Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/mqFpgvkMi6HQK0fe-6wjeHD6fKY.roa
File: mqFpgvkMi6HQK0fe-6wjeHD6fKY.roa (raw, json)
Hash identifier: v7OIgsJG4RwtR5Iib82VcvtIcQ/5qh+v+/JIj6lBzww=
Subject key identifier: 9A:A1:69:82:F9:0C:8B:A1:D0:2B:47:DE:FB:AC:23:78:70:FA:7C:A6
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018320CC017055D5976FF30060C8919DEEAE
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/mqFpgvkMi6HQK0fe-6wjeHD6fKY.roa
Signing time: Fri 09 Sep 2022 05:49:44 +0000
ROA not before: Fri 09 Sep 2022 05:49:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398343
IP address blocks: 163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.135.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:20:cc:01:70:55:d5:97:6f:f3:00:60:c8:91:9d:ee:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 9 05:49:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9aa16982f90c8ba1d02b47defbac237870fa7ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f9:d0:9b:34:86:0e:f1:65:41:db:9f:f5:40:
17:b5:66:dc:f5:d6:ff:d6:28:2c:47:68:20:76:d2:
54:80:97:7f:87:8f:a6:39:cb:73:7d:35:f2:7e:8f:
9c:6e:6a:86:c1:c2:9f:6c:e7:5a:41:1e:be:f3:dd:
05:5d:1d:96:35:c1:c1:a2:92:c2:49:ac:01:de:a1:
4d:6e:ca:a8:0b:2e:4a:b0:8c:81:6d:88:1d:18:f1:
ea:ed:13:c7:96:62:99:09:bb:91:61:09:e4:14:c4:
a6:70:8e:a3:8f:fd:98:ab:ac:4c:6c:6a:b9:80:71:
21:29:5b:b0:7e:5a:70:87:78:8b:10:72:2e:26:bb:
ca:8b:37:b4:7c:49:72:c0:83:63:e4:db:93:05:ac:
79:3a:27:35:69:4c:31:66:d4:d5:3f:92:6b:96:54:
5b:4c:3d:1b:bd:5d:c5:05:27:bb:c7:6c:7d:5c:c1:
7a:cf:f3:d5:6a:4f:3d:0d:c8:7f:c6:0b:da:91:7c:
ea:6a:73:39:6e:07:c7:1f:af:3f:ce:68:50:b1:2c:
50:11:d5:db:a3:92:d4:b4:8d:8c:cb:0c:1e:f1:e1:
65:1f:9e:d3:0e:3a:49:7e:88:21:65:88:17:cc:3e:
b4:4e:21:a8:f7:52:a4:89:95:0d:90:9c:ca:87:99:
74:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A1:69:82:F9:0C:8B:A1:D0:2B:47:DE:FB:AC:23:78:70:FA:7C:A6
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/mqFpgvkMi6HQK0fe-6wjeHD6fKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.135.0/24
163.5.138.0/23
163.5.151.0/24
163.5.248.0/24
Signature Algorithm: sha256WithRSAEncryption
96:71:a1:dc:eb:a0:d6:62:1d:72:78:5d:c1:06:54:a2:d4:f1:
90:da:3a:c1:30:7e:37:ca:7a:63:ae:ab:51:51:85:de:d4:1f:
bc:ec:4d:c9:f1:65:0b:8e:d5:8a:cc:76:e9:50:ed:f8:31:41:
d9:4d:28:9a:9c:78:f2:f8:ca:34:c7:26:c4:5b:26:cd:f9:7d:
28:b2:de:21:1a:4d:20:1a:d3:83:63:22:d5:d4:3d:81:11:f4:
1d:ce:e9:58:44:23:fa:2d:32:7f:43:9d:cc:97:82:9a:b0:0c:
16:b9:f8:b8:2a:ba:ec:40:52:4f:a1:85:19:d0:6c:91:17:32:
68:80:05:2e:12:ca:e3:b2:48:e9:e6:38:fb:cb:9b:3b:f6:b8:
d2:5f:04:dd:27:94:8b:1d:28:fb:c1:76:56:00:0a:cd:77:dd:
05:cd:e4:ec:c6:7a:54:7b:20:8a:c1:01:da:1f:49:fc:fd:7b:
34:b9:15:10:5e:0d:c3:42:25:8e:b6:29:fc:fb:f3:5e:cb:fd:
82:1d:5c:32:6f:ff:b0:7f:39:f5:a7:6d:da:aa:e8:0a:ce:dc:
98:fe:0d:3f:ff:62:31:a3:3e:f3:7e:e1:0d:ac:29:92:65:ac:
fc:af:f2:cc:28:a7:e6:93:91:92:03:13:de:b0:aa:eb:5f:91:
3c:81:d0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:11 2023 by rpki-client on console-ams.rpki-client.org