Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/5WMEmPQlz1fW633yvn1zGyJUCs0.roa
File: 5WMEmPQlz1fW633yvn1zGyJUCs0.roa (raw, json)
Hash identifier: e7leanEhXdNLhx55TXEDgyoDQ+4At16hYbV8Vcm4R94=
Subject key identifier: E5:63:04:98:F4:25:CF:57:D6:EB:7D:F2:BE:7D:73:1B:22:54:0A:CD
Certificate issuer: /CN=8ab3e965c8747e2fa5ddd12857673f06042efa43
Certificate serial: 0E66DBFE
Authority key identifier: 8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/5WMEmPQlz1fW633yvn1zGyJUCs0.roa
Signing time: Sat 01 Jan 2022 05:05:14 +0000
ROA not before: Sat 01 Jan 2022 05:05:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49882
IP address blocks: 193.105.47.0/24 maxlen: 24
91.208.28.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 241622014 (0xe66dbfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab3e965c8747e2fa5ddd12857673f06042efa43
Validity
Not Before: Jan 1 05:05:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e5630498f425cf57d6eb7df2be7d731b22540acd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:75:79:fc:99:c3:ea:8c:4b:36:b9:62:a6:89:
1d:bb:84:fa:13:4b:15:3e:85:54:18:6c:30:4a:4e:
b5:e5:70:d2:6d:88:b4:ba:60:11:98:ee:52:7b:85:
0d:bd:4d:5a:00:8e:24:ab:4e:5a:ac:8f:05:72:2d:
f5:c8:74:a0:ea:68:ff:62:af:4a:98:fa:b4:ec:22:
6e:62:2f:b2:cb:ef:c4:16:9c:85:21:2a:ee:63:0b:
1f:da:9f:e2:7a:18:5b:60:e0:3b:c8:42:db:70:a7:
9e:77:9c:f5:05:24:a6:78:c7:af:22:a2:07:40:68:
9f:18:8a:bf:8e:6a:e2:83:55:75:81:16:35:ad:ec:
89:38:8c:61:87:29:45:ce:ae:1c:7a:8c:b2:8d:0b:
4c:5e:e4:ca:a4:d9:3d:8a:08:c0:98:d3:71:66:df:
b9:96:8a:f7:1a:c2:2c:39:b8:bc:8a:e8:a2:65:a3:
c8:4d:d6:02:dc:3f:60:12:9a:f3:2a:7a:79:51:7e:
41:a3:f1:99:70:0c:b9:5b:17:8a:8d:41:09:24:4a:
df:06:9f:c5:65:38:2f:0d:3b:3b:62:30:92:f1:24:
e4:d6:e8:88:70:ba:71:4d:bf:24:e6:af:b3:f5:09:
b9:9d:b2:0b:3a:28:0f:60:16:ef:14:74:24:5c:f4:
0e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:63:04:98:F4:25:CF:57:D6:EB:7D:F2:BE:7D:73:1B:22:54:0A:CD
X509v3 Authority Key Identifier:
keyid:8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/5WMEmPQlz1fW633yvn1zGyJUCs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.28.0/24
193.105.47.0/24
Signature Algorithm: sha256WithRSAEncryption
ec:08:eb:ef:a0:69:e2:f6:5b:ce:2e:e2:d0:d4:cb:78:b3:d0:
61:e1:91:37:14:2a:63:f1:e9:a7:43:51:9e:36:4f:d9:0a:8e:
fb:f3:e1:0d:a1:4d:8c:17:fd:7f:e8:e5:f4:1b:b7:34:2e:58:
5a:13:fb:74:00:6d:b9:8c:16:cc:ea:00:39:a7:ee:b1:34:a1:
7d:b3:fe:62:cc:e2:3f:69:34:b5:e4:d3:e8:6f:25:4c:21:7a:
56:bd:e4:ed:b2:5e:81:d8:37:b8:b4:3d:79:63:1e:c0:36:e8:
30:78:96:67:29:0f:a1:6a:ef:bf:37:08:2b:72:53:74:3f:0b:
20:83:a3:29:16:c6:42:33:ce:f8:73:a2:a4:ad:36:03:e4:f0:
ba:2d:f2:75:9f:fb:51:08:0e:03:4f:83:26:85:4f:37:db:73:
2d:e8:39:15:91:b8:a7:61:da:40:69:71:17:09:9d:d7:c9:ed:
48:69:32:2c:c5:90:00:48:1e:db:8d:c7:f2:be:d6:e4:9a:12:
00:f0:44:25:06:65:f1:af:e0:d6:3e:77:3f:f2:38:4b:b6:35:
5e:df:6f:7a:b4:02:de:d1:36:c4:dd:e3:7a:2a:b5:73:1c:cc:
59:c9:3a:cd:90:c1:b9:c7:79:a8:ef:48:b4:5a:43:2e:b4:05:
5f:0d:b7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:47 2024 by rpki-client on console-ams.rpki-client.org