Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/uaA2duPZYd7L2jURePnAhiBaHt4.roa
File: uaA2duPZYd7L2jURePnAhiBaHt4.roa (raw, json)
Hash identifier: 9Wd/GcPJz7rZS1p9S2b34RLPaP0NS8ydcrq1meYyz9M=
Subject key identifier: B9:A0:36:76:E3:D9:61:DE:CB:DA:35:11:78:F9:C0:86:20:5A:1E:DE
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0184AB19E362A7E4BD63922F9F88E56C1D79
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/uaA2duPZYd7L2jURePnAhiBaHt4.roa
Signing time: Thu 24 Nov 2022 19:25:11 +0000
ROA not before: Thu 24 Nov 2022 19:25:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211936
IP address blocks: 163.5.225.0/24 maxlen: 24
163.5.229.0/24 maxlen: 24
163.5.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ab:19:e3:62:a7:e4:bd:63:92:2f:9f:88:e5:6c:1d:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Nov 24 19:25:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b9a03676e3d961decbda351178f9c086205a1ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:28:16:f9:40:87:c6:5b:32:a7:6c:8c:80:0f:
fd:af:18:52:91:e4:c4:df:d0:17:f9:95:9e:30:12:
d0:80:75:91:53:ba:c1:af:e5:17:31:1a:ef:0a:c9:
82:3a:74:ac:82:2e:80:4c:c9:e3:21:1a:38:15:87:
6f:2d:41:94:c1:32:69:91:65:d2:cc:5e:3b:16:15:
38:c0:5b:86:4e:f1:46:d8:fa:09:81:b0:2d:f1:b6:
9f:03:01:aa:39:cb:be:05:53:d9:4c:c5:d0:3a:42:
56:c3:27:0f:c1:27:6c:8f:62:b5:ff:05:7f:77:34:
b8:50:d7:31:dc:53:9d:a9:9d:ca:2b:77:99:7f:f3:
50:2b:72:72:4a:63:03:86:65:a7:ea:ea:c5:6f:d4:
78:6b:d3:76:35:5b:35:22:17:7b:f5:3a:76:e0:85:
c2:eb:74:55:3e:3b:1f:2c:ec:1c:92:8f:67:ab:bb:
8d:b3:0b:dd:6b:7e:29:90:45:9c:32:d9:e8:6a:9a:
5a:26:f8:a9:f3:92:0c:1e:83:d1:0a:d8:d7:a7:a6:
20:2f:2e:fc:df:16:45:1c:3d:9f:c9:0c:19:1d:d2:
18:b8:dd:f6:c6:ce:2b:c2:c4:1b:a9:ef:37:20:cb:
10:9b:eb:e7:12:8b:ca:f1:0e:18:ca:c5:8d:12:01:
75:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A0:36:76:E3:D9:61:DE:CB:DA:35:11:78:F9:C0:86:20:5A:1E:DE
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/uaA2duPZYd7L2jURePnAhiBaHt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.159.0/24
163.5.225.0/24
163.5.229.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:84:88:54:86:22:a9:c7:d0:72:be:76:30:ae:4b:b4:c1:de:
4a:45:05:9d:43:5a:37:6c:85:b3:43:13:47:35:ff:00:ea:b5:
ec:f2:d6:32:b9:f9:db:7e:6d:d8:e8:b4:7e:1f:7f:ca:3b:4b:
01:41:80:7d:18:27:fd:18:d0:df:2e:d6:fa:c2:c0:44:91:6d:
58:eb:2f:b5:17:5b:8e:e8:8a:5b:05:fa:e3:8d:f4:83:7d:18:
e5:1f:44:21:39:f0:25:a7:15:50:23:73:c4:24:10:41:8e:c9:
06:2b:ba:5e:9e:8f:08:32:7b:f2:eb:ce:56:32:b2:8e:ca:e3:
f3:0e:79:99:84:79:1a:19:9a:c4:73:f0:da:f3:ee:5a:74:55:
9d:67:f9:90:c1:33:8b:69:43:d7:18:e1:11:4e:c2:b7:dc:10:
b8:be:f4:55:46:52:a3:90:15:24:88:d6:d9:fc:68:cb:f3:e6:
24:f9:e9:58:ae:e1:c9:c2:79:10:5d:0e:45:a3:86:ca:8b:f2:
61:6a:20:92:88:fb:00:81:0f:2a:d7:f2:15:9e:bf:40:e9:9d:
e1:3e:c0:7c:d7:f8:ea:99:d2:13:09:9a:e3:a4:9d:4d:ef:ec:
9b:97:bf:15:fb:09:70:f5:7b:6d:0b:d9:95:eb:a9:10:0b:82:
8d:9d:8f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:11 2023 by rpki-client on console-ams.rpki-client.org