Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/lpnkyAcoJ3ALXMFxYmuluS575LY.roa
File: lpnkyAcoJ3ALXMFxYmuluS575LY.roa (raw, json)
Hash identifier: L77XsHC2rZuomBFhtqqfazHf0qVz1hpTamYA+ITS+6I=
Subject key identifier: 96:99:E4:C8:07:28:27:70:0B:5C:C1:71:62:6B:A5:B9:2E:7B:E4:B6
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01847A94D2017011C5703D091D1B1CAD4223
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/lpnkyAcoJ3ALXMFxYmuluS575LY.roa
Signing time: Tue 15 Nov 2022 09:18:04 +0000
ROA not before: Tue 15 Nov 2022 09:18:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212669
IP address blocks: 163.5.224.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7a:94:d2:01:70:11:c5:70:3d:09:1d:1b:1c:ad:42:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Nov 15 09:18:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9699e4c8072827700b5cc171626ba5b92e7be4b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f1:49:43:25:27:f5:59:c6:10:d2:f1:8f:79:
4f:25:ef:00:05:5c:c8:db:0c:12:94:4f:d1:81:23:
bf:e7:9f:38:2e:7f:10:15:b0:5b:de:07:d2:e4:a6:
3a:2f:a8:07:ce:23:01:dc:42:d0:ec:90:f8:c0:00:
85:3c:7c:8a:ee:0e:9c:df:20:f1:13:a1:00:eb:6c:
9e:ff:8c:7e:c7:16:38:7f:e8:ab:cd:71:1f:74:f5:
4c:82:a5:a2:92:8b:a7:da:a6:d6:5d:8b:85:1e:23:
77:96:e6:b5:fd:f3:77:e8:24:fe:50:5a:cf:19:04:
b6:05:e2:ca:ad:5e:f6:30:89:8a:08:03:04:cd:1f:
12:68:b7:25:16:40:af:e9:f7:80:f1:ea:ec:0c:c8:
45:8a:3e:3c:99:cd:65:f1:55:0f:e5:13:e5:49:21:
ae:1b:28:4c:98:04:ae:da:b4:d8:c9:6a:a9:40:4e:
a9:f3:1e:98:c8:12:17:74:08:a5:a6:15:c7:3e:9c:
ec:7f:1a:41:c0:2a:d5:96:50:4e:c7:67:c0:dc:49:
cd:5b:af:65:a0:e9:d3:f7:11:27:30:bc:f9:20:e0:
6a:58:3c:b3:12:e6:5c:32:8e:10:a4:1f:6d:37:22:
9e:cf:2a:56:34:cb:1b:4c:f0:fa:6b:0d:a3:24:9a:
3c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:99:E4:C8:07:28:27:70:0B:5C:C1:71:62:6B:A5:B9:2E:7B:E4:B6
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/lpnkyAcoJ3ALXMFxYmuluS575LY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.141.0/24
163.5.146.0/24
163.5.162.0/24
163.5.224.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:49:7c:3b:13:c6:f5:fb:29:1f:39:87:3f:96:89:47:0f:43:
88:ea:6c:09:18:f9:01:07:cc:ed:fa:6d:a3:e0:a5:97:27:e6:
36:9b:93:3f:ca:32:9f:bb:a1:a0:af:d7:88:d5:86:1c:d4:55:
4d:db:2b:37:01:8f:06:bf:42:20:d8:2b:9d:29:26:98:34:fc:
9e:d6:83:29:09:c4:6a:91:18:e5:65:ee:cf:e0:66:83:ce:88:
d0:20:da:fd:13:ee:c0:d9:61:52:de:98:ed:1f:17:47:4c:d6:
12:61:57:aa:a0:cc:2d:79:27:6c:77:4b:4b:13:62:7b:1e:40:
b7:18:36:76:fc:01:9c:62:d8:08:c3:5d:3f:1a:36:67:53:7c:
ce:5d:7d:04:d4:9b:7d:76:0c:f6:83:35:e5:8d:b3:9a:22:75:
5f:50:7c:0f:e5:44:3f:01:60:3a:99:1b:15:93:66:61:30:40:
81:3e:25:7b:77:68:07:72:88:5d:c3:c8:3e:97:38:95:9f:f5:
78:41:e0:4a:4a:0a:0d:d3:f4:f0:e7:e2:4b:33:03:74:0c:8e:
56:14:24:99:09:66:fd:d3:6f:bb:4b:ec:66:c5:59:76:5f:7c:
fe:0a:80:c6:2c:4c:e6:e4:8e:14:4c:71:07:09:da:77:0a:a2:
83:f8:85:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:22 2023 by rpki-client on console-fra.rpki-client.org