Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/2g5kA9hHgNTtqIyDP-vnOYtQPwA.roa
File: 2g5kA9hHgNTtqIyDP-vnOYtQPwA.roa (raw, json)
Hash identifier: FCO21IpfUjkp9wCYK4O1Ja37vSdr5xzmwU3W+c3HrNc=
Subject key identifier: DA:0E:64:03:D8:47:80:D4:ED:A8:8C:83:3F:EB:E7:39:8B:50:3F:00
Certificate issuer: /CN=66ef31adac663855b3ddd1931c44cf8064d6a6eb
Certificate serial: 0A60767C
Authority key identifier: 66:EF:31:AD:AC:66:38:55:B3:DD:D1:93:1C:44:CF:80:64:D6:A6:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/2g5kA9hHgNTtqIyDP-vnOYtQPwA.roa
Signing time: Tue 24 May 2022 14:31:14 +0000
ROA not before: Tue 24 May 2022 14:31:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 193.160.155.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174093948 (0xa60767c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ef31adac663855b3ddd1931c44cf8064d6a6eb
Validity
Not Before: May 24 14:31:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=da0e6403d84780d4eda88c833febe7398b503f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:19:0b:ba:0b:58:34:03:a1:f2:58:9b:8e:2a:
f5:ae:03:b5:47:30:75:49:39:26:a5:82:7a:43:68:
31:ea:ef:a2:e6:af:ae:1d:85:6c:5d:ff:8d:f0:19:
24:2c:3d:78:ef:a8:0f:7b:c7:cf:90:63:e4:79:e9:
9c:92:bb:a7:82:49:54:75:b0:d8:e4:db:cf:ff:e9:
79:74:6e:3a:b2:9e:c3:d6:80:f8:2a:25:65:c0:f4:
ff:80:7c:62:5b:a9:1a:cf:c3:30:62:bd:ae:71:2a:
5c:3d:e5:46:70:a5:66:c8:a0:23:aa:2a:59:3d:4c:
aa:bb:45:94:62:2a:c8:b8:9f:ce:ca:df:f3:5f:6c:
27:6c:5b:5c:a2:ba:61:d1:77:41:0f:4f:ac:04:8f:
1e:e5:9f:c6:bd:f8:4c:97:ee:30:69:e9:e9:e3:fc:
ea:15:59:b6:b0:04:74:d7:cb:d7:81:62:02:e8:8c:
2a:40:ea:9b:63:a7:93:27:de:aa:87:d0:4b:11:f5:
72:1c:7e:ce:e8:7d:95:65:d9:2f:a3:2d:86:79:ec:
23:0f:90:9e:7f:ed:4a:b2:b9:e0:85:e6:39:f9:5a:
1e:ba:ac:09:0f:a2:84:5e:8e:f2:18:4d:c2:fb:35:
19:cf:6f:70:72:a1:61:ce:89:bc:1a:2d:4c:00:61:
5a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:0E:64:03:D8:47:80:D4:ED:A8:8C:83:3F:EB:E7:39:8B:50:3F:00
X509v3 Authority Key Identifier:
keyid:66:EF:31:AD:AC:66:38:55:B3:DD:D1:93:1C:44:CF:80:64:D6:A6:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/2g5kA9hHgNTtqIyDP-vnOYtQPwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.155.0/24
Signature Algorithm: sha256WithRSAEncryption
39:28:5a:70:42:8b:5d:3b:a2:b6:ef:7e:16:df:e1:59:62:a4:
51:fd:3a:5b:cf:72:b2:79:26:9b:cc:39:d3:7f:32:fc:ee:af:
1c:73:91:aa:16:66:fc:d2:ed:ee:9f:00:6d:49:e3:15:7d:4d:
69:dd:4f:f6:73:73:06:be:e8:b6:18:42:4a:dc:b8:4b:7d:35:
1b:9c:39:2f:a0:72:10:2d:d2:07:74:78:4e:d8:15:69:3d:22:
d4:ec:49:8a:20:ca:1b:37:2b:98:6e:5f:4a:4f:42:4b:46:e2:
c4:11:c4:9c:6f:43:12:a4:f4:27:a4:ac:5f:aa:42:70:b6:e5:
38:f8:dc:d6:40:7b:db:4c:00:7c:d5:e8:43:f0:87:e6:d8:76:
b7:73:e4:87:bb:05:2f:8a:84:96:75:96:b6:45:9f:bd:d5:af:
97:4b:6d:23:4e:f4:1a:20:71:e3:24:dc:f8:d5:77:cf:a1:ce:
3c:17:4c:50:62:8a:8f:54:c3:98:02:cb:07:59:d2:7d:97:da:
ae:92:a1:30:f9:61:72:f1:09:25:31:59:7a:65:57:5f:1a:c1:
a6:e5:5a:c9:9e:68:52:5c:25:0c:36:fd:70:2f:79:ad:af:b5:
e5:16:a7:5b:0c:24:b1:cd:cd:58:cf:aa:ae:e7:28:17:54:08:
1a:0b:65:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:01 2024 by rpki-client on console-fra.rpki-client.org