:5b:f3:fc:d5:d9:27:a5:99:31:b4:
a5:82:2f:ad:c7:99:63:36:45:b8:38:5b:7f:0b:d2:
4f:a2:8b:95:d4:18:b9:e3:c1:e1:db:d8:8f:71:5e:
f8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:EA:37:4B:D1:52:6A:C0:C3:36:76:E0:DB:73:A6:23:59:60:95:A5
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/cOo3S9FSasDDNnbg23OmI1lglaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.164.0/24
163.5.199.0/24
163.5.231.0/24
163.5.234.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:87:e5:75:56:ee:c4:60:e2:de:78:57:ca:c6:a2:7c:06:19:
e1:41:b0:5c:5e:37:78:3e:f9:63:e5:98:01:aa:1f:7d:78:0d:
22:e3:29:b7:83:86:32:c0:f5:8a:83:a5:29:bb:7b:b0:90:b6:
4c:2b:f3:fc:bf:24:d4:c5:8a:f1:1b:84:1b:bd:86:6c:3f:c8:
a2:b2:a9:35:5d:0c:b0:85:7c:49:8d:2d:ab:1e:69:1e:04:9b:
3e:21:c7:6a:2d:77:fb:b0:c3:f8:b5:bf:5b:3e:43:8d:6b:e3:
82:97:96:70:53:ef:c5:3d:0c:49:f1:49:71:58:63:b5:d9:aa:
ce:98:30:11:a4:b6:30:4e:1b:7b:47:0f:12:da:ab:93:09:ea:
e3:6d:11:98:18:ed:11:3b:83:50:28:07:95:2a:d1:b3:86:ae:
20:df:b2:08:31:4e:e6:07:2e:ad:06:ca:41:22:fd:1b:82:1c:
09:a4:19:f7:2a:27:99:81:e8:b9:72:6d:0d:e1:53:fb:6d:c7:
9c:c5:0d:3a:fd:46:92:f2:97:ef:64:4d:0c:a8:fd:3d:9f:a9:
cf:96:59:b0:30:97:e2:0d:b7:5a:91:b2:07:95:9f:02:7e:f3:
2e:64:41:9d:a3:a2:31:bd:8c:78:42:d1:4c:56:63:45:3e:3f:
6b:02:24:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:21 2023 by rpki-client on console-fra.rpki-client.org