Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/jv8CAlMO-XZxDa6Nm7GgkV9LjWw.roa
File: jv8CAlMO-XZxDa6Nm7GgkV9LjWw.roa (raw, json)
Hash identifier: 26lpRGWnyFX2jCrseXg3FwgfgYvsjhUJU1c8M/vvDyU=
Subject key identifier: 8E:FF:02:02:53:0E:F9:76:71:0D:AE:8D:9B:B1:A0:91:5F:4B:8D:6C
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0163AFAC
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/jv8CAlMO-XZxDa6Nm7GgkV9LjWw.roa
Signing time: Fri 01 Jul 2022 17:01:25 +0000
ROA not before: Fri 01 Jul 2022 17:01:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 163.5.125.0/24 maxlen: 24
163.5.130.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
185.253.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23310252 (0x163afac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 1 17:01:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8eff0202530ef976710dae8d9bb1a0915f4b8d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:cf:99:d5:9b:24:dd:41:8a:40:13:b4:f9:81:
ee:74:cf:50:cf:60:35:71:7e:9c:ad:54:61:fa:06:
0c:d2:44:c0:57:9d:4b:89:60:ec:4c:e5:df:0a:6f:
26:de:1a:14:f3:0c:90:86:5c:60:02:7f:c3:ad:3a:
82:80:34:be:3e:51:c1:03:03:9c:3a:f7:62:2d:5c:
e1:8e:6b:5b:0c:40:ab:42:11:e0:cf:11:6e:3f:a6:
04:29:4d:e9:ee:15:fc:5e:84:09:6f:97:44:05:ee:
74:36:21:9d:c0:70:29:5a:2a:8c:1c:9c:86:e4:e6:
c1:e7:2b:b1:cf:cd:25:c2:54:b4:9a:a6:d3:c3:02:
00:59:76:52:e7:04:e9:68:e4:3c:86:69:31:cc:9d:
27:ed:54:1f:05:42:55:30:8c:e9:20:8e:3f:4e:f3:
1c:35:8f:f7:62:47:03:9e:c7:c1:38:d9:6b:7a:52:
31:e9:10:aa:6d:60:b1:91:a1:95:6f:87:99:14:d1:
7d:e2:b5:ab:ae:4f:67:0b:35:b3:55:fd:13:d6:2f:
93:04:c7:4c:23:77:3f:5d:ab:c9:24:c3:4b:66:ee:
65:a6:c2:4f:f7:72:7e:5d:eb:ad:8b:c8:02:99:0b:
f0:b5:87:3d:a4:71:2b:44:ce:a2:2c:7e:8a:5a:db:
64:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:FF:02:02:53:0E:F9:76:71:0D:AE:8D:9B:B1:A0:91:5F:4B:8D:6C
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/jv8CAlMO-XZxDa6Nm7GgkV9LjWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.125.0/24
163.5.128.0-163.5.130.255
163.5.136.0/24
185.253.54.0/24
Signature Algorithm: sha256WithRSAEncryption
49:2e:9e:5e:97:58:0a:ae:57:b0:f7:b2:39:8d:d5:e9:c2:f8:
a8:55:b2:68:82:7d:f9:93:78:7c:ad:b8:47:21:18:aa:ae:d7:
a7:0a:b9:cf:c0:96:72:ad:e3:34:b7:9f:b1:ec:97:64:99:a1:
ec:21:9f:ad:ea:93:c5:5c:d2:72:d3:fd:77:87:45:ff:44:f5:
73:e9:7d:37:ee:59:35:92:94:d2:7c:f8:f4:40:82:47:11:0c:
c5:bd:8d:52:1c:06:42:35:55:04:3f:cc:93:21:91:4c:00:29:
68:f9:1a:12:17:dd:b3:bd:07:c5:63:26:6e:66:b7:99:ef:c9:
cc:1a:8f:4e:dd:18:2e:50:6c:78:f4:ee:14:da:fe:74:45:8c:
58:f3:33:13:26:5a:3d:10:12:0a:b7:e7:f5:62:05:45:d1:cf:
8b:42:68:06:4d:25:1c:5d:25:0f:61:b5:57:f0:e5:e0:83:b9:
c8:d8:e3:a6:fb:9c:8a:d2:2c:1f:98:35:47:83:8d:f5:a7:8b:
36:05:97:ad:d9:09:1b:de:e9:b0:c7:ea:e8:10:00:98:6f:2a:
c1:3d:a4:12:5e:d7:67:7b:37:77:20:9a:a0:49:6f:22:f4:01:
b1:29:4e:66:83:ae:43:54:ba:1b:72:2e:ec:08:5a:77:0d:a9:
7a:a8:bd:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:11 2023 by rpki-client on console-ams.rpki-client.org