Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/fcacNSstl9fW59h-i2jIoluzch0.roa
File: fcacNSstl9fW59h-i2jIoluzch0.roa (raw, json)
Hash identifier: 4xjLz7J8z+5bhi5AY6zGCZAI9aSxdihCCqOEQXPHjis=
Subject key identifier: 7D:C6:9C:35:2B:2D:97:D7:D6:E7:D8:7E:8B:68:C8:A2:5B:B3:72:1D
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01853A5C24D7B8FC2E4AABE4477996C0F1E1
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/fcacNSstl9fW59h-i2jIoluzch0.roa
Signing time: Thu 22 Dec 2022 15:03:15 +0000
ROA not before: Thu 22 Dec 2022 15:03:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51741
IP address blocks: 163.5.198.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:3a:5c:24:d7:b8:fc:2e:4a:ab:e4:47:79:96:c0:f1:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Dec 22 15:03:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7dc69c352b2d97d7d6e7d87e8b68c8a25bb3721d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9e:dc:06:26:0e:9a:9a:5b:20:d1:d2:d0:d4:
39:7d:49:7b:5b:e2:1e:c8:3b:62:52:9d:2c:d8:ed:
3c:2c:ff:cf:6c:13:cb:cb:9b:52:2e:6a:e4:65:0b:
06:3f:c1:a2:6b:e4:ad:94:2e:ff:79:fc:73:0f:7d:
2a:ca:87:fb:4e:37:e6:d8:8f:d7:4c:4d:15:72:06:
2d:55:39:fd:ba:c1:f0:8a:ea:83:41:c5:97:31:22:
be:be:27:b0:37:8b:fa:38:e5:60:55:e2:4d:51:d2:
76:9b:2c:f5:76:11:8c:28:b5:ed:9b:4c:81:79:72:
ca:59:ee:42:77:da:6b:08:7b:1b:5b:1a:fd:18:58:
b2:12:fb:34:ac:73:96:1b:a6:34:74:36:bd:46:42:
ad:fa:82:1b:8b:e5:3d:b9:2f:fb:d0:4d:e7:b7:ee:
07:26:0f:df:15:1f:18:2a:b1:63:d8:ed:0e:2c:c5:
86:82:ef:f7:f5:5f:f8:e1:6a:6d:0e:65:0f:56:39:
8f:d4:17:b6:12:c3:58:5e:04:c0:33:03:21:88:63:
7c:45:40:56:4c:a7:62:53:6d:ac:a1:b1:71:b2:4c:
bc:9f:7a:7f:2f:3b:73:2f:f4:4f:47:0f:f0:d4:6e:
f8:1a:9f:a3:50:9f:87:65:4b:3e:b5:a5:c3:1f:6e:
5c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C6:9C:35:2B:2D:97:D7:D6:E7:D8:7E:8B:68:C8:A2:5B:B3:72:1D
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/fcacNSstl9fW59h-i2jIoluzch0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.198.0/24
Signature Algorithm: sha256WithRSAEncryption
92:31:4d:a6:ad:ed:a9:39:2c:70:7a:94:55:67:32:10:4e:c6:
59:d5:a3:c1:96:1d:43:84:ba:a7:06:7b:68:53:38:b3:c0:1f:
e9:10:67:43:f5:cb:ec:61:06:06:42:56:d2:a0:b3:43:32:ea:
6a:47:f9:eb:42:0f:ad:10:b9:cb:c0:c9:5f:41:a7:d5:eb:76:
58:d8:30:0f:b1:df:5c:2d:14:40:21:c5:bc:3a:db:7e:ac:e1:
72:e5:55:b8:60:f5:89:19:70:25:5e:5c:23:25:f9:60:33:75:
cf:06:25:c6:f2:f8:c7:39:f9:cd:c9:7b:8b:62:bf:99:54:cb:
b8:bb:e7:49:d1:d4:4f:3f:94:d5:a4:be:ac:14:32:2f:b7:86:
91:e4:06:97:be:a0:ab:9c:53:a2:e7:fa:69:86:f8:a3:3b:94:
92:31:79:e9:ce:05:56:3d:e1:97:91:bd:c3:e2:cd:6d:43:fc:
7e:25:e8:69:9b:83:19:da:c6:cf:72:aa:bb:4c:6e:a1:e4:aa:
35:63:d5:c4:a9:d9:eb:a5:17:83:51:29:8a:6a:86:b7:ad:37:
c1:b3:6f:46:0d:00:d0:5c:d0:2c:33:58:52:0c:ff:77:bc:23:
2e:c8:b8:a3:c2:e6:99:de:27:a4:46:e5:27:09:19:9d:3e:01:
8a:c8:46:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:22 2023 by rpki-client on console-fra.rpki-client.org