Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/jV0WSwticUKz6_mtuGTJH55X-Y4.roa
File: jV0WSwticUKz6_mtuGTJH55X-Y4.roa (raw, json)
Hash identifier: k20HUxtubzNERIr2a/HLEZxVsyieM2eBwy8ldNjtU1k=
Subject key identifier: 8D:5D:16:4B:0B:62:71:42:B3:EB:F9:AD:B8:64:C9:1F:9E:57:F9:8E
Certificate issuer: /CN=e2d7b7eb8f47e5277912ff058cfed7d899fc69b9
Certificate serial: 0585575B
Authority key identifier: E2:D7:B7:EB:8F:47:E5:27:79:12:FF:05:8C:FE:D7:D8:99:FC:69:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4te3649H5Sd5Ev8FjP7X2Jn8abk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/jV0WSwticUKz6_mtuGTJH55X-Y4.roa
Signing time: Sat 01 Jan 2022 15:02:29 +0000
ROA not before: Sat 01 Jan 2022 15:02:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207813
IP address blocks: 5.252.148.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92624731 (0x585575b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d7b7eb8f47e5277912ff058cfed7d899fc69b9
Validity
Not Before: Jan 1 15:02:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8d5d164b0b627142b3ebf9adb864c91f9e57f98e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:18:41:d9:20:4b:5c:46:31:a9:2d:76:10:fc:
ec:50:4a:1e:f8:ad:fe:4d:26:f3:28:b0:d9:28:5f:
cc:21:7c:5a:8a:88:b9:b9:0a:50:26:3b:89:d1:22:
b3:b9:4e:54:28:a2:2d:51:67:73:6f:21:99:f2:a1:
d4:a1:37:8a:03:f3:7f:f1:8f:72:19:79:49:5e:ef:
fa:cf:d0:8b:80:6c:68:5d:56:83:92:88:e3:fe:dc:
2f:12:37:75:f5:6c:9d:67:69:dc:10:c2:3e:01:b6:
1d:f3:d7:42:ad:b0:35:56:fd:87:eb:3e:5b:2c:30:
33:d3:12:81:67:72:b7:b8:04:1d:59:eb:8a:fa:65:
a7:cc:37:99:0f:ae:fb:3f:85:c1:e9:85:38:81:84:
ec:52:cc:4f:b2:9a:4f:f6:a2:25:ae:24:c5:d9:be:
e7:3c:51:22:61:af:e9:7d:69:19:36:b2:22:67:f8:
06:7c:de:03:e7:7d:ce:e3:4e:4e:c0:23:f5:67:fc:
c0:77:2d:bf:5d:d8:d5:6a:c3:ad:82:dd:34:a3:b5:
21:d1:50:5e:24:17:ed:34:05:f6:bf:1b:ff:3d:c4:
fe:7e:6c:fe:07:e0:5c:c9:51:0e:5f:8e:a1:b3:61:
35:94:0d:71:2d:2a:45:85:ee:fd:ef:df:7b:27:d3:
65:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:5D:16:4B:0B:62:71:42:B3:EB:F9:AD:B8:64:C9:1F:9E:57:F9:8E
X509v3 Authority Key Identifier:
keyid:E2:D7:B7:EB:8F:47:E5:27:79:12:FF:05:8C:FE:D7:D8:99:FC:69:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4te3649H5Sd5Ev8FjP7X2Jn8abk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/jV0WSwticUKz6_mtuGTJH55X-Y4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/4te3649H5Sd5Ev8FjP7X2Jn8abk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.148.0/22
Signature Algorithm: sha256WithRSAEncryption
49:ad:da:78:5d:60:66:6c:65:8c:f5:ba:7d:26:ec:e9:5f:e9:
7f:b2:6e:55:3d:4f:03:91:3b:21:05:41:04:75:dc:7a:ac:bf:
78:00:dd:0e:d4:d2:43:c4:0d:21:22:be:9b:d2:84:4d:31:1c:
24:c1:c1:fd:2f:d2:83:a4:c9:2f:fc:56:0d:b0:93:3d:08:c1:
93:3c:a4:a4:c1:d7:f6:62:d1:02:d2:32:ea:f1:98:f5:9c:cd:
3e:09:c6:76:9d:83:ab:40:0d:17:08:1d:8e:21:28:a3:37:fa:
cc:f2:26:55:01:cc:28:ee:34:39:8e:60:d4:14:d2:c0:22:fc:
f9:b5:d8:66:5c:36:ff:d5:f7:f2:7f:b9:b6:a7:c7:54:4e:2e:
76:d6:8a:75:84:2e:9a:43:0a:92:dc:5d:c0:2b:84:31:cf:83:
4b:66:45:ed:29:8d:9d:a7:30:80:e6:f9:c0:69:de:71:fb:d7:
9d:91:5e:2f:df:0e:c3:40:ed:99:47:bd:b7:5b:c7:1c:d9:a6:
47:73:98:e1:65:37:f5:7b:b1:b6:7f:8d:29:ad:31:21:ee:a2:
f8:e7:40:37:b9:d1:d4:03:15:06:c5:52:b1:9f:ea:9d:f6:a6:
ff:ca:dd:f1:1d:f7:d9:95:20:d1:6c:e6:86:b5:92:a6:5d:f8:
e9:e5:83:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:15 2024 by rpki-client on console-ams.rpki-client.org