Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/CPL8YaBpOjAzvgDeRvu5ZjWc2GE.roa
File: CPL8YaBpOjAzvgDeRvu5ZjWc2GE.roa (raw, json)
Hash identifier: EUQtMTfzPm135qbprlzFNGKk2jVpWW0EQKzG4VO8jx0=
Subject key identifier: 08:F2:FC:61:A0:69:3A:30:33:BE:00:DE:46:FB:B9:66:35:9C:D8:61
Certificate issuer: /CN=373b47a3cee79982adb170341d02026027332023
Certificate serial: 197D3FB5
Authority key identifier: 37:3B:47:A3:CE:E7:99:82:AD:B1:70:34:1D:02:02:60:27:33:20:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NztHo87nmYKtsXA0HQICYCczICM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/CPL8YaBpOjAzvgDeRvu5ZjWc2GE.roa
Signing time: Sat 01 Jan 2022 08:55:04 +0000
ROA not before: Sat 01 Jan 2022 08:55:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200568
IP address blocks: 5.159.22.0/23 maxlen: 23
5.159.22.0/24 maxlen: 24
5.159.23.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 427638709 (0x197d3fb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=373b47a3cee79982adb170341d02026027332023
Validity
Not Before: Jan 1 08:55:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=08f2fc61a0693a3033be00de46fbb966359cd861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:55:6d:d3:ef:2a:53:56:e5:3e:48:23:c2:72:
72:74:16:d8:f2:d0:db:f8:03:db:d8:49:b2:86:48:
b3:3b:05:f7:65:81:b4:6e:c9:d2:bb:fa:d1:89:b0:
dc:fb:51:3a:b0:ad:e3:d1:2e:c8:84:d6:6a:63:81:
d1:09:1e:6f:1f:40:79:7a:b6:59:b0:32:83:ce:3e:
2e:f6:ca:bc:95:b7:0c:bc:6c:d3:78:af:d5:49:0c:
83:0b:d5:8d:2e:b3:97:62:58:f6:71:36:7b:fd:a9:
41:16:ff:1a:cd:0e:03:30:2a:b2:9a:a3:a6:6f:a3:
7b:00:26:ab:2b:25:87:c6:c1:3e:2e:4a:c5:e4:99:
7b:09:fb:07:d2:92:1c:64:60:d1:b8:5e:7b:c9:70:
fe:5a:de:bc:23:35:e8:77:fa:6a:36:5a:9e:e5:3c:
3c:7c:b7:23:a9:46:e1:34:c1:b9:8f:3c:3d:cf:58:
4e:5c:4a:b6:1e:ff:86:00:84:f6:52:15:33:21:50:
96:1d:e2:78:e9:e2:30:26:b8:e8:0e:06:c6:e6:46:
66:0e:3b:57:12:8f:a8:df:af:45:6f:4a:d3:0b:e6:
b8:26:17:78:e4:ed:a0:d9:0b:fc:f3:8c:86:78:a7:
8a:89:3f:d9:60:d1:26:34:76:55:09:2a:20:87:25:
4e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F2:FC:61:A0:69:3A:30:33:BE:00:DE:46:FB:B9:66:35:9C:D8:61
X509v3 Authority Key Identifier:
keyid:37:3B:47:A3:CE:E7:99:82:AD:B1:70:34:1D:02:02:60:27:33:20:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NztHo87nmYKtsXA0HQICYCczICM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/CPL8YaBpOjAzvgDeRvu5ZjWc2GE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.159.22.0/23
Signature Algorithm: sha256WithRSAEncryption
03:ff:00:a3:8c:5e:ab:e3:e9:a7:7d:0b:04:4b:b5:fa:89:8a:
28:b5:ed:04:16:7c:53:70:fb:53:8c:4b:d5:0a:90:47:a9:e2:
7d:9b:10:c9:04:d8:fb:43:d8:ed:91:4c:03:00:ad:3e:4e:fc:
f0:5a:14:99:08:47:1d:4b:37:6b:17:a9:56:6f:f7:66:3c:12:
82:6e:2d:74:d9:20:04:ff:7e:fc:6b:a8:f0:b7:5c:b2:2c:ef:
24:f8:66:f2:ad:ad:cc:66:fd:c1:be:04:f5:c9:7e:6a:01:cc:
53:b0:c2:ad:93:5c:cb:da:68:88:76:23:8c:e5:9d:3a:a5:33:
64:0a:0f:a9:6b:4e:6c:b8:0c:dc:6e:f3:38:60:a5:de:f8:16:
3c:5f:42:7d:55:d0:e7:ce:d3:3f:e0:1d:d7:35:42:29:38:3c:
2c:0b:3b:72:d4:7d:1f:81:b7:02:43:b1:5a:02:01:36:00:73:
de:04:44:71:01:70:46:21:9e:6b:bb:bc:13:26:14:ce:d1:cf:
43:05:ad:04:17:6a:cb:fa:01:09:81:b9:09:13:ed:2b:c6:9c:
28:cc:4f:df:83:0f:5d:28:a0:8f:ea:53:7b:5e:87:90:01:5a:
b3:15:d5:a5:b1:9d:e4:18:7b:46:b7:fb:42:f8:cb:79:df:66:
21:f3:05:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:57 2024 by rpki-client on console-ams.rpki-client.org