Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/rYUVUwa9ENhMDtqUNlZtpkqu1Ho.roa
File: rYUVUwa9ENhMDtqUNlZtpkqu1Ho.roa (raw, json)
Hash identifier: sWgpVKp1Xu0sHpFmHLBoplK08SJS7XmA/EYGiS82EuM=
Subject key identifier: AD:85:15:53:06:BD:10:D8:4C:0E:DA:94:36:56:6D:A6:4A:AE:D4:7A
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0183FBA25B34846B90D83F2BD478409E3038
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/rYUVUwa9ENhMDtqUNlZtpkqu1Ho.roa
Signing time: Fri 21 Oct 2022 17:41:04 +0000
ROA not before: Fri 21 Oct 2022 17:41:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 150303
IP address blocks: 163.5.180.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:fb:a2:5b:34:84:6b:90:d8:3f:2b:d4:78:40:9e:30:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 21 17:41:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ad85155306bd10d84c0eda9436566da64aaed47a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8e:8b:32:17:71:1d:dc:ca:30:26:09:ed:e4:
75:59:5d:f1:d4:02:cb:cd:4d:b3:fa:8c:87:53:ca:
c0:7a:07:23:8f:fc:04:1b:92:a3:d9:b3:05:dc:89:
d2:6f:d2:67:14:5a:43:62:46:eb:82:64:43:57:4b:
a9:a2:e5:0f:cb:49:af:c0:27:c8:18:dc:09:37:39:
ec:63:f5:55:0e:56:5c:79:4e:4d:a7:00:0c:94:02:
77:9e:44:82:28:f1:8f:cf:8a:6b:2b:cd:5c:43:e3:
22:25:d4:a3:dd:57:d3:20:06:19:30:16:dc:e0:2d:
d2:d6:07:03:0b:15:14:33:6c:68:d8:54:1d:c2:a3:
a4:28:ee:b4:55:8c:ed:a4:d7:d9:f3:e5:f1:cc:d8:
09:a3:e1:00:6a:c2:e9:34:75:de:33:01:87:87:e9:
88:ce:99:0a:5a:cd:53:f5:97:2b:41:9d:49:5e:ed:
c7:5d:7c:0e:81:0b:5b:88:5a:43:02:d6:c0:e5:98:
d4:e0:5b:56:14:f3:38:dc:f8:45:5f:22:b1:77:c9:
b7:aa:57:99:c4:f3:d5:6d:64:8d:9c:50:c7:a2:f4:
36:48:1c:32:a9:e2:13:db:71:d5:c2:ff:08:37:cb:
bd:d1:d8:3b:8d:7c:b5:4c:d4:06:ab:b4:f6:9b:8c:
17:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:85:15:53:06:BD:10:D8:4C:0E:DA:94:36:56:6D:A6:4A:AE:D4:7A
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/rYUVUwa9ENhMDtqUNlZtpkqu1Ho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.180.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:ff:11:f1:da:7e:8a:28:cd:73:f6:a5:53:75:f9:5a:a9:57:
fe:5b:9d:86:0c:6f:58:fb:f8:f7:a8:e1:d1:eb:6b:2e:9b:36:
de:ec:5f:0b:94:a3:e8:d0:c0:12:1c:c7:b3:c0:7f:81:84:b3:
7d:31:78:71:3c:37:20:a0:74:40:2a:67:7f:0b:04:e9:05:6a:
47:ed:d0:d4:f6:8e:42:04:d5:ab:17:3c:ba:d4:63:7b:ce:3d:
68:9f:5f:f3:ea:a2:1d:ef:0f:03:db:67:1e:55:e7:8f:67:2a:
8c:ea:46:4e:91:2f:88:dc:30:41:3b:3d:03:53:02:0b:e6:0f:
18:66:28:d2:b8:93:19:a8:d9:b2:7d:da:45:83:c7:dc:aa:57:
5e:99:2c:ba:e9:1d:5e:30:e4:d8:cc:b2:6f:13:a9:9b:09:23:
64:5f:e6:da:7a:c9:61:d7:38:d4:41:33:af:92:c1:88:38:30:
98:f2:61:97:11:20:e3:4a:a2:15:d9:f6:18:7c:d7:d3:57:05:
02:1a:8c:2b:e1:b7:0f:ca:5e:ae:f9:5d:cc:22:86:b2:4d:fd:
d6:57:39:4d:47:d4:b6:93:e9:fb:ab:81:08:32:35:95:d4:7c:
f3:56:40:b3:08:66:40:91:ce:0a:10:bb:ad:d6:55:2b:30:17:
a0:61:89:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:11 2023 by rpki-client on console-ams.rpki-client.org