Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/vROPq0FJo_-NLDr1owUH1S7Dhbs.roa
File: vROPq0FJo_-NLDr1owUH1S7Dhbs.roa (raw, json)
Hash identifier: 7VYJzcH0ThYgO3FTMhTWYJk193ufZd+LXKxVHdH126Y=
Subject key identifier: BD:13:8F:AB:41:49:A3:FF:8D:2C:3A:F5:A3:05:07:D5:2E:C3:85:BB
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01840E1F3A27BDEBBF61EDC49FA758B8DF45
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/vROPq0FJo_-NLDr1owUH1S7Dhbs.roa
Signing time: Tue 25 Oct 2022 07:50:38 +0000
ROA not before: Tue 25 Oct 2022 07:50:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210439
IP address blocks: 163.5.189.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0e:1f:3a:27:bd:eb:bf:61:ed:c4:9f:a7:58:b8:df:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 25 07:50:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bd138fab4149a3ff8d2c3af5a30507d52ec385bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5c:e0:1a:0c:96:5f:fc:5b:5c:4c:07:d7:c9:
77:01:11:89:93:61:8c:e1:0e:1d:21:42:a2:dc:3a:
a2:fc:f6:1d:e7:a7:08:2a:76:e2:0c:3b:39:9d:12:
41:4d:3a:cb:e5:45:10:e8:44:4a:8d:46:74:e5:2c:
ed:45:03:77:09:b1:29:02:be:1d:d2:0a:6d:4f:ef:
4e:d3:57:5f:c3:14:6b:70:56:5c:0d:81:eb:0b:f0:
da:34:fd:57:68:0d:71:69:bb:79:0a:a1:39:61:bb:
2b:34:64:6b:79:10:3b:8d:44:72:3c:63:e0:c6:e9:
3a:1c:0f:81:85:35:d5:bb:2d:12:5b:82:ba:18:0f:
1a:e7:fa:a7:86:89:04:6e:c1:62:2c:c3:ac:84:7c:
5f:a4:fe:f0:46:1a:37:12:57:00:cf:8b:f5:a2:4a:
1a:cb:28:1b:f5:20:e1:c6:5a:82:84:40:94:df:66:
07:fb:61:ec:89:59:70:15:99:57:a1:da:d7:80:99:
fa:f1:5e:7d:c6:d2:91:3d:88:82:d2:13:30:40:a2:
94:f1:7e:8d:63:38:82:e4:f8:8c:c5:7b:16:22:ad:
55:c2:40:de:cf:7d:32:a2:2f:e6:fb:b2:6a:66:89:
f0:83:d2:34:d3:2c:bb:74:8e:b6:d5:c3:51:cb:c8:
80:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:13:8F:AB:41:49:A3:FF:8D:2C:3A:F5:A3:05:07:D5:2E:C3:85:BB
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/vROPq0FJo_-NLDr1owUH1S7Dhbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.189.0/24
Signature Algorithm: sha256WithRSAEncryption
97:e4:2c:de:bc:12:92:fc:1a:15:9e:77:88:1f:25:0a:a1:72:
b7:3e:be:32:49:96:8b:aa:d0:f3:94:b8:f3:83:4d:70:f1:a5:
74:75:43:0e:fb:b6:67:90:87:10:3e:ce:d3:8e:81:09:4b:aa:
65:30:36:07:55:da:73:ee:c7:5e:bb:d6:98:ef:08:f9:84:4a:
81:fc:a5:31:4b:cc:db:78:8e:53:0b:d3:f7:70:c9:93:6e:1e:
44:48:70:bd:42:81:3e:f1:c5:f8:9c:8b:f8:bd:1d:b9:2e:19:
f4:e6:40:af:ce:3d:86:9d:40:8c:66:32:80:1a:50:9a:db:42:
9a:e2:9f:e6:ed:68:8b:c6:d3:ef:dc:00:93:c2:f6:79:f0:5a:
92:8d:ae:21:74:2f:10:54:98:47:8d:fa:b0:b4:55:06:45:58:
47:39:13:eb:f5:04:48:93:ff:8c:45:9c:7e:6a:7b:1e:61:e8:
43:4a:2c:16:98:8e:9d:42:ba:b7:99:e4:5b:8d:06:27:bb:ed:
02:39:73:1f:dc:30:29:35:3f:dd:79:ee:fd:30:99:81:1b:8a:
00:30:49:24:5f:68:c6:b6:96:b4:92:ab:72:90:28:8c:3a:0f:
74:53:bb:ef:25:80:24:fd:08:10:00:ec:dc:c3:6f:e2:6b:b7:
8a:31:a2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:11 2023 by rpki-client on console-ams.rpki-client.org