Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/e4anWmVwq-PF6Psu5eP0nHrNj7c.roa
File: e4anWmVwq-PF6Psu5eP0nHrNj7c.roa (raw, json)
Hash identifier: C2cPoxSYR48eBibQQw+L++32JYyprDccss5EObFIPO0=
Subject key identifier: 7B:86:A7:5A:65:70:AB:E3:C5:E8:FB:2E:E5:E3:F4:9C:7A:CD:8F:B7
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01827C9AEAF601EB9DC4D07FD85F7CB8C4E2
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/e4anWmVwq-PF6Psu5eP0nHrNj7c.roa
Signing time: Mon 08 Aug 2022 08:38:23 +0000
ROA not before: Mon 08 Aug 2022 08:38:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61138
IP address blocks: 163.5.131.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:7c:9a:ea:f6:01:eb:9d:c4:d0:7f:d8:5f:7c:b8:c4:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 8 08:38:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7b86a75a6570abe3c5e8fb2ee5e3f49c7acd8fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d2:a3:7c:e2:bd:ca:d5:f7:61:8b:a2:c7:a2:
81:94:18:0e:0e:76:97:9a:b6:e0:c4:58:f0:10:3d:
b2:b7:67:85:67:89:0d:1a:eb:8e:0c:58:ec:b6:4b:
e3:92:9a:2c:5a:e1:25:5c:ae:45:1d:79:ac:a7:c1:
67:7d:e4:8e:0f:db:28:96:66:94:90:de:ac:16:c3:
58:80:74:5a:4a:cf:33:69:de:06:26:f3:51:61:78:
dd:c9:ea:39:32:ad:89:0b:5a:d8:82:7b:53:73:f8:
87:52:fb:bd:92:ae:9a:89:11:91:d3:4c:69:25:3b:
c2:50:23:f8:58:0e:68:f4:31:0c:a7:6d:4f:be:80:
2b:bb:7d:6c:dc:d7:69:65:a9:80:59:60:07:44:ea:
41:84:0e:93:67:e9:72:c0:87:07:1b:20:cf:1c:02:
9e:34:ba:2f:c2:83:26:e0:d4:4d:e4:60:b4:d8:19:
f0:00:84:85:12:25:5e:a6:46:5d:48:2b:40:2b:48:
d8:a2:a8:ff:84:8b:7e:b3:33:99:8f:3d:f7:4e:d1:
d8:71:c3:22:c4:57:05:85:f1:ac:a9:36:9b:2f:e9:
eb:f2:9d:ad:f2:84:92:cd:80:26:63:63:81:29:bb:
1f:8b:02:37:9e:4c:59:cd:85:80:b9:31:01:c0:a4:
23:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:86:A7:5A:65:70:AB:E3:C5:E8:FB:2E:E5:E3:F4:9C:7A:CD:8F:B7
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/e4anWmVwq-PF6Psu5eP0nHrNj7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.131.0/24
Signature Algorithm: sha256WithRSAEncryption
11:7a:fc:1d:98:da:15:78:1e:fe:1b:ae:e4:2b:42:2f:bb:a2:
9b:de:82:54:c9:8a:95:2b:04:c5:0e:6c:92:f8:e3:27:63:62:
0e:f1:c5:40:7e:f9:60:14:33:03:e6:ce:09:f8:6f:f9:c3:3d:
73:c8:7d:34:e8:7c:1f:11:0a:b0:92:bc:5a:8d:2f:d3:36:2f:
ad:4f:70:fd:6d:e6:e6:c2:14:5f:24:1f:21:c9:ea:84:e6:f2:
44:6d:18:24:ea:7a:02:d4:30:d5:c6:b3:39:f9:43:fa:92:6b:
ed:e4:5c:cc:b8:5b:f9:8d:f2:96:68:b7:4e:64:26:14:d1:0d:
55:1e:39:aa:54:f2:c0:63:84:0b:a2:78:f7:0f:1e:4d:d7:ec:
8c:81:55:15:77:36:64:3f:0d:76:62:b5:7f:12:b2:1c:54:b1:
b9:49:d5:be:95:39:81:42:56:84:54:1e:78:c5:b5:b3:a8:fc:
75:1c:f1:3f:65:e8:c5:02:3f:87:ee:1e:72:c0:43:eb:95:34:
fe:75:86:f2:e9:ad:28:6e:90:90:6e:d7:a3:42:27:66:7a:fa:
cb:d2:2c:3f:2c:88:3b:76:34:4d:93:a9:5a:25:0f:15:1e:ed:
5b:1c:e6:e6:e1:38:35:75:00:77:e3:2c:f6:cd:17:a7:a5:d6:
0f:9f:fd:6b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYJ8mur2AeudxNB/2F98uMTiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjIwODA4MDgzODIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Yjg2YTc1YTY1NzBhYmUzYzVlOGZiMmVlNWUzZjQ5YzdhY2Q4ZmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidKjfOK9ytX3YYuix6KBlBgODnaX
mrbgxFjwED2yt2eFZ4kNGuuODFjstkvjkposWuElXK5FHXmsp8FnfeSOD9solmaU
kN6sFsNYgHRaSs8zad4GJvNRYXjdyeo5Mq2JC1rYgntTc/iHUvu9kq6aiRGR00xp
JTvCUCP4WA5o9DEMp21PvoAru31s3NdpZamAWWAHROpBhA6TZ+lywIcHGyDPHAKe
NLovwoMm4NRN5GC02BnwAISFEiVepkZdSCtAK0jYoqj/hIt+szOZjz33TtHYccMi
xFcFhfGsqTabL+nr8p2t8oSSzYAmY2OBKbsfiwI3nkxZzYWAuTEBwKQjxQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHuGp1plcKvjxej7LuXj9Jx6zY+3MB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvZTRhbldtVndxLVBGNlBzdTVlUDBuSHJOajdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowWDMA0G
CSqGSIb3DQEBCwUAA4IBAQARevwdmNoVeB7+G67kK0Ivu6Kb3oJUyYqVKwTFDmyS
+OMnY2IO8cVAfvlgFDMD5s4J+G/5wz1zyH006HwfEQqwkrxajS/TNi+tT3D9bebm
whRfJB8hyeqE5vJEbRgk6noC1DDVxrM5+UP6kmvt5FzMuFv5jfKWaLdOZCYU0Q1V
HjmqVPLAY4QLonj3Dx5N1+yMgVUVdzZkPw12YrV/ErIcVLG5SdW+lTmBQlaEVB54
xbWzqPx1HPE/ZejFAj+H7h5ywEPrlTT+dYby6a0obpCQbtejQidmevrL0iw/LIg7
djRNk6laJQ8VHu1bHObm4Tg1dQB34yz2zRenpdYPn/1r
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:21 2023 by rpki-client on console-fra.rpki-client.org