Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/nIuIpgu8ExYLRU2qlz_GVIstahA.roa
File: nIuIpgu8ExYLRU2qlz_GVIstahA.roa (raw, json)
Hash identifier: 8sBYVlhrjhl7h02F+66GH2NZzOpx6IVDk6kKf93pS3E=
Subject key identifier: 9C:8B:88:A6:0B:BC:13:16:0B:45:4D:AA:97:3F:C6:54:8B:2D:6A:10
Certificate issuer: /CN=b536466d036852e2f7376ade138046143b994cc3
Certificate serial: 237EA438
Authority key identifier: B5:36:46:6D:03:68:52:E2:F7:37:6A:DE:13:80:46:14:3B:99:4C:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTZGbQNoUuL3N2reE4BGFDuZTMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/nIuIpgu8ExYLRU2qlz_GVIstahA.roa
Signing time: Sat 01 Jan 2022 03:51:35 +0000
ROA not before: Sat 01 Jan 2022 03:51:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199205
IP address blocks: 5.254.184.0/21 maxlen: 21
185.119.160.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 595502136 (0x237ea438)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b536466d036852e2f7376ade138046143b994cc3
Validity
Not Before: Jan 1 03:51:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c8b88a60bbc13160b454daa973fc6548b2d6a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ef:1d:37:93:3e:35:67:37:ce:89:8e:5d:ef:
65:d1:65:7d:76:62:7c:b3:af:5d:8e:87:33:11:35:
ce:20:9c:66:ec:af:a8:90:06:14:03:8c:aa:6b:b4:
73:9b:25:8a:ac:3b:87:b0:fd:ef:eb:3a:04:b3:52:
f6:30:d8:54:b2:09:fe:cc:6c:28:60:0d:c3:dc:42:
07:18:26:31:1a:c6:dc:72:b7:13:85:3d:10:9e:6a:
80:58:38:8e:97:aa:93:88:c0:a0:17:26:d3:0f:0a:
47:5b:e8:5b:0d:87:fb:0e:ed:32:dc:02:b4:ad:61:
ae:0f:6c:ce:67:b3:74:3c:78:29:6b:d6:67:ed:3a:
26:96:c3:6f:4f:e7:a7:a7:af:b0:83:64:e3:18:91:
c0:ba:c7:13:8a:d9:2b:b0:55:a7:74:7a:9f:0f:06:
6f:fd:97:d6:d3:66:91:9e:6e:0f:ef:0b:e7:d5:c0:
e6:e5:81:05:58:a2:41:52:8e:76:a1:72:87:e9:54:
c7:56:92:d9:96:3b:9c:57:de:4a:3a:3e:a3:78:73:
25:f9:15:24:24:e0:09:93:eb:b9:65:ff:0c:89:df:
eb:8f:83:32:36:98:5a:94:cc:8b:cd:97:d3:89:a7:
b5:43:1b:c2:59:b7:bc:cd:1b:e3:0e:58:18:24:fd:
7a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:8B:88:A6:0B:BC:13:16:0B:45:4D:AA:97:3F:C6:54:8B:2D:6A:10
X509v3 Authority Key Identifier:
keyid:B5:36:46:6D:03:68:52:E2:F7:37:6A:DE:13:80:46:14:3B:99:4C:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTZGbQNoUuL3N2reE4BGFDuZTMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/nIuIpgu8ExYLRU2qlz_GVIstahA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.254.184.0/21
185.119.160.0/22
Signature Algorithm: sha256WithRSAEncryption
37:2f:30:07:97:b3:62:0e:d3:6a:18:02:fe:ed:10:c0:e5:b6:
f5:34:c4:c9:ac:b6:21:99:98:8b:2a:72:c9:34:94:69:29:7f:
09:2c:7b:d5:90:39:58:10:84:38:d0:80:8c:04:48:19:be:49:
97:18:ec:93:64:55:01:bc:41:76:40:70:b1:4c:87:2d:65:7b:
d0:de:75:cb:8b:b7:c4:d3:8e:ac:66:af:3b:91:d5:b6:d4:e9:
76:e8:96:e3:f0:51:40:7f:dd:dc:d5:d1:28:c4:aa:d3:9a:ea:
41:c3:6c:ed:3d:01:a7:f2:4b:0e:e5:b5:b8:f6:b2:d0:00:8f:
1d:c3:89:7f:cb:01:eb:f6:a6:49:32:8f:40:fa:b6:cd:bb:f1:
d7:ba:a0:ae:4b:df:9b:37:58:8a:98:05:e6:e1:0e:99:32:9b:
9a:dd:35:16:65:d5:c2:c1:73:e3:91:4f:b3:b2:22:fa:07:85:
68:cc:b6:11:84:e0:e2:55:04:13:33:88:66:7c:d2:8a:11:0f:
80:d4:50:ee:81:02:7b:45:e3:dc:99:65:91:fd:7d:bd:c4:10:
73:7c:a6:8b:c2:8c:fb:2c:ef:b0:28:ce:89:e9:1c:73:9e:77:
69:94:4c:75:c8:a4:16:7f:f6:d8:69:e2:62:f9:a1:cb:e4:31:
c2:f3:9f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:11 2024 by rpki-client on console-fra.rpki-client.org