Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/hu3aHmDrh4FDluDclFsTo4sxhGY.roa
File: hu3aHmDrh4FDluDclFsTo4sxhGY.roa (raw, json)
Hash identifier: 1J+nmvxReh1NLvG5gpOgjYqjOh/Op+hi9oewd8fVfo4=
Subject key identifier: 86:ED:DA:1E:60:EB:87:81:43:96:E0:DC:94:5B:13:A3:8B:31:84:66
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0183165E51D7BAEDD510CE3C71F18C79C26F
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/hu3aHmDrh4FDluDclFsTo4sxhGY.roa
Signing time: Wed 07 Sep 2022 05:13:43 +0000
ROA not before: Wed 07 Sep 2022 05:13:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 17447
IP address blocks: 163.5.149.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:16:5e:51:d7:ba:ed:d5:10:ce:3c:71:f1:8c:79:c2:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 7 05:13:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=86edda1e60eb87814396e0dc945b13a38b318466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:11:fe:67:da:53:3b:f3:6d:00:14:47:42:8b:
c8:a5:19:47:89:81:54:4d:6d:e7:90:11:7e:19:65:
b0:c3:06:1d:95:bf:70:d1:00:fd:d9:e5:28:ae:36:
67:47:ca:8a:a7:7f:4c:d9:eb:5d:48:26:8b:28:86:
b5:75:1f:ab:ac:fc:96:23:65:95:0e:81:2d:ae:c9:
a6:68:e3:e0:3f:49:a5:6c:c4:40:cf:5e:4d:64:c3:
5b:ad:5f:cb:af:c1:77:f8:98:0b:3a:30:6d:5d:af:
33:dd:09:26:93:a9:f3:50:6d:ea:95:6c:bc:5c:7a:
62:a9:b7:34:e4:4d:b3:47:71:2b:a0:ef:4a:4f:7a:
1a:83:ce:d0:fc:58:0f:28:f2:f1:3a:e2:1f:da:03:
09:ef:8e:77:49:dc:c6:09:1c:98:65:7f:6d:89:7b:
6f:8c:e1:5e:3f:39:d1:84:83:6c:24:f4:03:e5:7f:
a8:36:c8:18:84:f4:c4:66:92:39:24:c6:1b:2d:63:
c4:75:2a:4e:11:f3:4d:84:0c:50:d6:ea:13:18:cc:
a1:84:6a:b9:8c:96:96:11:08:38:aa:9f:6d:74:aa:
22:81:7d:ac:ce:ac:16:e0:cc:d8:34:97:4a:93:76:
6e:79:8a:83:84:f1:eb:3d:6b:01:a8:e5:a4:35:4f:
96:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:ED:DA:1E:60:EB:87:81:43:96:E0:DC:94:5B:13:A3:8B:31:84:66
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/hu3aHmDrh4FDluDclFsTo4sxhGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.149.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:2c:8d:2a:e1:12:df:1f:f3:a4:48:23:81:8c:0f:6b:34:2d:
a0:a7:e4:e5:62:98:49:c2:85:a3:d6:df:66:55:79:fe:c2:04:
93:8f:0b:99:3d:6b:82:83:02:df:7f:36:8a:27:a9:79:ec:76:
09:d3:de:c1:bd:d3:7d:42:63:cf:82:22:48:64:43:0d:e5:06:
2d:8b:47:eb:12:cf:0d:c2:49:c0:7e:b1:a5:55:1d:77:c0:9b:
52:5c:41:8d:be:3b:f0:27:08:9f:78:24:ee:3b:2f:2b:84:93:
0e:2f:70:8f:a3:0e:02:28:3e:8a:74:c9:b0:43:84:4e:78:e2:
d4:a8:97:b6:ca:2b:5d:47:93:f9:ec:6f:8a:12:0a:38:75:3e:
68:e2:0f:5a:00:8b:d5:52:12:74:86:dd:fd:e0:54:08:7d:b5:
e0:7d:25:b8:19:b5:1f:b0:2f:fd:e8:2f:43:af:09:d2:f4:97:
bf:e0:20:44:88:7f:63:79:66:15:5b:54:9f:3c:47:ec:eb:45:
d8:f4:f8:53:61:03:64:6b:2d:6f:2d:3c:c4:1a:30:b5:d4:8e:
e6:c2:59:52:b1:d8:85:71:8c:72:25:a1:6b:40:19:27:1c:5b:
d6:88:5f:ba:f3:e4:cb:94:eb:64:af:47:8a:7b:4d:ee:a1:fe:
96:2c:3e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:22 2023 by rpki-client on console-fra.rpki-client.org