Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/rrz7kKgL0RBySV3HsZaq6UylY5w.roa
File: rrz7kKgL0RBySV3HsZaq6UylY5w.roa (raw, json)
Hash identifier: T+kv68tKlpkmlQSWkKUnGUt3iRM73vkMpQgDTmirxt0=
Subject key identifier: AE:BC:FB:90:A8:0B:D1:10:72:49:5D:C7:B1:96:AA:E9:4C:A5:63:9C
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018382F3A39B2B9BE803D0FD9DCE32EB327E
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/rrz7kKgL0RBySV3HsZaq6UylY5w.roa
Signing time: Wed 28 Sep 2022 07:15:48 +0000
ROA not before: Wed 28 Sep 2022 07:15:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.231.0/24 maxlen: 24
163.5.232.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.234.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.165.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:82:f3:a3:9b:2b:9b:e8:03:d0:fd:9d:ce:32:eb:32:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 28 07:15:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aebcfb90a80bd11072495dc7b196aae94ca5639c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:69:86:4f:4b:e1:f4:d1:63:2d:0a:2f:02:9f:
c5:cb:03:fa:64:13:be:e5:0a:1f:0d:2a:95:79:8f:
5a:be:13:e1:2f:2f:55:db:41:c4:10:e7:4e:3a:31:
98:8d:28:4e:2a:0f:32:2c:1b:af:76:49:c2:aa:89:
82:48:9e:db:fb:9c:99:2c:55:94:0f:03:10:b6:1c:
ac:a8:b0:96:59:f6:5e:44:59:d9:25:fc:0e:dc:be:
2f:ec:92:73:a2:62:bc:76:09:cc:e9:4a:07:86:37:
27:45:13:3f:8e:39:e8:57:2d:c4:be:21:23:23:4a:
67:9d:71:0d:9c:47:0e:dd:11:04:5d:29:b2:2f:af:
c9:62:c7:a1:18:89:95:5b:b4:3e:04:ee:b5:f5:7b:
73:f1:67:65:88:bf:83:6c:c3:ec:be:92:84:dc:cb:
82:e8:52:73:73:7b:dc:fe:bf:11:cc:86:fd:44:ce:
f3:4d:26:51:ea:b4:06:af:56:db:ca:3a:0c:ad:5a:
90:7e:c9:1f:0b:c2:f6:e9:32:e0:66:8a:a5:5d:3b:
e8:d4:dd:08:37:88:c9:a9:41:6d:4b:f4:5a:c3:08:
61:b4:aa:8f:85:bf:a4:02:66:2d:60:6c:fa:49:a7:
95:23:3d:69:3e:1c:1f:59:9d:67:67:bd:ba:80:a0:
85:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:BC:FB:90:A8:0B:D1:10:72:49:5D:C7:B1:96:AA:E9:4C:A5:63:9C
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/rrz7kKgL0RBySV3HsZaq6UylY5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.110.0/23
163.5.126.0/24
163.5.165.0/24
163.5.231.0-163.5.232.255
163.5.234.0/24
163.5.250.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:b4:62:a6:53:d1:2a:74:01:86:b2:03:71:95:3e:da:8f:3e:
0d:11:6a:84:6f:97:74:19:9d:fe:78:8e:5e:2a:db:ef:9c:eb:
ea:a6:de:b1:8a:ff:41:66:08:34:d2:40:33:3c:ab:eb:36:b6:
47:82:88:62:e7:cb:7c:26:39:10:98:ac:4b:64:59:fb:eb:f3:
88:d5:9a:13:ce:6a:92:43:81:da:21:f5:5d:c7:67:aa:e2:74:
b8:d5:df:75:51:8b:21:ee:95:e2:ee:a4:a8:4c:fa:0c:ae:b6:
97:71:94:2f:57:5e:d3:ec:ae:f7:69:b0:54:86:7e:2e:a3:73:
22:c3:b5:33:b7:03:b8:dc:5a:8e:a9:7b:cc:e6:c6:99:fc:13:
f6:ad:69:d3:b3:97:46:bf:aa:1e:14:60:d7:89:50:08:d0:5f:
66:58:e2:03:b8:22:63:b0:cc:83:f7:53:93:b1:14:c4:a9:c3:
20:9d:35:00:b1:ec:72:eb:e7:32:fe:3c:e8:ef:2b:85:16:a9:
59:00:eb:7e:88:80:94:bc:77:3c:e6:4f:89:3a:39:92:0a:94:
05:1c:8b:d8:ca:c3:94:f4:b3:e7:47:06:82:c2:b2:46:08:38:
3c:1d:db:97:ea:13:b6:7f:55:db:1f:29:fd:f6:f3:30:1d:78:
ea:63:8c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:08 2024 by rpki-client on console-fra.rpki-client.org