Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/5VWOc5jVWgb7Su_FqjP3gABMTsM.roa
File: 5VWOc5jVWgb7Su_FqjP3gABMTsM.roa (raw, json)
Hash identifier: jwT1p66CJ0lUQKJGw07H557MIQeBMIOwKzVzn3Ys6PA=
Subject key identifier: E5:55:8E:73:98:D5:5A:06:FB:4A:EF:C5:AA:33:F7:80:00:4C:4E:C3
Certificate issuer: /CN=af0dc12b0f1b533d8d04ec6117d6b9e512fcaa9f
Certificate serial: 05272FC4
Authority key identifier: AF:0D:C1:2B:0F:1B:53:3D:8D:04:EC:61:17:D6:B9:E5:12:FC:AA:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/5VWOc5jVWgb7Su_FqjP3gABMTsM.roa
Signing time: Thu 05 May 2022 07:07:17 +0000
ROA not before: Thu 05 May 2022 07:07:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34762
IP address blocks: 213.158.94.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86454212 (0x5272fc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af0dc12b0f1b533d8d04ec6117d6b9e512fcaa9f
Validity
Not Before: May 5 07:07:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e5558e7398d55a06fb4aefc5aa33f780004c4ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8c:3e:f7:69:ca:94:d4:81:05:8c:85:dd:34:
7c:22:37:d4:b9:df:63:d0:b9:fc:b5:33:0f:5b:ba:
0e:a5:03:77:1a:f2:33:51:e8:b9:2f:25:20:d0:ca:
e2:97:20:f9:1d:79:61:fc:63:2e:cb:5b:5f:27:2e:
e7:ac:6c:79:5c:dc:39:b9:c2:34:27:dc:c1:4a:e3:
1c:06:7d:5c:fb:d9:4b:80:9b:90:fb:c6:e4:8e:0b:
19:5d:da:ac:2d:b7:2b:c6:c4:40:06:2d:c7:0f:29:
b5:44:88:1c:44:3c:bd:a5:f8:e9:82:4e:53:f9:6b:
5c:82:55:ea:05:93:26:4f:6b:bf:c9:d8:74:4e:af:
6a:39:18:55:e0:36:e5:06:e1:ed:ad:9a:08:f1:4c:
7a:41:3a:c2:a0:cd:7a:06:49:e5:d3:39:cb:9b:32:
76:3d:2c:d1:19:cf:ce:b0:7d:45:aa:99:3c:fd:a2:
c7:15:08:5a:19:03:55:9f:9b:ee:ae:35:5e:7f:47:
8d:0d:58:64:85:78:e5:dc:33:8c:40:dd:c9:40:f8:
dc:18:d4:8b:44:21:ee:ec:cd:fd:be:c5:47:63:48:
53:c7:9d:f4:d6:3d:16:f1:f6:48:e6:42:54:e6:78:
58:21:2e:43:7d:32:df:ff:de:4c:d3:50:03:e6:b7:
a1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:55:8E:73:98:D5:5A:06:FB:4A:EF:C5:AA:33:F7:80:00:4C:4E:C3
X509v3 Authority Key Identifier:
keyid:AF:0D:C1:2B:0F:1B:53:3D:8D:04:EC:61:17:D6:B9:E5:12:FC:AA:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/5VWOc5jVWgb7Su_FqjP3gABMTsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.158.94.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:96:a8:68:bd:fb:83:45:a7:22:ea:19:65:b3:c6:a5:e4:dc:
75:c3:b4:e7:eb:cd:b4:75:6e:13:c2:1c:fe:94:54:a6:5f:55:
62:65:b5:35:d0:78:c4:6a:72:19:85:e4:fd:e6:11:73:dd:b4:
ec:ff:f0:23:b0:04:4a:9f:db:10:4c:5b:17:65:4f:f4:de:c4:
01:b4:e0:c4:51:0a:10:75:d0:d5:c6:f5:98:89:b1:b2:34:b4:
94:5e:a0:79:96:8d:53:4d:e5:48:f3:01:60:52:8c:ea:ce:52:
71:a0:2d:20:f8:3c:62:71:26:e7:4d:f0:f6:f8:c8:0f:e0:ef:
e3:f3:03:ad:67:2f:77:64:87:bb:7f:35:0c:59:7c:e8:b6:ed:
d5:bc:c6:00:08:4d:5e:64:cf:ae:53:2d:0c:2b:94:df:00:74:
d6:bd:7e:34:c0:5f:1c:cf:7a:bc:8f:00:d7:2d:1f:68:28:15:
7a:57:74:65:72:98:54:2b:8e:4e:d6:40:95:3e:4d:e3:8a:dc:
5a:c8:1a:a6:04:5b:7d:f6:76:ec:74:ca:19:2e:a6:93:4d:78:
d6:b8:41:71:62:63:b2:d1:c0:9c:f5:58:45:a3:be:c5:1c:23:
94:35:4f:62:f6:ca:8b:43:2b:df:14:97:a3:09:26:71:54:1b:
25:a7:43:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:04 2024 by rpki-client on console-fra.rpki-client.org