Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/p1Q5xmDDVrt3ZHAlkq--hGl7yT0.roa
File: p1Q5xmDDVrt3ZHAlkq--hGl7yT0.roa (raw, json)
Hash identifier: gS8rwB0H+pgZa3nFqB5WRB7I6zqXeZmGpQx+qeOIeeU=
Subject key identifier: A7:54:39:C6:60:C3:56:BB:77:64:70:25:92:AF:BE:84:69:7B:C9:3D
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018465ACA12E6C6A8D7BBC75F649FA3BE446
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/p1Q5xmDDVrt3ZHAlkq--hGl7yT0.roa
Signing time: Fri 11 Nov 2022 07:52:03 +0000
ROA not before: Fri 11 Nov 2022 07:52:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400377
IP address blocks: 163.5.105.0/24 maxlen: 24
163.5.102.0/24 maxlen: 24
163.5.242.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:65:ac:a1:2e:6c:6a:8d:7b:bc:75:f6:49:fa:3b:e4:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Nov 11 07:52:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a75439c660c356bb7764702592afbe84697bc93d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:47:b0:84:e2:51:26:13:51:80:5b:74:6c:58:
db:86:58:7c:89:2a:34:1d:33:6d:ae:f3:42:39:5f:
d9:b9:1d:09:fb:1c:12:40:f0:91:6f:5b:7e:b3:9e:
43:4a:79:4d:da:de:e3:6d:6e:b9:a2:66:5c:67:2e:
4a:c9:8b:00:39:a9:44:cb:e9:7c:0a:91:e7:a1:d0:
07:47:8d:c6:a2:91:d9:d6:39:b9:1c:7a:cc:81:ca:
33:76:3f:7f:38:fb:fc:4b:52:93:e9:bd:1f:66:7c:
7c:04:f6:e9:39:e1:e1:4c:1a:22:1b:ad:e7:08:af:
73:c3:c1:80:eb:a2:08:d2:1f:fd:30:d1:e5:fe:87:
e5:e2:f9:a7:6d:b9:eb:cb:38:3b:6d:2a:9f:07:58:
b7:69:ac:1a:da:ef:9d:07:cf:62:9e:c5:f0:b6:55:
13:81:72:de:50:83:c1:d3:32:ca:6e:06:bb:2b:7b:
92:92:3c:fe:fc:ee:dd:8e:62:2e:7e:aa:27:02:f3:
7f:56:cc:13:49:22:64:dc:fa:a2:7e:06:4e:e7:fd:
91:dc:3c:33:9f:1d:c1:f4:45:c3:70:ed:6a:f1:62:
b4:0d:84:50:52:92:cb:66:ec:39:8a:54:8e:d8:ee:
29:49:7b:fb:50:3c:60:b9:35:66:aa:01:d3:f3:52:
f9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:54:39:C6:60:C3:56:BB:77:64:70:25:92:AF:BE:84:69:7B:C9:3D
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/p1Q5xmDDVrt3ZHAlkq--hGl7yT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.102.0/24
163.5.105.0/24
163.5.242.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:9f:6c:8a:70:7f:ca:69:40:31:be:ef:39:7b:a6:05:13:ca:
0e:cd:80:d5:26:65:e4:cc:df:75:04:f7:2b:4a:b5:6b:07:9f:
64:56:2b:45:80:cf:bb:bb:f6:9f:b4:bc:db:6f:c0:4c:27:fb:
c7:b7:5b:7d:cc:eb:4b:83:7c:37:70:70:c8:07:fb:0d:8a:9b:
f1:62:66:a2:fd:00:f5:00:2e:9f:3a:21:4c:4b:11:ef:33:5d:
50:41:16:1b:85:ab:bb:7f:fa:a0:22:b7:08:54:91:f5:05:36:
29:ee:4d:00:d2:cc:2f:ec:9a:18:3b:c9:e7:01:f8:bd:40:14:
c2:e0:ac:c4:74:c0:01:4f:51:d6:1c:b4:2d:e8:68:8e:2e:d8:
82:b2:b1:c0:5a:37:d2:52:a0:8c:ea:f0:53:d7:40:26:b7:00:
f3:b9:16:2a:c2:cb:b3:60:c8:f6:d5:87:16:20:06:28:b8:d5:
17:cc:51:99:fd:c5:af:b5:86:1d:ff:ff:28:3f:04:fe:09:19:
aa:b5:87:13:a5:e2:ff:0a:78:f6:c7:0b:6e:02:e5:92:87:fc:
29:24:a7:76:65:24:5e:09:e9:a8:98:ce:e5:fa:56:a4:f6:f4:
46:67:60:92:bc:29:e5:f9:09:a5:4a:3e:09:32:61:c8:f5:5f:
b4:ca:46:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:08 2024 by rpki-client on console-fra.rpki-client.org