Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/tLuF8YDLWOVhLphFoieubF85VQA.roa
File: tLuF8YDLWOVhLphFoieubF85VQA.roa (raw, json)
Hash identifier: kvX6fWYqF1oESTyLcBeiGOuImkJg2MraYBgJgvxD42E=
Subject key identifier: B4:BB:85:F1:80:CB:58:E5:61:2E:98:45:A2:27:AE:6C:5F:39:55:00
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018558ECA5BB9BD9B9EC9EDAFED3B5A2FEA4
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/tLuF8YDLWOVhLphFoieubF85VQA.roa
Signing time: Wed 28 Dec 2022 13:29:41 +0000
ROA not before: Wed 28 Dec 2022 13:29:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 64267
IP address blocks: 163.5.124.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:58:ec:a5:bb:9b:d9:b9:ec:9e:da:fe:d3:b5:a2:fe:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Dec 28 13:29:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b4bb85f180cb58e5612e9845a227ae6c5f395500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ec:70:67:3f:22:49:f5:c8:28:1d:59:e5:89:
90:82:4d:9a:5a:ee:e0:32:25:88:5f:74:cf:f9:d6:
81:41:3e:0c:9f:fc:d6:7d:ed:f1:a6:57:9f:55:db:
af:dc:b5:9a:7c:1b:af:ad:2d:a5:fd:0b:ac:74:90:
85:a9:8a:bb:98:5c:0d:53:20:ad:bb:37:bb:1b:1a:
e2:d7:13:dc:b2:d0:fc:57:01:d8:3a:12:59:c1:fb:
e4:7f:c8:09:23:49:03:d1:f5:b6:d7:6c:92:57:4d:
98:e5:77:df:28:7f:e5:95:b3:d6:14:57:3b:80:bb:
9a:b9:55:20:4d:1a:56:a1:1c:f2:91:ad:d9:4c:ee:
f4:9f:1c:22:23:d9:a9:3c:e8:fc:39:87:63:67:22:
dd:77:47:1d:e7:37:9c:e3:cc:6a:34:b3:10:d9:e1:
8c:77:bf:00:f3:dc:4b:48:b1:e9:59:11:ea:16:1c:
22:cc:17:97:64:6a:83:49:da:ed:44:84:06:2f:47:
a5:ee:72:64:8c:8a:f7:0c:af:15:8d:f3:60:c3:0b:
d1:0c:89:fa:11:10:3e:48:b8:82:4b:c6:10:dd:a7:
4a:cb:21:8c:03:97:4a:82:7c:69:54:d1:a5:06:5d:
23:7a:24:c9:5f:f4:2f:67:51:8d:fc:a0:03:fd:32:
66:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:BB:85:F1:80:CB:58:E5:61:2E:98:45:A2:27:AE:6C:5F:39:55:00
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/tLuF8YDLWOVhLphFoieubF85VQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.124.0/24
163.5.129.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:34:a2:3f:29:74:bd:9a:47:b3:1b:11:7b:14:a7:a8:fb:dc:
cc:68:b6:31:9b:6c:7d:8f:01:e2:fa:ed:59:ec:53:83:fb:7d:
57:05:12:55:15:61:be:f3:d4:a9:8e:a0:cc:a0:ee:70:19:6d:
ef:87:9d:a8:5b:86:e1:82:25:59:5c:45:6e:01:49:39:42:82:
12:65:24:ce:a2:1c:b0:46:bc:70:1c:89:68:36:b0:56:dd:77:
de:05:67:ce:31:9f:82:72:5a:77:9f:52:6f:6a:21:70:c3:60:
92:38:3d:f0:74:bc:9e:fb:33:f5:05:6a:64:11:6f:ac:46:4f:
76:42:6a:8b:3e:1e:8b:3b:9e:02:2d:6c:dc:7f:1c:60:e6:c4:
ff:f7:bc:21:9b:85:b6:a6:45:9b:c4:eb:57:6b:2e:76:59:d3:
43:d3:a3:ae:b2:75:7a:99:cb:03:3c:3c:d9:b6:3f:74:25:50:
de:25:1b:9e:3f:1f:55:f4:47:4d:1f:95:52:cc:57:10:f8:b0:
19:68:eb:2e:09:a8:66:4e:dd:6f:38:bc:e1:ee:3a:8e:09:53:
07:ee:ec:a3:54:5d:0e:2e:73:86:41:1b:cd:8d:e7:bd:a5:cc:
c5:ab:1a:0a:0e:b1:b5:7c:04:0f:e3:f1:e9:34:b9:a0:56:69:
1f:ee:63:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:23 2023 by rpki-client on console-fra.rpki-client.org