Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/qPV7WNHOZMyFz_ljdXcIhelFqlU.roa
File: qPV7WNHOZMyFz_ljdXcIhelFqlU.roa (raw, json)
Hash identifier: mmunID0Wg4ARo+s9lxdaOp0d5yRVTHbEv9PM7pmxINc=
Subject key identifier: A8:F5:7B:58:D1:CE:64:CC:85:CF:F9:63:75:77:08:85:E9:45:AA:55
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0185447B7D8B1EA1AB2B906F628740D86460
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/qPV7WNHOZMyFz_ljdXcIhelFqlU.roa
Signing time: Sat 24 Dec 2022 14:13:41 +0000
ROA not before: Sat 24 Dec 2022 14:13:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 163.5.71.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.165.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:44:7b:7d:8b:1e:a1:ab:2b:90:6f:62:87:40:d8:64:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Dec 24 14:13:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a8f57b58d1ce64cc85cff96375770885e945aa55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:39:71:89:c0:1f:5d:2d:7a:c0:30:00:15:8c:
ab:99:a9:94:98:41:b9:94:bd:bb:71:2b:b5:43:e6:
2b:b2:51:51:6f:1f:60:db:9b:27:e7:b4:a3:a2:b3:
2f:dc:2f:54:ae:de:d4:b7:28:4d:a4:fb:06:a9:2e:
b2:2c:1e:a5:6c:28:8a:da:4c:68:d5:64:2e:c2:c8:
27:48:42:72:a9:6d:c3:ea:5e:83:bf:e4:b2:2d:ee:
fc:48:09:fc:df:2e:16:be:94:4a:23:48:e8:8f:17:
1f:06:ab:9d:ec:5e:6b:db:34:42:bd:f4:e1:5c:49:
c3:44:ad:b1:40:e4:21:5b:64:ee:8d:0f:4c:9a:57:
27:0a:51:51:80:fc:f5:71:b5:94:6f:3e:b5:80:8c:
a9:ac:bd:3a:cd:b8:c3:2f:83:10:bf:4c:14:0a:ef:
1d:ba:97:b9:b9:06:67:60:0c:06:1c:12:fd:f2:e9:
aa:96:0a:b1:bc:18:f9:fd:f1:cb:36:91:3b:f1:9a:
8b:fb:9a:fb:c1:eb:19:ba:24:90:0f:c9:24:1a:6f:
84:1f:e9:4c:89:e6:16:22:7d:7e:6c:bb:e4:6f:67:
94:fc:34:3f:f7:e9:78:9c:f5:6e:f6:4b:d3:6b:04:
6f:4f:42:29:bb:94:38:9c:03:39:ac:95:36:87:c2:
01:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F5:7B:58:D1:CE:64:CC:85:CF:F9:63:75:77:08:85:E9:45:AA:55
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/qPV7WNHOZMyFz_ljdXcIhelFqlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.71.0/24
163.5.110.0/23
163.5.126.0/24
163.5.128.0/24
163.5.165.0/24
163.5.250.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
45:e8:30:f7:c9:88:88:23:87:9c:c3:f3:35:83:33:53:84:da:
10:5b:8a:46:a7:32:6b:36:ec:79:4d:17:03:7d:dd:c9:50:5b:
97:1c:45:0c:c3:7f:2a:1d:8c:3e:0e:d2:2a:40:2c:f2:43:07:
ea:f8:e9:91:a2:2f:00:6e:4b:30:74:0f:e8:30:f8:e2:9b:9d:
ab:96:23:00:46:16:b2:48:00:27:23:9b:77:22:a8:ef:3a:14:
5c:7b:9b:70:ba:55:84:7d:9a:32:ec:d7:e9:97:4c:19:1e:fb:
0b:91:a5:2b:6a:d0:a0:15:bf:31:5e:53:8a:56:94:78:2c:a6:
13:68:4d:7b:3f:e5:c7:64:41:b0:0d:cc:1b:96:d1:cd:13:e5:
89:36:67:eb:62:b4:7b:37:e2:6f:c0:08:54:18:a2:54:cd:d8:
f3:2f:8b:a9:e4:66:83:21:bd:94:3e:1b:01:c7:ae:9c:fc:8a:
46:42:68:c1:8d:33:fc:3d:47:43:56:26:c3:55:4c:77:ca:df:
f2:48:d0:42:60:33:82:f1:6f:2f:e6:a7:96:00:16:92:67:b2:
30:b0:7f:fb:de:4f:2a:b9:4b:4f:8c:52:23:0b:5c:b1:a4:1d:
d8:a7:21:46:9a:7f:be:1e:ce:29:55:f6:59:94:b6:d2:4b:69:
1e:74:45:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:22 2023 by rpki-client on console-fra.rpki-client.org