Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/uLrj2tDabYECCDstEgPOS9jupf0.roa
File: uLrj2tDabYECCDstEgPOS9jupf0.roa (raw, json)
Hash identifier: 1dsipevY07NfahN2XU8vnMx8DPK7RyfXXZOVujxdc8g=
Subject key identifier: B8:BA:E3:DA:D0:DA:6D:81:02:08:3B:2D:12:03:CE:4B:D8:EE:A5:FD
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018246989DE725290029E6E9CA8F0AE7319F
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/uLrj2tDabYECCDstEgPOS9jupf0.roa
Signing time: Thu 28 Jul 2022 20:56:23 +0000
ROA not before: Thu 28 Jul 2022 20:56:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 163.5.179.0/24 maxlen: 24
163.5.166.0/24 maxlen: 24
163.5.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:46:98:9d:e7:25:29:00:29:e6:e9:ca:8f:0a:e7:31:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 28 20:56:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b8bae3dad0da6d8102083b2d1203ce4bd8eea5fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b9:11:14:90:04:95:51:06:93:3f:21:e6:77:
2c:7b:bd:54:13:1c:93:c7:b9:ad:79:ad:8c:54:61:
e8:d6:11:5c:de:a7:8a:f5:8c:0d:4d:25:87:c8:dc:
5a:67:da:38:3b:f1:d4:ce:01:58:88:cd:ab:72:e7:
59:3a:b1:bd:e0:99:bc:13:3d:06:57:ac:f5:01:98:
f9:bc:9f:a8:96:0d:78:02:5f:30:70:d2:de:ce:ba:
c1:3a:96:a9:66:b4:3d:c5:cb:19:b4:f2:4d:fb:4a:
fc:2b:61:c3:0e:34:21:2f:17:23:12:61:76:7d:a1:
a6:4f:98:77:0c:86:4e:36:86:ba:d5:54:27:93:a5:
2c:c1:b9:63:0b:9a:8f:4d:8c:aa:ab:64:4d:d5:4b:
87:5c:f7:80:b2:8d:0a:f4:ea:36:9c:ee:f9:01:de:
cd:3c:c2:4c:56:c1:e4:29:9a:f3:21:89:f9:e9:38:
0d:ef:a0:a4:a0:e5:2d:59:9f:0c:46:4c:04:32:be:
64:cc:5d:02:82:53:e2:e0:a3:14:f5:8b:04:d9:a8:
bf:ae:a3:50:f1:f0:01:dd:37:67:b2:23:75:ba:4b:
18:c1:d4:d4:62:81:cb:ee:21:f2:20:51:85:fd:56:
aa:12:f6:12:a5:0d:8b:0d:1c:6c:8f:8c:44:96:26:
e8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:BA:E3:DA:D0:DA:6D:81:02:08:3B:2D:12:03:CE:4B:D8:EE:A5:FD
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/uLrj2tDabYECCDstEgPOS9jupf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.166.0/24
163.5.169.0/24
163.5.179.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:dd:88:21:43:98:0b:23:90:cb:e3:f8:4f:cf:1b:b9:fa:1d:
0f:92:b1:a9:4b:49:e0:d3:a8:3d:c6:a0:81:2a:51:5a:e6:31:
52:77:03:6c:a4:8a:99:2d:19:ee:20:dd:4b:18:00:54:5b:d5:
c7:87:1f:7e:a9:c7:fa:6e:2d:e4:b4:ef:2e:30:b9:d8:1c:ba:
44:9d:11:dc:07:b9:ed:68:5c:ab:8b:cc:1b:80:14:68:70:b4:
ca:a0:5b:32:2d:9e:94:ec:51:79:f2:dd:51:9a:8c:7b:67:24:
69:7e:a2:e5:e4:5c:7e:2d:63:4b:f3:5d:c1:92:86:85:b6:38:
16:8c:a6:5c:a4:be:30:0e:b4:ab:b6:65:8b:62:0b:11:5c:0f:
fa:69:c3:35:c7:6e:6c:da:43:74:0b:ad:33:9d:f8:b0:7a:d9:
a4:ec:79:be:06:3d:00:3a:fa:a7:24:5a:d0:14:ea:e2:6d:30:
90:2d:5a:44:c7:da:d7:23:91:e5:f2:2c:68:18:19:a3:0f:d2:
6c:cf:95:85:2f:a9:39:36:a5:ce:13:a4:af:7c:42:12:45:22:
b7:a2:21:3d:9e:91:ef:ca:66:d6:44:15:90:2b:bf:15:12:a4:
00:b3:7b:e2:c5:f5:fb:fd:a4:23:21:0f:44:71:e6:79:29:ec:
aa:15:53:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:23 2023 by rpki-client on console-fra.rpki-client.org