Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/sYJuq5U21GX3mQx59ZG8vmvkLSU.roa
File: sYJuq5U21GX3mQx59ZG8vmvkLSU.roa (raw, json)
Hash identifier: OVxKIvKF4i9hTcvnYc41SBtH16T1p7bhPFBNbx+D0kg=
Subject key identifier: B1:82:6E:AB:95:36:D4:65:F7:99:0C:79:F5:91:BC:BE:6B:E4:2D:25
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0182BB4EBC8B4F62B555B764DAA207420B3A
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/sYJuq5U21GX3mQx59ZG8vmvkLSU.roa
Signing time: Sat 20 Aug 2022 12:51:15 +0000
ROA not before: Sat 20 Aug 2022 12:51:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207326
IP address blocks: 163.5.222.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:bb:4e:bc:8b:4f:62:b5:55:b7:64:da:a2:07:42:0b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 20 12:51:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b1826eab9536d465f7990c79f591bcbe6be42d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ff:7a:ec:7f:10:c3:b6:77:56:52:bf:1b:28:
23:e1:4a:6f:23:da:25:eb:ef:d7:5f:fc:3f:0b:a9:
fc:c8:52:0b:c1:28:e2:fa:55:4d:16:21:e3:49:38:
e8:7b:3c:25:07:cd:6f:74:92:e2:9a:e0:f7:28:6e:
77:20:d4:64:09:5a:63:17:f4:31:e7:cb:94:44:f6:
c3:6e:48:22:9d:08:4c:11:f7:86:78:5c:e5:28:a9:
e4:f3:7a:c7:e6:3d:e1:6b:04:08:be:0e:da:ab:f1:
48:92:99:80:29:57:1c:ec:9a:43:69:27:4f:91:51:
7d:8f:07:4b:25:b4:27:f3:8d:5a:48:00:b1:4a:88:
b0:3b:05:8d:c7:8e:a3:a8:6c:17:17:b1:00:47:e5:
f7:c2:ff:d9:c0:be:5c:2b:b4:01:9f:4f:28:92:40:
e8:60:5c:02:c7:9e:79:63:df:50:e8:1a:b2:69:ad:
8c:fe:80:78:8d:8a:29:b0:d0:1c:f7:77:a3:69:62:
22:c6:ac:6e:15:a8:87:e1:3d:de:69:62:32:d0:17:
d5:c1:65:76:a6:b6:cd:ae:4a:54:4d:52:44:4f:f7:
0d:a5:dd:d1:85:8b:4f:04:2f:fe:94:83:e5:73:0b:
c8:78:75:34:a9:50:f4:0f:eb:fb:f4:90:9f:f6:aa:
9d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:82:6E:AB:95:36:D4:65:F7:99:0C:79:F5:91:BC:BE:6B:E4:2D:25
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/sYJuq5U21GX3mQx59ZG8vmvkLSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.222.0/24
163.5.228.0/24
Signature Algorithm: sha256WithRSAEncryption
09:9b:a3:d1:2a:e7:73:d1:eb:06:a6:d8:fb:39:94:a6:9c:c1:
74:ca:78:41:68:40:55:6a:25:93:d7:f2:ae:a9:d4:72:b3:46:
41:ae:3f:a9:6c:e4:8b:8a:43:5c:2f:ef:97:66:a5:bf:a5:9a:
4d:68:84:c1:b8:6a:89:71:62:d2:9d:de:60:91:7a:29:c4:9f:
ca:87:83:c6:69:51:fc:7e:87:b8:dc:14:26:b8:5f:12:a1:2e:
a9:e3:a7:90:8a:28:5b:26:a6:f5:7d:c6:86:c4:03:2f:e6:76:
c6:a2:73:a2:b9:27:c8:37:50:26:71:d4:ea:16:c4:8f:83:c8:
f1:36:95:66:67:2e:f6:24:cd:e1:5a:62:71:28:9b:de:b3:5b:
22:08:1e:6b:d5:19:fb:91:eb:6d:5b:ae:c3:3e:ed:bd:65:d7:
42:44:13:26:b0:3c:2d:3c:a0:ad:7f:04:6e:e6:c4:b1:d1:32:
cf:31:4a:f6:e9:65:13:1a:03:14:e1:ea:19:15:ad:a0:9e:dd:
80:71:96:93:c3:7a:f8:3c:ef:99:eb:fe:8b:75:ed:57:21:4c:
82:79:5f:12:4f:6f:0b:ca:85:9d:5d:18:a1:04:36:71:fb:3a:
1f:3b:db:ac:20:b1:6c:c8:7e:ba:17:3e:d8:1e:52:24:2b:ad:
31:e5:2e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:23 2023 by rpki-client on console-fra.rpki-client.org