Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/vvZYGOuFVdF419El0kKIUKP6HKE.roa
File: vvZYGOuFVdF419El0kKIUKP6HKE.roa (raw, json)
Hash identifier: r///Oh4dHaFPwfLUZQl0uDmRwzZwba+6k7DH29UxGzY=
Subject key identifier: BE:F6:58:18:EB:85:55:D1:78:D7:D1:25:D2:42:88:50:A3:FA:1C:A1
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018265B7899FF2E0A7AA2FFD9FB24B357C37
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/vvZYGOuFVdF419El0kKIUKP6HKE.roa
Signing time: Wed 03 Aug 2022 21:58:23 +0000
ROA not before: Wed 03 Aug 2022 21:58:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43431
IP address blocks: 163.5.192.0/24 maxlen: 24
163.5.193.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:65:b7:89:9f:f2:e0:a7:aa:2f:fd:9f:b2:4b:35:7c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 3 21:58:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bef65818eb8555d178d7d125d2428850a3fa1ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:62:e8:c1:78:99:55:16:03:ff:92:58:2c:4f:
8a:a6:dd:aa:9b:c2:e1:ef:f0:36:4b:fa:ea:9b:79:
97:98:fb:25:42:c6:b2:f6:dd:e0:34:6f:2c:6f:91:
68:5b:80:c2:19:c7:38:25:88:68:f2:a4:87:32:0e:
d7:de:28:e4:a4:c6:d7:1d:c5:ca:4a:f9:7b:f2:26:
00:b0:28:a6:73:19:cf:45:c7:f3:4f:54:5b:f2:6b:
2f:37:3b:d4:3a:7d:56:d0:32:b2:ff:1d:56:5d:72:
11:10:2d:b9:88:35:c2:1d:39:c5:90:e4:f6:ff:c1:
68:c8:0d:80:a4:c0:e0:f7:56:37:42:c9:09:b2:b9:
7d:47:c4:02:16:e7:07:09:bb:ab:c7:55:4b:08:a5:
e7:a4:1e:84:bc:99:a9:08:70:fd:32:96:87:ca:40:
52:99:42:91:de:a1:c5:ee:71:7e:79:7a:42:5e:3e:
37:b9:b0:b5:08:7f:3c:8e:55:7d:ae:2b:94:b4:2b:
26:f5:cd:46:43:e7:dc:d5:d8:63:73:fc:a7:49:0d:
d9:01:c8:66:02:e3:a2:4f:72:13:8d:ef:b1:20:92:
15:77:ff:d9:2f:3b:a1:a3:c5:98:33:25:1e:64:85:
b7:cf:5f:25:6c:3e:07:1f:62:02:e2:39:dd:57:09:
fd:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F6:58:18:EB:85:55:D1:78:D7:D1:25:D2:42:88:50:A3:FA:1C:A1
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/vvZYGOuFVdF419El0kKIUKP6HKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.192.0/23
Signature Algorithm: sha256WithRSAEncryption
84:22:8d:c9:bd:a1:11:c7:3c:a8:54:21:2d:32:b1:6e:72:76:
73:c1:ce:41:de:59:95:e2:1c:7e:e8:82:c6:39:3a:41:29:ab:
3b:48:64:a8:f3:3c:60:f1:c9:ee:bf:3c:d6:c6:90:0d:a8:b2:
71:8c:d2:7e:24:da:89:46:1c:8e:dc:cb:17:a8:01:b3:20:db:
60:99:f6:dd:47:a6:ee:00:c8:56:b9:45:f0:eb:e8:ac:9f:b3:
3d:36:17:55:47:23:99:b7:b6:0c:56:88:ff:03:a8:46:b7:e5:
28:f8:57:43:1c:ee:d7:5c:81:a5:40:ef:0c:bb:27:ca:80:f6:
ef:dc:49:83:01:66:e0:f0:6f:10:11:9f:4a:ad:d7:64:76:00:
85:53:5a:99:bc:cd:75:34:52:39:16:ea:e3:39:2d:df:82:f0:
b7:ac:86:fc:3d:5f:f9:d1:6b:36:3b:66:59:5f:c4:b6:3e:7e:
cd:89:aa:93:b1:30:67:03:1e:3e:3f:87:77:ca:f2:da:35:e1:
b0:7b:59:0c:b7:d1:0d:8f:bc:e8:0e:e3:5f:e5:96:82:53:fa:
c8:1b:1b:d7:88:32:25:13:18:00:c7:d8:63:a1:df:eb:09:fe:
e1:0e:b8:9e:45:17:d1:4f:72:e5:7a:ac:3e:d1:c4:f9:3d:72:
98:8e:51:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:11 2023 by rpki-client on console-ams.rpki-client.org