Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/s_kG3SggMkUVpUQttt8ek-AaIqY.roa
File: s_kG3SggMkUVpUQttt8ek-AaIqY.roa (raw, json)
Hash identifier: bh1jyYlJPloEXntV1Q75PnWEBrU8gM6+KNtAsVDkcNE=
Subject key identifier: B3:F9:06:DD:28:20:32:45:15:A5:44:2D:B6:DF:1E:93:E0:1A:22:A6
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0182443A8A4A9F04FEE9520987FFEC4AA31A
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/s_kG3SggMkUVpUQttt8ek-AaIqY.roa
Signing time: Thu 28 Jul 2022 09:54:23 +0000
ROA not before: Thu 28 Jul 2022 09:54:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 163.5.149.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:44:3a:8a:4a:9f:04:fe:e9:52:09:87:ff:ec:4a:a3:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 28 09:54:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b3f906dd2820324515a5442db6df1e93e01a22a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:52:4d:be:7a:da:ca:e4:b9:38:e9:52:9f:fc:
cb:fa:eb:78:77:33:36:c5:25:4a:25:79:3b:04:14:
3e:27:b1:cd:df:c1:d9:f0:e7:fb:65:58:49:4d:01:
1c:7e:76:9b:e4:e3:b7:fe:b5:5b:cf:15:9b:7f:41:
3d:20:69:cb:c0:c4:8b:31:6d:f4:15:44:73:0b:aa:
b8:00:5f:7f:bf:72:6e:50:11:bc:96:f1:bb:0a:c2:
f0:f7:28:ed:c9:03:59:91:81:5d:d9:be:f9:1e:f9:
2d:96:83:9c:bc:34:3e:c1:25:b3:70:f0:e5:08:9a:
9f:de:6a:de:08:29:31:bc:1f:2c:88:e4:92:70:e1:
1b:dc:ed:f6:2e:a7:b4:e6:c4:fb:c2:0e:7b:2e:f0:
17:30:81:76:41:98:90:38:53:b5:e5:33:a7:77:a9:
46:e1:25:65:52:9a:54:62:1a:78:32:6b:25:fe:13:
5d:59:02:b3:d9:d5:68:0b:76:32:bf:b0:20:a4:45:
e8:d7:62:ff:a3:62:cf:2c:ef:2e:b5:ea:b0:cb:19:
8a:73:05:d8:ff:91:26:3e:35:b1:ab:48:1b:68:fe:
84:fa:1a:88:71:03:24:da:6a:50:c4:2c:a4:0e:b0:
a8:6f:8d:7f:86:0c:aa:1e:c1:82:be:33:ef:99:76:
82:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F9:06:DD:28:20:32:45:15:A5:44:2D:B6:DF:1E:93:E0:1A:22:A6
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/s_kG3SggMkUVpUQttt8ek-AaIqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.148.0/23
Signature Algorithm: sha256WithRSAEncryption
85:fd:79:cf:a2:2e:ca:59:eb:5d:95:d3:f9:1a:51:f1:25:ce:
6b:86:1c:a1:e2:69:d9:81:11:fe:7a:4a:d9:0c:9f:38:f6:b0:
21:96:9c:4c:e0:de:40:3f:f9:22:92:31:1c:24:a8:5c:e3:66:
05:b8:66:77:55:91:44:27:e0:a6:13:d9:1c:6b:e8:14:cc:e6:
d4:3a:5b:b7:ca:a8:08:81:ee:48:85:99:4c:3c:cd:e7:1e:68:
3e:d4:9d:96:29:df:ce:a7:f0:20:af:22:67:9d:8f:68:c3:35:
6a:bb:fc:20:86:33:03:b6:34:c2:fa:8c:31:53:50:c7:44:88:
31:f5:43:a6:14:93:eb:6f:44:82:6e:a0:b1:20:eb:38:b7:e1:
f6:37:82:4e:70:b8:ad:0f:c3:bc:53:4c:91:a8:d8:12:c9:cf:
46:51:8b:17:fe:81:99:19:68:55:97:56:55:ed:38:a3:e4:6d:
83:a8:51:2c:94:71:d1:ed:89:24:83:c1:24:72:59:05:24:28:
8e:fc:ef:8a:84:3d:b7:99:40:58:e3:4a:7b:78:d8:6e:c7:fd:
f3:67:1d:c9:e5:6e:fa:c1:e9:f3:d3:5f:aa:5d:e1:6a:6a:21:
57:90:29:34:6b:42:a5:39:67:3c:69:e3:c5:f8:24:d8:8a:d4:
61:36:9c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:11 2023 by rpki-client on console-ams.rpki-client.org