Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/xrs0WfQnbfg4mnusUyThy3nByII.roa
File: xrs0WfQnbfg4mnusUyThy3nByII.roa (raw, json)
Hash identifier: n5Hvh/BnodhbmsoIGUjl18bZZohZy/RHTr3AJ7ne+fs=
Subject key identifier: C6:BB:34:59:F4:27:6D:F8:38:9A:7B:AC:53:24:E1:CB:79:C1:C8:82
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018320CC0002CA3520A7B4B947BAC57350E3
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/xrs0WfQnbfg4mnusUyThy3nByII.roa
Signing time: Fri 09 Sep 2022 05:49:43 +0000
ROA not before: Fri 09 Sep 2022 05:49:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142430
IP address blocks: 163.5.221.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:20:cc:00:02:ca:35:20:a7:b4:b9:47:ba:c5:73:50:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 9 05:49:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c6bb3459f4276df8389a7bac5324e1cb79c1c882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f4:54:ea:ad:53:48:e1:65:7a:b1:cf:75:46:
ad:ff:a8:c0:bb:42:8b:b2:cc:de:08:3e:98:3a:ec:
79:c7:0b:53:3e:a2:80:0e:c0:7f:a1:b1:33:3f:21:
04:30:d3:08:b0:bd:c3:99:16:33:82:4a:78:cc:f5:
b2:f8:ba:8c:d2:10:88:50:56:8d:19:35:4a:f0:6e:
0e:a4:b8:e4:22:a5:6a:b4:29:1e:bf:b1:84:61:3c:
52:f9:c8:e2:32:a5:fd:a3:3e:d2:37:ec:31:43:be:
b5:f2:18:01:73:b4:6c:c1:a1:49:94:e7:a5:3a:78:
23:52:f8:b8:0e:33:3a:7d:c5:b7:d9:a9:90:e2:6f:
a3:58:fd:7b:ac:ac:70:9a:72:a8:aa:54:6a:14:82:
47:d1:a2:2a:4f:df:6e:2e:bd:33:30:e9:88:ab:c7:
cb:d3:f4:1e:80:d6:17:d3:1e:54:a0:fe:d4:88:0c:
5e:d8:c4:eb:ac:cd:6e:03:77:56:78:82:a2:23:c0:
07:62:f0:48:bc:2f:8a:87:fb:cb:59:9a:a1:10:66:
a9:f9:1d:21:1f:22:dc:72:0e:da:cd:77:f9:48:bc:
c4:11:26:50:3d:86:10:80:d0:7e:bb:de:99:2c:d2:
f2:51:b6:26:25:e9:3b:26:ad:a9:31:ed:7d:ef:9a:
2f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:BB:34:59:F4:27:6D:F8:38:9A:7B:AC:53:24:E1:CB:79:C1:C8:82
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/xrs0WfQnbfg4mnusUyThy3nByII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.221.0/24
Signature Algorithm: sha256WithRSAEncryption
16:15:31:83:d9:34:ff:04:08:3c:4f:bd:30:1e:dc:34:55:57:
ea:04:9a:26:bc:da:fb:d0:37:25:9e:fb:7a:99:5b:99:e1:a1:
f5:d4:60:41:5e:5e:42:d7:1a:85:2c:a8:eb:6e:3c:8e:00:c2:
73:f0:55:58:7e:f1:fd:0d:14:7f:4b:53:b2:de:a8:64:49:c9:
29:ac:0f:01:4e:2e:b2:4e:c3:0e:91:6f:27:6f:b2:57:36:89:
4a:b1:37:3d:9a:88:89:59:5f:16:e2:71:96:24:2f:94:ce:9b:
a8:35:41:e4:09:c3:bd:d2:f5:f2:a6:b4:de:16:42:1a:33:2f:
d4:fa:5f:8a:67:1b:23:32:50:7b:27:f1:63:bc:36:66:a5:48:
84:16:19:94:b9:fa:8a:4b:21:bf:ae:bb:a3:69:8b:e5:9b:80:
27:b8:12:30:bc:91:6a:52:42:b1:02:d7:13:aa:02:0c:2d:5c:
c6:de:40:ae:76:54:84:45:5d:e9:7f:c2:be:21:b4:45:c8:36:
e1:ca:0b:9e:0a:4b:4c:ad:df:e3:53:5b:1c:f6:52:50:f1:f7:
8f:61:42:04:22:01:95:f9:88:37:08:72:c7:a5:6d:d0:20:e0:
14:ac:e0:a3:bc:67:f9:8c:f4:e4:ee:95:c3:3f:ef:5b:ec:0e:
34:08:63:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:23 2023 by rpki-client on console-fra.rpki-client.org