Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/1ABmE9173k3Kc0h81zHpTuL2cdk.roa
File: 1ABmE9173k3Kc0h81zHpTuL2cdk.roa (raw, json)
Hash identifier: j9VQmmUpdZP4qTGAd4ky1FlHxxNgj80rMoVLTUy9p3o=
Subject key identifier: D4:00:66:13:DD:7B:DE:4D:CA:73:48:7C:D7:31:E9:4E:E2:F6:71:D9
Certificate issuer: /CN=7de98f48e988790d0e0793537941b413d2e60306
Certificate serial: 094E04E5
Authority key identifier: 7D:E9:8F:48:E9:88:79:0D:0E:07:93:53:79:41:B4:13:D2:E6:03:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/femPSOmIeQ0OB5NTeUG0E9LmAwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/1ABmE9173k3Kc0h81zHpTuL2cdk.roa
Signing time: Sat 01 Jan 2022 02:54:53 +0000
ROA not before: Sat 01 Jan 2022 02:54:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35762
IP address blocks: 5.252.44.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156108005 (0x94e04e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7de98f48e988790d0e0793537941b413d2e60306
Validity
Not Before: Jan 1 02:54:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d4006613dd7bde4dca73487cd731e94ee2f671d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d1:a6:03:3c:73:d6:90:68:b0:15:80:28:d4:
91:6a:4f:50:3f:c3:53:71:76:5a:88:94:bf:5b:43:
85:5e:ad:a4:ba:4a:d9:2e:4d:13:3f:1d:7e:e3:e6:
a0:cb:c4:9b:94:ec:ae:56:e3:f0:c2:dd:01:6b:0d:
d3:8a:d4:cf:70:6c:cd:31:1a:88:e7:92:7b:13:b3:
33:57:81:34:6f:f0:1e:84:ec:b6:2c:79:11:9e:d6:
95:fa:df:f9:b2:0c:85:53:41:7c:b3:11:3d:9c:96:
9b:e0:63:97:43:1c:47:73:8e:59:6d:04:95:48:67:
34:7e:8b:1b:c9:ed:7a:79:8d:42:68:a7:71:ce:4f:
ba:c2:18:58:4e:e9:45:73:d7:03:a7:19:fd:c3:ad:
ea:2d:96:7c:c7:92:3a:55:2d:39:28:a0:54:30:14:
ab:91:c8:72:4b:af:67:69:fc:c5:77:c7:b8:94:e6:
ac:71:92:c4:f6:bd:b5:80:a0:e5:6d:0b:b6:7c:6e:
45:5d:ed:42:d6:85:70:ce:0d:7b:f8:16:c2:c7:e2:
44:2b:8e:ef:04:6d:2a:41:8c:36:1c:30:e0:34:bb:
34:f5:eb:8c:81:aa:19:9e:22:ab:f2:ed:a0:a4:d0:
3a:de:8c:5c:13:ff:6f:06:65:3b:0f:d9:a3:c6:92:
d5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:00:66:13:DD:7B:DE:4D:CA:73:48:7C:D7:31:E9:4E:E2:F6:71:D9
X509v3 Authority Key Identifier:
keyid:7D:E9:8F:48:E9:88:79:0D:0E:07:93:53:79:41:B4:13:D2:E6:03:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/femPSOmIeQ0OB5NTeUG0E9LmAwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/1ABmE9173k3Kc0h81zHpTuL2cdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.44.0/22
Signature Algorithm: sha256WithRSAEncryption
13:1d:e9:08:b9:2d:82:26:3f:d1:6c:5b:bc:f9:4a:6f:b2:0b:
73:8a:d1:1c:9a:15:74:a8:e8:1e:3f:1f:11:42:27:07:1e:88:
46:7c:a7:48:c0:36:c5:08:d3:bb:0d:8c:94:63:fc:5b:0e:41:
e1:2e:13:f3:53:89:08:f2:14:8e:41:cd:a0:bf:97:c9:ef:c3:
74:60:d3:ed:2f:31:ad:1c:07:c0:2f:2c:81:a6:e7:93:02:c5:
0b:b3:2d:ae:a6:ce:6b:3f:90:bd:4f:da:87:48:81:e6:08:98:
d7:3d:3e:29:fd:90:a6:b3:79:d4:78:de:c9:02:9e:41:f4:65:
09:06:b0:7f:a6:ae:20:0b:c6:c3:7d:f6:a8:ed:87:b0:3c:60:
6b:94:36:0d:85:a4:04:34:a7:48:8f:31:12:02:7f:82:e0:c7:
8d:56:78:b4:cc:25:0c:05:82:6f:47:29:5a:11:81:11:78:5a:
8c:4b:55:2c:bd:cc:00:f6:13:90:7a:09:bb:fe:78:6d:65:ae:
14:d3:09:eb:77:2d:b0:ef:36:3e:fe:f1:63:71:a6:04:2f:42:
b2:b0:f3:72:49:e3:36:ea:9f:3e:4a:fd:9a:13:10:47:76:09:
b4:bc:b4:49:95:26:f7:8e:36:df:ba:55:3f:3e:79:b3:4d:51:
bb:b3:ef:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:47 2024 by rpki-client on console-ams.rpki-client.org