Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/SES4ubfgaXqRr9rAfzBJcHEGq_I.roa
File: SES4ubfgaXqRr9rAfzBJcHEGq_I.roa (raw, json)
Hash identifier: HGobNMYMDkN2I6VmW1nqPQlaL1dE2jNxhffy4UOJ56Q=
Subject key identifier: 48:44:B8:B9:B7:E0:69:7A:91:AF:DA:C0:7F:30:49:70:71:06:AB:F2
Certificate issuer: /CN=b24d588df20b32db9787d77864394cd7a66d4030
Certificate serial: 051D4938
Authority key identifier: B2:4D:58:8D:F2:0B:32:DB:97:87:D7:78:64:39:4C:D7:A6:6D:40:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sk1YjfILMtuXh9d4ZDlM16ZtQDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/SES4ubfgaXqRr9rAfzBJcHEGq_I.roa
Signing time: Sat 01 Jan 2022 04:55:51 +0000
ROA not before: Sat 01 Jan 2022 04:55:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61362
IP address blocks: 5.252.216.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85805368 (0x51d4938)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b24d588df20b32db9787d77864394cd7a66d4030
Validity
Not Before: Jan 1 04:55:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4844b8b9b7e0697a91afdac07f3049707106abf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:56:19:4c:2c:c8:01:a2:b2:92:e4:80:44:d2:
eb:f9:c5:25:38:6d:9c:91:ff:f4:1e:a7:0a:f5:11:
53:7e:3e:b9:a4:8b:ef:1e:98:1d:6b:dd:71:8a:1e:
ef:ea:5d:5f:46:e9:c9:21:9e:7c:0e:d3:5a:78:ff:
4d:05:a1:11:62:b8:66:84:d8:e3:c3:85:da:70:6e:
86:6d:3d:2e:dc:07:e2:a0:73:02:64:bb:fa:64:ba:
de:d4:95:35:81:3f:0d:7f:68:20:64:e3:19:72:d5:
15:bb:d0:52:a4:1c:8f:ac:c6:97:db:ee:62:ad:db:
62:04:5f:7c:07:16:ef:90:25:8c:96:a2:8f:9e:19:
d1:ee:84:84:e8:f7:ce:4a:5f:f9:51:e4:62:16:37:
a0:71:1c:fb:6f:0e:b7:9e:ee:4e:87:69:45:f4:d8:
f1:5c:13:ba:84:10:e5:b0:19:ea:9b:8c:25:ca:14:
fe:6c:39:fd:1d:42:d9:10:ee:6e:d3:51:13:c5:a8:
99:e9:f8:b7:88:06:69:50:51:5a:3d:1b:a1:e8:c1:
fc:e4:f1:96:60:ea:5c:ee:1c:54:cf:5b:d4:10:21:
c7:0e:12:b6:e4:5b:78:3a:ad:b7:44:59:81:90:11:
3c:03:ac:05:cc:10:a0:c7:da:af:1c:0b:5f:8c:50:
bc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:44:B8:B9:B7:E0:69:7A:91:AF:DA:C0:7F:30:49:70:71:06:AB:F2
X509v3 Authority Key Identifier:
keyid:B2:4D:58:8D:F2:0B:32:DB:97:87:D7:78:64:39:4C:D7:A6:6D:40:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sk1YjfILMtuXh9d4ZDlM16ZtQDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/SES4ubfgaXqRr9rAfzBJcHEGq_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.216.0/22
Signature Algorithm: sha256WithRSAEncryption
67:a5:66:05:0e:4a:e1:f0:4d:f7:40:1f:88:99:ef:e5:b7:de:
48:c6:68:c6:65:8b:cc:6e:ed:e8:bd:ae:8a:01:dc:52:d6:01:
70:74:22:38:d5:b9:2f:55:66:4c:34:a2:e8:0e:f1:1a:4e:a1:
d3:e1:2f:d8:6e:1a:e0:ba:4b:fa:46:02:db:95:ef:9a:ca:87:
1b:7d:c0:73:1d:51:1b:33:1d:ff:b9:92:65:ba:61:f3:cd:98:
f2:48:49:88:0e:64:67:0a:02:d9:62:a0:7b:18:ec:53:62:98:
ca:13:d2:51:05:e5:0f:77:81:32:a0:d7:3f:6d:fd:31:8e:11:
e2:df:7a:43:62:16:a0:bf:1a:5a:0f:a7:88:ec:c1:14:ae:b0:
9e:67:63:03:2c:ea:66:69:15:32:f7:48:ca:7a:30:88:4e:2a:
60:b8:3b:f4:61:e1:f2:ff:25:2c:a5:90:8b:0d:53:0d:e6:1e:
a8:eb:19:5c:be:bf:c0:63:3e:d8:33:a9:e1:40:88:41:d9:cd:
3a:54:75:f2:26:4f:5f:be:5a:32:28:44:b5:a6:6d:d1:16:70:
9d:8c:e0:ba:e8:c2:f0:c4:71:35:8a:27:7f:84:fe:12:b1:74:
1a:22:d0:ec:d9:e7:fe:e6:0e:fc:ca:2f:80:04:f5:c2:f4:7d:
38:4a:12:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:28 2024 by rpki-client on console-fra.rpki-client.org