Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/okFGAwCtpRR4pHPAE-7Rr8lakQQ.roa
File: okFGAwCtpRR4pHPAE-7Rr8lakQQ.roa (raw, json)
Hash identifier: apQHX9TYpp/s87NFKUaomWIms5yn6sbltefnGP533BU=
Subject key identifier: A2:41:46:03:00:AD:A5:14:78:A4:73:C0:13:EE:D1:AF:C9:5A:91:04
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0184A435BEC66E0BCA08D804D809AB6C76C3
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/okFGAwCtpRR4pHPAE-7Rr8lakQQ.roa
Signing time: Wed 23 Nov 2022 11:18:16 +0000
ROA not before: Wed 23 Nov 2022 11:18:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207326
IP address blocks: 163.5.219.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a4:35:be:c6:6e:0b:ca:08:d8:04:d8:09:ab:6c:76:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Nov 23 11:18:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a241460300ada51478a473c013eed1afc95a9104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ce:74:70:70:5a:ef:59:32:25:9d:ff:4b:94:
83:d4:d8:14:52:62:17:12:9c:02:7f:96:dd:cc:cd:
c6:78:33:8a:ed:ed:8a:6f:bc:6a:bb:84:27:ac:e6:
d9:25:73:74:bd:c3:b0:7d:50:27:ce:cb:ec:5b:47:
73:97:ad:70:f0:67:e2:1d:4b:2d:0d:9b:68:8a:53:
68:d4:08:4d:45:7a:89:dd:39:58:dc:a3:77:3d:9c:
e0:cb:9d:da:14:0c:ac:21:82:33:40:69:c1:e5:a4:
f6:3f:2a:77:cb:de:9f:31:4e:e0:96:2b:80:f5:fb:
29:99:92:7a:9c:7c:d9:3e:fd:f6:2b:ed:a0:6e:d4:
71:b2:3e:6f:19:83:c8:64:ab:74:b2:5a:bb:fc:c4:
54:71:6e:76:32:97:de:9d:65:00:a1:f2:16:cf:94:
ea:06:c5:8a:1c:54:69:2b:08:1b:f7:f3:cb:43:ec:
c4:c0:db:41:5a:10:42:ca:35:93:4e:11:3c:31:ab:
a1:6b:1b:53:50:a0:f6:be:90:d5:1e:46:cc:25:dc:
92:ff:02:7c:12:83:e3:e6:c2:98:88:c4:ff:85:8d:
4d:5b:18:51:3b:fe:0b:85:4d:7a:5c:8d:9b:ff:3b:
eb:45:99:46:29:68:2f:85:dd:1d:cb:71:fa:24:98:
a0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:41:46:03:00:AD:A5:14:78:A4:73:C0:13:EE:D1:AF:C9:5A:91:04
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/okFGAwCtpRR4pHPAE-7Rr8lakQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.219.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:41:30:10:e4:a3:03:2a:f3:1d:9a:15:3f:58:81:b3:a2:bc:
05:44:3d:62:14:d3:23:07:b6:e9:a7:82:88:d7:cf:ee:ee:bc:
18:41:59:9d:22:92:97:01:44:f2:26:b7:65:e8:01:1d:a2:37:
f2:9c:bf:e4:a4:00:fe:36:49:f5:2e:ad:cf:0e:5e:20:1d:7d:
49:81:e9:07:d7:3c:e6:77:12:7b:06:29:a4:50:7c:62:61:43:
12:08:5a:f8:24:96:70:ea:cc:97:3d:1b:0b:2d:8a:ed:c1:fd:
26:53:e2:08:4b:f6:ae:bb:09:6b:59:c2:10:52:42:68:5a:62:
6a:b0:f9:8f:92:f3:88:81:44:24:81:5b:b1:3a:2e:45:96:47:
8c:bb:e0:49:50:3f:78:f8:1f:86:7b:b6:b3:1e:7b:62:4e:69:
2f:e7:a6:33:bd:57:dd:9e:3b:70:33:94:0b:28:02:67:c7:5f:
82:37:31:54:41:4b:e5:97:93:3a:5f:40:1f:9e:fd:42:fa:b4:
54:1a:d6:cf:0b:d5:40:31:29:ef:fa:48:4c:a0:0a:71:4a:fc:
59:c4:d5:d3:7b:d9:ba:26:0e:d6:89:74:da:ce:ae:ba:7e:8a:
82:88:c0:61:6a:a5:c7:91:ac:65:f5:dc:c4:3b:ad:54:dc:c7:
01:ea:ef:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:22 2023 by rpki-client on console-fra.rpki-client.org