Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/fP7S2pmj9Hy3o0ZW91N9hqZfWhM.roa
File: fP7S2pmj9Hy3o0ZW91N9hqZfWhM.roa (raw, json)
Hash identifier: GTaCbihdVZ8K+BiA+PpUYavnx+CbFAyF6c/VmYnegrc=
Subject key identifier: 7C:FE:D2:DA:99:A3:F4:7C:B7:A3:46:56:F7:53:7D:86:A6:5F:5A:13
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0184396376D07AA2C8E7F21DE906307EDEC0
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/fP7S2pmj9Hy3o0ZW91N9hqZfWhM.roa
Signing time: Wed 02 Nov 2022 17:28:50 +0000
ROA not before: Wed 02 Nov 2022 17:28:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 163.5.175.0/24 maxlen: 24
163.5.217.0/24 maxlen: 24
163.5.147.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:39:63:76:d0:7a:a2:c8:e7:f2:1d:e9:06:30:7e:de:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Nov 2 17:28:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7cfed2da99a3f47cb7a34656f7537d86a65f5a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:cc:61:2d:86:78:a8:ce:51:7c:86:1b:6a:6b:
98:1b:3c:2b:d1:43:14:76:12:d3:61:aa:b9:3c:c2:
97:84:40:cb:ac:f2:d1:99:9a:64:e7:d7:e0:47:2a:
81:53:0d:2d:e6:50:8d:3e:5e:7e:02:07:0c:82:80:
78:5a:a5:dc:16:4c:bc:39:4e:db:27:b6:68:4e:94:
4a:7f:73:0d:72:2f:f5:40:57:4c:2c:64:eb:6e:1f:
2e:1c:d0:9d:be:e1:13:92:45:af:80:7e:41:16:69:
34:cc:4d:b7:fc:45:77:7b:bd:c9:6f:0d:d4:b3:95:
59:38:ee:ea:80:c4:fa:38:4f:20:0d:f3:7e:7b:6c:
aa:c6:62:42:70:f5:48:2c:c0:22:d3:64:99:24:6e:
44:6c:45:b8:7e:31:c2:f9:fd:61:02:22:37:91:6c:
59:08:10:be:6c:40:84:0c:8e:b5:28:af:f1:34:07:
11:a9:ed:02:7f:38:b9:f8:cd:d6:51:44:d1:2f:29:
a2:a8:30:e7:d5:7a:fd:df:3c:ab:b3:ac:63:df:e3:
43:3f:14:d8:f1:6b:74:dd:5a:3b:49:f5:fd:54:ef:
41:c4:2b:9b:38:ea:63:18:1b:62:d3:13:b1:e8:48:
37:19:71:a3:24:e6:d2:1f:34:32:75:b5:cd:07:ff:
55:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:FE:D2:DA:99:A3:F4:7C:B7:A3:46:56:F7:53:7D:86:A6:5F:5A:13
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/fP7S2pmj9Hy3o0ZW91N9hqZfWhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.147.0/24
163.5.175.0/24
163.5.217.0/24
Signature Algorithm: sha256WithRSAEncryption
43:e0:f8:0f:d3:d3:8b:3e:3a:c1:eb:43:7e:38:c8:d4:42:24:
8e:d2:05:0d:e3:51:b9:43:66:65:a7:c6:67:d1:b3:34:c6:5e:
0d:23:82:ad:1c:0e:75:a2:87:b5:8d:da:76:3d:77:9b:49:c4:
8a:a4:ac:c8:3a:6e:12:b7:22:42:7a:90:c4:dc:df:44:dd:3a:
d3:4b:69:9b:51:76:a5:bf:a2:33:5b:41:8e:16:5e:c7:a1:8e:
9e:45:2d:97:4b:71:1b:4a:fa:3b:71:1f:01:46:c6:00:95:2d:
9c:d2:84:cb:41:2c:66:45:b6:e3:75:6d:15:2c:26:c6:f5:ed:
ef:6b:a4:11:88:bc:67:42:8f:b9:e5:46:8c:d1:21:61:38:b6:
a3:98:44:6b:41:97:a6:a3:74:fb:f4:8d:49:7d:7a:41:8e:01:
40:a6:15:00:d8:3f:d9:0d:b8:5e:da:d1:cf:2e:97:79:a2:d7:
c7:d8:f1:b9:fa:cd:96:0c:6b:57:2e:a6:fb:60:9e:0f:ab:e3:
5f:90:76:1a:38:68:2f:b3:d1:8a:7c:2a:31:bd:d2:cf:31:30:
6f:3a:7a:2e:b4:c0:e0:7a:ed:9a:de:e7:c8:d8:05:1e:34:77:
58:a1:90:09:40:dd:16:f1:55:4c:4d:97:6b:0c:c5:c3:2d:eb:
c6:b5:24:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:22 2023 by rpki-client on console-fra.rpki-client.org