Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/evyAvszsMZYoy48iw_JqR6Ty6jI.roa
File: evyAvszsMZYoy48iw_JqR6Ty6jI.roa (raw, json)
Hash identifier: waXyYkytpH/7rHhgvc9/dQtMa9qlBOOM822u3WVYm0Y=
Subject key identifier: 7A:FC:80:BE:CC:EC:31:96:28:CB:8F:22:C3:F2:6A:47:A4:F2:EA:32
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018307601C7E45527115D17CDCC57B9E05CE
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/evyAvszsMZYoy48iw_JqR6Ty6jI.roa
Signing time: Sun 04 Sep 2022 07:21:22 +0000
ROA not before: Sun 04 Sep 2022 07:21:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 163.5.215.0/24 maxlen: 24
163.5.145.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
163.5.168.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:07:60:1c:7e:45:52:71:15:d1:7c:dc:c5:7b:9e:05:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 4 07:21:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7afc80beccec319628cb8f22c3f26a47a4f2ea32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:32:c2:f2:96:e2:67:18:ff:12:c2:70:13:a5:
76:c1:bf:26:3e:cd:b8:75:95:02:74:e7:fe:89:c5:
8c:8f:51:8f:d8:7b:97:80:1f:cf:67:f1:37:8a:70:
ea:c2:73:86:97:78:7d:0d:71:03:30:57:d7:71:7b:
1e:80:b3:21:f5:b4:8a:d7:65:ee:d5:f2:f8:60:47:
84:a8:9c:e3:db:d7:ba:f7:05:f5:99:12:61:46:27:
9b:b3:46:a5:f6:8b:4f:d0:bb:b4:f7:5f:d1:6c:90:
b4:1a:4a:c3:c6:c2:b8:6b:d1:4d:cf:fc:c7:b1:c3:
30:81:8d:05:99:7e:6a:18:75:da:7d:80:bb:96:ee:
ba:36:2f:de:79:8f:6a:8b:59:5a:db:5c:be:9b:97:
ed:82:3d:c8:0c:35:ad:da:a3:5c:18:0e:59:02:d4:
61:bb:b7:cd:6a:4f:a5:cf:3d:2a:b5:6c:b3:5d:08:
9e:25:17:7e:32:5e:8f:88:22:82:4d:eb:c4:88:d9:
c1:a7:c6:b2:f0:88:02:4f:a9:00:9a:63:10:7b:a2:
b1:95:38:4b:53:66:5d:9b:b1:34:42:2c:a1:d0:fe:
44:13:7d:03:3b:d1:67:a5:9a:ef:98:22:1b:a1:f0:
8c:2e:c2:2e:9d:35:3d:a9:76:a2:70:1e:32:41:35:
67:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:FC:80:BE:CC:EC:31:96:28:CB:8F:22:C3:F2:6A:47:A4:F2:EA:32
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/evyAvszsMZYoy48iw_JqR6Ty6jI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.145.0/24
163.5.163.0/24
163.5.168.0/24
163.5.215.0/24
Signature Algorithm: sha256WithRSAEncryption
40:44:1a:1a:3a:c4:93:0c:d6:46:b4:be:c6:f3:d9:7d:62:98:
a8:77:e8:51:ec:c2:26:d4:db:ca:ea:2e:d0:0e:ce:42:75:a5:
bc:28:6c:bf:98:44:68:13:7a:6d:5b:8b:ff:49:75:c2:05:49:
74:32:5d:34:80:3e:db:c1:4e:45:c4:36:4e:4d:46:d5:ba:f4:
ca:2e:3b:4f:45:6c:26:a3:97:84:33:a4:77:d1:cc:17:91:73:
27:79:f6:76:6c:9f:83:af:ea:1a:eb:bf:d6:51:ef:55:47:e1:
6f:74:25:95:d1:62:af:1f:a9:8f:57:3a:b9:54:e0:ce:4d:be:
09:bd:33:40:5b:99:ae:f8:72:57:c4:7a:15:93:2b:a1:7e:1c:
ed:5e:16:ba:be:93:9b:3d:59:4c:86:81:a4:87:4f:1a:88:3e:
88:aa:4b:12:97:fb:e2:61:f3:29:e5:74:84:34:64:ae:45:be:
8b:18:70:f1:e7:a3:09:1d:f1:fa:f2:5c:42:6f:6e:a8:c4:c1:
cc:7a:90:92:e5:96:41:57:61:d7:b1:86:d9:b0:89:2b:11:4b:
1d:77:f7:f2:55:25:80:eb:c1:56:c7:d1:ce:5f:b1:53:5b:a6:
0c:3f:72:53:07:16:a5:b4:9d:a2:08:ab:ab:b6:c3:45:45:bc:
3c:ad:f6:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:22 2023 by rpki-client on console-fra.rpki-client.org