Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/mE_9DIfzx_PE5Hr_czAulceP5p0.roa
File: mE_9DIfzx_PE5Hr_czAulceP5p0.roa (raw, json)
Hash identifier: EzENnyHS5969ntMXdeN32K/PAhBg/XCBYK5MlCn2Reo=
Subject key identifier: 98:4F:FD:0C:87:F3:C7:F3:C4:E4:7A:FF:73:30:2E:95:C7:8F:E6:9D
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0182CE974778239CC8FC70CF346D0F1E33BE
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/mE_9DIfzx_PE5Hr_czAulceP5p0.roa
Signing time: Wed 24 Aug 2022 06:43:16 +0000
ROA not before: Wed 24 Aug 2022 06:43:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 138687
IP address blocks: 163.5.202.0/24 maxlen: 24
163.5.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ce:97:47:78:23:9c:c8:fc:70:cf:34:6d:0f:1e:33:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 24 06:43:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=984ffd0c87f3c7f3c4e47aff73302e95c78fe69d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ba:3d:8a:51:05:89:fd:0c:a8:f5:6e:c1:6a:
82:90:d9:13:f8:37:04:98:62:ee:bd:e1:16:19:24:
83:49:8e:4f:be:a2:16:9f:7e:30:8f:ed:09:28:46:
93:ff:62:57:67:65:c1:ae:76:93:c4:16:a7:79:b5:
ad:5c:86:1e:97:31:37:9f:30:ae:5f:19:60:d8:9f:
e0:ab:3f:b9:ee:76:6c:ce:d9:af:c0:70:67:46:b3:
3e:93:53:4b:4e:d3:be:e2:0d:f6:39:9e:8f:35:5f:
e5:83:d8:3d:9a:c0:1a:de:dd:5a:c4:6d:4f:06:8e:
e0:02:30:f3:ad:97:11:3c:86:78:25:47:e1:72:21:
11:68:4e:e7:ee:88:3a:22:8a:2f:dd:b2:63:2e:f1:
a0:69:7b:08:74:1e:12:99:67:76:e5:16:aa:93:cd:
80:2e:44:c0:34:d4:ce:17:b9:20:7e:aa:19:e2:08:
6f:c9:b9:f2:39:05:95:47:7f:3c:56:27:7a:2a:37:
34:eb:42:86:14:c2:cb:e5:2d:39:05:83:cb:30:a6:
2a:55:bb:21:c1:bc:9f:fe:4f:a0:e4:e6:8b:57:e4:
ea:be:8d:73:36:c4:c8:63:da:3c:09:b6:b8:91:ad:
4f:4a:19:40:a6:e7:34:00:b9:3e:95:f2:3b:64:ad:
d8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:4F:FD:0C:87:F3:C7:F3:C4:E4:7A:FF:73:30:2E:95:C7:8F:E6:9D
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/mE_9DIfzx_PE5Hr_czAulceP5p0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.202.0/24
163.5.237.0/24
Signature Algorithm: sha256WithRSAEncryption
11:ce:bd:28:fe:48:09:2c:07:10:40:33:9f:07:f9:ef:2c:db:
b1:94:4f:61:fe:a3:34:76:db:a9:63:cf:55:49:b5:84:29:43:
b9:a6:b1:c4:c4:9a:c1:68:26:83:75:e6:15:33:59:cc:d4:38:
a2:29:a3:3f:16:e2:47:eb:35:99:d7:05:ec:1c:2e:5b:3f:d6:
9f:cb:80:6d:f7:84:bc:eb:8e:02:76:46:49:38:d0:2d:a1:8b:
3e:37:6f:16:ed:a1:19:5f:13:1a:69:b2:70:c8:26:06:36:5d:
49:90:28:09:8c:76:c1:03:6f:88:15:e9:0d:d1:59:fa:65:1d:
b3:d8:e0:93:ac:fe:78:f1:3a:5f:0a:b9:52:dc:6c:ba:53:fb:
00:22:28:95:1d:98:9e:a2:e9:8f:47:11:bd:ec:e1:fa:7e:ef:
1f:05:2c:90:81:42:e0:38:2e:8c:00:85:bb:0a:be:1c:36:1e:
ee:74:b3:45:0b:ba:43:9b:07:a1:65:ca:00:f5:4c:02:20:6d:
ec:9b:8f:a4:b2:1a:00:84:11:e5:94:e6:23:3e:e2:e6:eb:9c:
72:9a:74:11:f8:9c:d8:4b:53:90:d6:a2:85:d7:ee:ca:37:00:
b8:9a:7b:a3:09:94:5a:ee:ff:3f:dd:ef:27:9e:fd:ae:82:2d:
0c:3f:de:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:22 2023 by rpki-client on console-fra.rpki-client.org