Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/cuf-voy6YMxT5N0IShusREHDt5w.roa
File: cuf-voy6YMxT5N0IShusREHDt5w.roa (raw, json)
Hash identifier: hMqy5InCTGlzaj42X9gDCPSSThOq6hbchCUz4aljrys=
Subject key identifier: 72:E7:FE:BE:8C:BA:60:CC:53:E4:DD:08:4A:1B:AC:44:41:C3:B7:9C
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0183125CED7FF8E52A04A283DED95B0AC30B
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/cuf-voy6YMxT5N0IShusREHDt5w.roa
Signing time: Tue 06 Sep 2022 10:33:43 +0000
ROA not before: Tue 06 Sep 2022 10:33:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 46573
IP address blocks: 163.5.220.0/24 maxlen: 24
163.5.239.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:12:5c:ed:7f:f8:e5:2a:04:a2:83:de:d9:5b:0a:c3:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 6 10:33:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=72e7febe8cba60cc53e4dd084a1bac4441c3b79c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:cc:44:16:69:91:52:12:e7:87:cb:9a:9f:18:
d8:1d:b7:ac:27:b1:79:30:63:7f:10:6c:8d:3b:f1:
a8:bf:ac:29:11:40:0c:ab:0d:92:73:00:a8:c0:62:
2b:65:71:61:90:fe:51:80:fc:1e:65:db:d4:e9:03:
89:d3:15:9d:2f:26:04:51:81:20:15:be:e4:c3:b8:
e3:59:cb:ff:86:b8:09:69:a4:39:56:c9:54:6e:57:
0e:20:9e:26:94:3f:cb:63:3e:9f:1a:8e:75:3d:ae:
79:fe:e6:87:76:4d:27:8d:18:47:d7:1d:d7:77:10:
39:92:d7:d6:b4:ea:f4:88:64:01:7c:ee:9f:b4:b0:
72:df:31:c6:9d:46:8b:8c:e1:64:62:b0:87:91:4e:
9a:dc:15:80:5a:76:c8:5d:d3:58:4f:af:12:d7:0e:
e1:dd:c7:3e:a7:ce:2e:4c:5e:37:c1:0b:59:e7:00:
c0:0b:d1:ee:2d:68:86:8c:50:1c:70:de:34:c1:a5:
e5:d3:e9:cd:f1:f4:55:25:11:cb:36:ff:01:f7:c7:
0f:6e:17:aa:a7:9d:ce:f1:98:cc:da:d4:15:67:d2:
4c:e4:58:84:df:7d:4d:b2:b2:8f:3a:19:3c:da:64:
46:cb:cf:48:69:20:20:22:55:43:e4:1e:95:21:ff:
c9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E7:FE:BE:8C:BA:60:CC:53:E4:DD:08:4A:1B:AC:44:41:C3:B7:9C
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/cuf-voy6YMxT5N0IShusREHDt5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.220.0/24
163.5.239.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:71:43:3c:b6:bf:ad:e9:e9:fe:ba:ff:ed:0c:2f:d8:b5:8b:
a7:96:dd:82:f0:af:ce:44:3c:4a:ba:9b:e1:ff:57:df:41:1d:
f0:df:d1:9c:0f:ec:fc:32:af:86:14:b1:ed:70:c8:f2:20:87:
86:4f:3e:84:eb:f7:b9:8b:6a:6f:6f:67:bc:e2:f0:75:2c:53:
c1:fa:43:56:04:4c:1e:30:66:e3:06:9b:fb:08:c0:2b:19:c6:
42:8b:c5:e6:48:65:58:41:8a:3f:75:ab:fa:3f:b5:ba:56:67:
ab:c3:d9:ff:cb:0e:28:d0:7d:fe:a5:a2:88:31:97:81:bd:c6:
4f:96:49:04:d6:0c:68:cd:6e:55:7b:a6:ab:b8:55:cc:9e:9f:
53:8d:91:91:bf:e9:b0:60:aa:a4:6c:68:85:4f:3a:ef:b4:bd:
1b:42:90:ec:0a:c0:6c:8f:ce:eb:86:76:75:55:0a:ca:e4:42:
62:29:78:e4:96:a8:5b:04:6c:9d:0f:eb:e1:55:cc:c7:81:0a:
d2:b8:54:e3:8a:e3:35:f6:d6:27:c7:b3:17:27:f1:d7:cf:22:
ae:e1:0a:66:c5:87:d8:7a:e5:7d:40:c2:64:48:0b:2e:34:62:
6b:cb:42:e2:be:5e:1b:01:a4:2a:15:d5:d4:07:1d:74:56:17:
67:65:9a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:10 2023 by rpki-client on console-ams.rpki-client.org