Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/B0tP2G2CB2Q7ncyQgjHyIxf_x0s.roa
File: B0tP2G2CB2Q7ncyQgjHyIxf_x0s.roa (raw, json)
Hash identifier: EoEcW9BpHmaFqxSSx4JqzOopkTSuqgdSWSV8aDfRtMc=
Subject key identifier: 07:4B:4F:D8:6D:82:07:64:3B:9D:CC:90:82:31:F2:23:17:FF:C7:4B
Certificate issuer: /CN=1f46f57735a4e63dbef848ee0d9d199e215f8304
Certificate serial: 19B18293
Authority key identifier: 1F:46:F5:77:35:A4:E6:3D:BE:F8:48:EE:0D:9D:19:9E:21:5F:83:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/B0tP2G2CB2Q7ncyQgjHyIxf_x0s.roa
Signing time: Sat 11 Jun 2022 06:11:02 +0000
ROA not before: Sat 11 Jun 2022 06:11:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212317
IP address blocks: 5.78.0.0/16 maxlen: 24
2a01:4ff:100::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 431063699 (0x19b18293)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f46f57735a4e63dbef848ee0d9d199e215f8304
Validity
Not Before: Jun 11 06:11:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=074b4fd86d8207643b9dcc908231f22317ffc74b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:73:d2:36:87:8f:c9:a4:ed:de:57:47:de:96:
10:bf:85:99:46:83:fd:c9:ba:d1:e2:13:fd:21:f3:
e4:e4:d1:08:d6:c9:6d:18:b4:d8:9f:e1:49:87:aa:
af:88:b5:dd:23:0c:b2:dd:5e:03:e9:40:6e:5f:0c:
c2:3d:c8:f4:1e:25:37:7f:77:5b:84:db:e8:be:87:
10:7b:c8:db:46:e6:81:c2:8d:dc:fb:80:bd:52:bf:
71:e4:38:7a:21:b2:3f:00:bd:c7:90:47:78:03:1a:
4e:f5:64:ee:14:c6:fb:df:14:29:cc:bc:df:73:5c:
b1:fe:d9:b7:eb:90:f5:99:88:4c:5a:c7:a7:38:2d:
d3:7c:a1:8f:dc:d2:e2:aa:d7:8e:0e:91:d7:5f:1f:
08:7d:54:ac:18:31:54:13:0b:d1:62:7f:4b:75:4b:
f1:c6:dd:9d:57:3a:e8:0c:dd:33:86:cd:1a:5c:c0:
86:0d:6e:70:b5:9e:76:7e:38:87:00:d6:f2:fd:6d:
37:8e:0d:ee:ec:02:47:ed:2b:72:32:41:21:77:0f:
24:ee:1a:8f:31:85:96:e6:ad:38:31:94:57:d7:37:
45:33:cb:56:4e:5d:f4:c3:31:3b:d1:18:3b:3d:16:
cb:5d:fe:92:e6:68:a6:4f:54:e2:54:d5:43:8b:5d:
e0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:4B:4F:D8:6D:82:07:64:3B:9D:CC:90:82:31:F2:23:17:FF:C7:4B
X509v3 Authority Key Identifier:
keyid:1F:46:F5:77:35:A4:E6:3D:BE:F8:48:EE:0D:9D:19:9E:21:5F:83:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/B0tP2G2CB2Q7ncyQgjHyIxf_x0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.78.0.0/16
IPv6:
2a01:4ff:100::/40
Signature Algorithm: sha256WithRSAEncryption
cd:4a:30:e0:f8:86:66:32:f5:f8:26:b9:d0:d0:20:4c:db:fa:
b3:ae:c9:d7:95:0d:d7:25:5e:eb:9b:75:1d:34:3e:84:3a:61:
ca:d3:ba:b2:a0:dd:22:cd:18:c1:20:a7:68:52:32:59:18:aa:
64:c6:13:02:e5:84:7d:40:9e:ed:96:01:3d:00:5e:c0:d1:ca:
12:3b:54:cd:9b:b6:f6:34:d8:a9:88:d0:08:08:70:70:b4:54:
39:46:af:bd:48:cd:41:50:28:df:cb:10:4c:f7:28:d9:d2:45:
82:9d:d8:40:22:30:fb:70:29:af:05:88:0b:56:99:72:9f:aa:
8b:af:7f:da:95:61:7c:07:0c:b1:a1:ff:55:df:8f:be:7f:97:
56:3d:20:89:df:df:21:03:2d:ef:f1:ff:61:13:31:b2:1f:91:
69:09:3a:cb:97:33:16:d6:b2:c7:dc:9b:a1:c3:1f:7d:7b:91:
df:f6:2e:4b:11:b5:16:9d:d5:63:99:c8:79:dd:32:69:d0:cb:
a0:9e:e9:86:52:cd:a0:a2:06:32:39:50:a8:12:4d:11:e2:45:
4e:c3:ad:a7:bc:38:0f:69:2b:ce:da:5a:e9:36:e2:a5:dc:86:
7b:84:52:45:3a:fa:9b:1e:1e:c2:11:04:cd:2b:8d:dc:4b:8f:
8c:03:82:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:22 2024 by rpki-client on console-ams.rpki-client.org