Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/sQMDZjkLvzOZE-MQ2YMJor1L58Y.roa
File: sQMDZjkLvzOZE-MQ2YMJor1L58Y.roa (raw, json)
Hash identifier: PnjPxtg0kciJDv48ci58pFRJxkBB6+xZmJsiSWUdavQ=
Subject key identifier: B1:03:03:66:39:0B:BF:33:99:13:E3:10:D9:83:09:A2:BD:4B:E7:C6
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018465AF605C31C809D46BA992260F6AF646
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/sQMDZjkLvzOZE-MQ2YMJor1L58Y.roa
Signing time: Fri 11 Nov 2022 07:55:02 +0000
ROA not before: Fri 11 Nov 2022 07:55:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 163.5.175.0/24 maxlen: 24
163.5.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:65:af:60:5c:31:c8:09:d4:6b:a9:92:26:0f:6a:f6:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Nov 11 07:55:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b1030366390bbf339913e310d98309a2bd4be7c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fa:7b:ee:4d:94:10:42:e1:21:ff:29:c9:c3:
ae:75:fe:ea:8f:15:39:5c:46:d9:c3:37:34:2c:f1:
5e:ec:68:d8:13:b4:c1:9d:b1:3d:3e:c8:1f:44:bf:
fd:72:10:04:26:18:c2:96:d4:ce:d5:fb:89:d9:88:
41:b2:f8:52:9c:eb:d0:29:c0:df:fc:65:c1:07:31:
24:d0:8d:05:6c:8d:76:2d:49:9f:f8:c7:f5:1c:24:
df:4a:c2:a6:24:6a:cd:db:7e:e4:86:87:53:c4:ab:
a6:6f:f3:2a:4c:1c:78:38:a0:57:d1:d8:ed:5f:a9:
60:20:d2:3e:2b:1b:fa:38:62:b8:e3:87:dd:80:94:
3b:4b:31:25:55:53:29:42:45:38:f5:b0:c2:ae:6a:
09:47:22:7f:fe:47:7f:bb:86:47:b9:6c:85:3d:de:
27:2d:2f:c0:09:87:fd:6a:11:4c:6a:a8:bb:cf:e3:
b8:72:9d:22:46:8c:a7:d3:12:f5:34:44:35:94:96:
f8:5a:7d:e3:c9:56:ba:1b:ee:31:30:9f:c2:cd:9b:
fd:29:37:b4:e2:eb:43:43:c5:e9:11:dd:75:ad:21:
2d:40:d4:7a:fa:05:d0:d1:22:cb:39:4f:65:b3:b9:
38:53:46:6d:34:ea:7b:76:cc:39:5e:50:14:83:3b:
f2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:03:03:66:39:0B:BF:33:99:13:E3:10:D9:83:09:A2:BD:4B:E7:C6
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/sQMDZjkLvzOZE-MQ2YMJor1L58Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.175.0/24
163.5.217.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:ab:04:8e:cc:de:ee:05:7e:f7:d4:56:4d:f3:56:3c:46:e7:
0a:45:aa:88:16:56:ed:e7:3f:99:9f:f1:25:5c:30:38:a2:7b:
a4:df:0d:23:99:64:4c:7b:be:c7:66:13:55:97:d6:12:89:9c:
ba:ec:83:68:bc:f6:aa:c5:9b:8b:64:92:ec:63:f9:1e:fb:fa:
46:f3:b6:a7:a3:68:ad:f9:21:03:c6:9f:58:4a:70:7e:4d:89:
28:8e:e6:bc:81:55:1b:2f:d0:9e:d0:5b:52:e6:c1:b3:51:ad:
9b:d9:4e:a2:aa:a7:ab:a0:44:56:79:fc:ae:3e:eb:32:45:ba:
c7:a0:b5:ce:fe:1a:9f:27:d5:28:f3:62:f2:f4:ea:8a:7f:64:
55:2e:0e:2a:3e:3e:07:73:42:75:79:d3:3e:5f:c7:12:8f:b6:
d0:b1:77:a1:81:7d:4f:d2:80:fe:f2:fa:31:4a:38:6d:36:1b:
5d:81:1a:4f:88:bf:02:94:77:01:f0:65:22:b9:54:9e:3a:c1:
f7:8a:a8:7f:5f:f5:ca:b5:fd:21:5d:21:16:be:f3:95:9d:46:
25:f4:9f:2f:db:92:ec:24:fe:b8:84:07:f1:dd:d2:76:f4:fc:
3c:d0:b6:48:21:d6:71:8c:9a:9a:7d:d4:8a:95:a3:0c:00:c7:
c0:01:6d:45
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYRlr2BcMcgJ1GupkiYPavZGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjIxMTExMDc1NTAyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTAzMDM2NjM5MGJiZjMzOTkxM2UzMTBkOTgzMDlhMmJkNGJlN2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/p77k2UEELhIf8pycOudf7qjxU5
XEbZwzc0LPFe7GjYE7TBnbE9PsgfRL/9chAEJhjCltTO1fuJ2YhBsvhSnOvQKcDf
/GXBBzEk0I0FbI12LUmf+Mf1HCTfSsKmJGrN237khodTxKumb/MqTBx4OKBX0djt
X6lgINI+Kxv6OGK444fdgJQ7SzElVVMpQkU49bDCrmoJRyJ//kd/u4ZHuWyFPd4n
LS/ACYf9ahFMaqi7z+O4cp0iRoyn0xL1NEQ1lJb4Wn3jyVa6G+4xMJ/CzZv9KTe0
4utDQ8XpEd11rSEtQNR6+gXQ0SLLOU9ls7k4U0ZtNOp7dsw5XlAUgzvy/wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLEDA2Y5C78zmRPjENmDCaK9S+fGMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvc1FNRFpqa0x2ek9aRS1NUTJZTUpvcjFMNThZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAowWvAwQA
owXZMA0GCSqGSIb3DQEBCwUAA4IBAQALqwSOzN7uBX731FZN81Y8RucKRaqIFlbt
5z+Zn/ElXDA4onuk3w0jmWRMe77HZhNVl9YSiZy67INovPaqxZuLZJLsY/ke+/pG
87ano2it+SEDxp9YSnB+TYkojua8gVUbL9Ce0FtS5sGzUa2b2U6iqqeroERWefyu
PusyRbrHoLXO/hqfJ9Uo82Ly9OqKf2RVLg4qPj4Hc0J1edM+X8cSj7bQsXehgX1P
0oD+8voxSjhtNhtdgRpPiL8ClHcB8GUiuVSeOsH3iqh/X/XKtf0hXSEWvvOVnUYl
9J8v25LsJP64hAfx3dJ29Pw80LZIIdZxjJqafdSKlaMMAMfAAW1F
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:11 2023 by rpki-client on console-ams.rpki-client.org