Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/5beQQjS6Z2_q1YYUzlVhCpClaOM.roa
File: 5beQQjS6Z2_q1YYUzlVhCpClaOM.roa (raw, json)
Hash identifier: oJoYXMIJ9FT9x2rjbLlM0ecyytA/J5SNqjkesWxM/G8=
Subject key identifier: E5:B7:90:42:34:BA:67:6F:EA:D5:86:14:CE:55:61:0A:90:A5:68:E3
Certificate issuer: /CN=86022e162f6e6b9755ce4ce845120e62939506f7
Certificate serial: 05738F4B
Authority key identifier: 86:02:2E:16:2F:6E:6B:97:55:CE:4C:E8:45:12:0E:62:93:95:06:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgIuFi9ua5dVzkzoRRIOYpOVBvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/5beQQjS6Z2_q1YYUzlVhCpClaOM.roa
Signing time: Sat 01 Jan 2022 12:05:28 +0000
ROA not before: Sat 01 Jan 2022 12:05:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61049
IP address blocks: 83.136.52.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91459403 (0x5738f4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86022e162f6e6b9755ce4ce845120e62939506f7
Validity
Not Before: Jan 1 12:05:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e5b7904234ba676fead58614ce55610a90a568e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:71:05:c9:90:7a:2b:e4:d6:b1:e2:6a:da:a5:
c4:53:19:e3:54:e3:da:1b:05:2d:92:e6:f1:1b:2e:
a3:68:6e:a6:c3:fc:02:b7:07:42:54:61:bf:c3:6e:
e3:f6:e4:36:5a:35:61:a6:4d:80:2a:13:f1:60:59:
86:f2:8c:e4:e6:10:7a:80:05:40:ad:b5:e8:58:44:
3b:e3:68:b1:2b:5a:21:15:4d:b0:54:95:2f:10:49:
be:4c:42:d2:d5:f5:21:8a:f0:32:2b:78:b4:af:2e:
21:d2:4f:89:c9:29:a1:00:ba:53:2b:ba:c0:c9:6f:
e4:a2:e0:85:13:4a:82:67:24:9e:25:f1:a5:6a:b0:
f9:29:47:16:bc:5b:70:3b:52:9f:ae:9b:21:f9:03:
d8:51:c9:e6:0b:a4:08:50:8b:d6:1b:36:53:e5:07:
cb:eb:e2:0d:df:b0:ea:fb:de:bb:d7:bc:2c:74:1f:
a7:83:7b:5c:ae:c9:bc:98:3c:18:f3:7b:69:91:84:
c0:cf:89:ef:29:ca:a5:21:f9:bc:e8:33:0c:af:6a:
37:f0:a8:b0:96:bf:40:b8:5a:1e:80:51:e6:e3:7b:
69:7f:80:5a:76:6f:08:86:81:24:e0:50:26:25:b6:
7a:11:75:5a:38:8d:de:39:70:43:ca:cb:50:5a:ab:
a3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B7:90:42:34:BA:67:6F:EA:D5:86:14:CE:55:61:0A:90:A5:68:E3
X509v3 Authority Key Identifier:
keyid:86:02:2E:16:2F:6E:6B:97:55:CE:4C:E8:45:12:0E:62:93:95:06:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgIuFi9ua5dVzkzoRRIOYpOVBvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/5beQQjS6Z2_q1YYUzlVhCpClaOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.52.0/22
Signature Algorithm: sha256WithRSAEncryption
be:47:6f:ba:2a:c4:fb:be:30:6e:f6:3d:7d:b2:ba:22:ab:97:
ab:fc:ed:7a:4a:b0:75:e9:cc:69:c2:7a:2b:1a:cc:9d:cc:a0:
af:ba:e1:f3:bb:f8:7b:a3:9d:8d:6f:45:07:87:48:f3:71:24:
1e:a4:f3:f5:fb:75:d2:97:51:5f:4b:f1:b0:7a:b0:61:d0:4b:
fc:87:15:c9:58:f7:5a:3d:b5:a0:59:a0:7e:52:ed:2f:0f:c5:
93:a2:02:63:81:2a:b5:d8:d6:3e:f5:68:f8:fa:fd:e7:4c:e9:
e8:3f:e5:e7:30:bf:e7:4f:68:6c:e5:2a:22:a8:98:ba:dc:55:
ab:40:e8:03:58:31:29:0a:25:84:6c:bb:f2:70:93:71:b5:4a:
da:22:bd:96:05:85:79:7c:15:1d:95:a0:57:d3:43:55:3c:f4:
36:0d:bb:f2:aa:df:56:e7:b1:2f:fa:a7:ff:e4:a8:a3:92:d4:
4e:8b:4f:7d:b7:53:9b:fa:39:a6:44:a3:e1:6d:1f:f2:38:d7:
32:b5:23:97:5e:20:76:68:52:5b:31:29:69:01:3a:58:13:3a:
56:2c:31:fe:d9:31:fe:dc:f4:1e:cf:46:0b:3a:7c:c0:df:2c:
ed:a7:2f:eb:38:dd:67:53:46:03:78:4d:31:cc:b2:ed:61:d6:
d8:5a:be:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:43 2024 by rpki-client on console-ams.rpki-client.org