Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/oqnI6qu-46uxgmbhkfqoYkXTIxY.roa
File: oqnI6qu-46uxgmbhkfqoYkXTIxY.roa (raw, json)
Hash identifier: 8OkIUvjhFGmafD9smLBltQuDSkDPx/xOzYlO9O1RsOE=
Subject key identifier: A2:A9:C8:EA:AB:BE:E3:AB:B1:82:66:E1:91:FA:A8:62:45:D3:23:16
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0184C2F3FE9529E361ABB59847A71969AAD7
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/oqnI6qu-46uxgmbhkfqoYkXTIxY.roa
Signing time: Tue 29 Nov 2022 10:34:41 +0000
ROA not before: Tue 29 Nov 2022 10:34:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61003
IP address blocks: 163.5.220.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c2:f3:fe:95:29:e3:61:ab:b5:98:47:a7:19:69:aa:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Nov 29 10:34:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a2a9c8eaabbee3abb18266e191faa86245d32316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:3e:f6:9a:45:3e:45:f1:bb:bb:ad:f7:df:9d:
d9:ee:a7:db:cd:bc:ee:18:1e:60:63:64:83:e9:bc:
43:ab:be:40:72:78:52:fa:c3:d2:5e:29:9d:e6:e9:
b8:9a:bb:a3:7e:3a:e1:9e:82:b8:e5:a6:5e:80:b5:
cd:55:b5:5b:3b:6e:f5:bb:f7:1b:1a:93:4c:7f:62:
a2:ac:bb:27:d0:80:b5:63:62:52:82:88:1f:90:a1:
de:fe:f2:7f:80:cb:ba:21:42:a6:6f:45:fa:5d:04:
b6:e1:6c:75:9b:58:46:a4:87:13:a0:0f:05:8f:28:
9a:fd:d7:e9:68:a4:2a:52:3a:52:0d:8f:e3:91:b2:
4d:a8:da:93:37:8e:34:3f:dd:f2:1c:fb:9d:a6:84:
3d:f7:10:01:8e:e0:5d:7f:fb:ff:a4:47:6b:79:3d:
59:d2:b4:11:9c:6e:38:e8:c1:d8:53:ff:ef:6a:e3:
4b:81:2c:e4:a0:4b:46:a5:d9:61:cc:f6:d6:63:76:
6b:b4:a6:00:07:bb:93:6e:c1:0b:57:48:aa:bf:da:
d9:f4:8f:8b:f4:80:50:87:f7:a9:40:37:6d:e5:c6:
b9:a7:bf:8e:db:91:25:ac:55:78:28:89:54:ac:20:
69:29:b0:fa:10:56:8e:44:6f:d1:3a:ff:ef:1b:24:
8f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A9:C8:EA:AB:BE:E3:AB:B1:82:66:E1:91:FA:A8:62:45:D3:23:16
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/oqnI6qu-46uxgmbhkfqoYkXTIxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.134.0/24
163.5.220.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:1d:27:6d:d9:56:97:39:2f:7a:0a:97:7f:5a:17:11:17:38:
7f:8e:e7:50:61:cb:28:d3:ac:7d:95:bd:05:19:db:ce:0a:4d:
bc:8d:e8:0f:6b:15:60:2b:be:89:6e:52:a5:5e:a6:45:db:0a:
f5:78:60:85:ca:58:2d:6a:c8:b7:69:12:47:cc:cb:4c:63:1c:
ce:97:14:48:3d:c9:3f:2c:0a:ac:dd:a2:8a:ab:40:8f:2c:f4:
0b:b9:60:a8:e4:93:ca:60:45:f7:98:fd:11:08:08:b5:45:1d:
06:4e:a4:af:e8:70:28:49:80:0c:4e:21:ba:dc:e5:ab:67:d9:
78:fa:2b:f7:31:94:e2:f5:cd:2b:b3:fb:bb:8f:08:8d:55:f3:
90:d7:2a:98:0e:fb:f3:58:9e:a6:3c:11:d7:95:f6:45:23:a2:
af:19:73:e5:b2:69:c3:49:f4:e4:34:af:17:d2:ee:5f:5f:b4:
9f:f0:58:10:cb:b5:c6:91:ef:b2:98:88:89:09:35:20:d3:f9:
b2:f7:42:4b:b3:b1:d3:5c:e6:76:a0:3f:67:6a:ab:17:87:60:
26:fc:2e:98:05:99:3b:de:11:d3:e0:a0:ef:bf:56:67:c4:34:
c1:fe:8a:f5:bc:5d:07:0c:2f:17:c5:bb:6c:1f:f1:59:66:a0:
55:59:2e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:11 2023 by rpki-client on console-ams.rpki-client.org