Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/5Mn2saaFOHKpmXmOy_DZhBEEfdE.roa
File: 5Mn2saaFOHKpmXmOy_DZhBEEfdE.roa (raw, json)
Hash identifier: qH2kdwbjHD0gH4djjXiHzvq69hZ3zzxKqRVl699p7/E=
Subject key identifier: E4:C9:F6:B1:A6:85:38:72:A9:99:79:8E:CB:F0:D9:84:11:04:7D:D1
Certificate issuer: /CN=5f83c3976cf00e42cbed53924c4a86556bd70142
Certificate serial: 0184EC1130BB6F4F55F00AA9C4AA6BAC09EA
Authority key identifier: 5F:83:C3:97:6C:F0:0E:42:CB:ED:53:92:4C:4A:86:55:6B:D7:01:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/5Mn2saaFOHKpmXmOy_DZhBEEfdE.roa
Signing time: Wed 07 Dec 2022 10:11:00 +0000
ROA not before: Wed 07 Dec 2022 10:11:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12350
IP address blocks: 81.23.64.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ec:11:30:bb:6f:4f:55:f0:0a:a9:c4:aa:6b:ac:09:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f83c3976cf00e42cbed53924c4a86556bd70142
Validity
Not Before: Dec 7 10:11:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e4c9f6b1a6853872a999798ecbf0d98411047dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:11:df:65:12:2f:44:d9:53:29:9c:ed:f6:94:
f8:20:31:25:99:e9:20:fc:98:27:d4:1f:40:4f:d1:
da:3e:ea:9a:3b:5c:1c:4d:71:3d:6e:68:97:3c:d1:
0f:b2:21:a5:84:55:a7:dd:68:17:0d:dd:bd:5e:7e:
c5:75:af:dc:25:f9:58:ea:e9:99:2c:eb:13:e8:03:
4a:43:5d:ad:56:cb:fb:41:cb:a9:38:63:03:b3:e4:
07:df:1a:c6:db:4c:19:e8:7f:d2:a9:7e:71:f9:72:
7c:ca:1a:bc:03:c5:58:56:90:fa:a9:2c:e3:fd:c4:
ab:35:b2:d8:53:dd:de:e2:85:8d:41:fb:96:69:72:
99:80:56:66:80:4d:72:62:b0:a5:2c:bf:59:5e:52:
17:be:39:eb:95:ea:14:0a:c8:9b:86:20:56:ab:7d:
f1:34:fa:c8:fc:d5:b0:f9:90:13:30:d5:56:ed:9c:
61:a7:17:f9:8b:6c:0a:c2:88:24:9f:83:09:99:99:
13:a6:5f:e1:72:52:1e:3c:0a:88:cc:60:ff:5c:d1:
8a:4b:8f:fc:73:2c:ee:a6:43:1b:d4:20:6d:e8:0f:
83:c8:8e:e7:84:5a:5e:58:a8:e8:08:ee:9f:73:89:
f0:2a:3d:e2:d2:4a:28:f7:56:9d:10:49:c0:af:25:
ad:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C9:F6:B1:A6:85:38:72:A9:99:79:8E:CB:F0:D9:84:11:04:7D:D1
X509v3 Authority Key Identifier:
keyid:5F:83:C3:97:6C:F0:0E:42:CB:ED:53:92:4C:4A:86:55:6B:D7:01:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/5Mn2saaFOHKpmXmOy_DZhBEEfdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.23.64.0/20
Signature Algorithm: sha256WithRSAEncryption
2e:72:eb:d4:60:26:a8:48:6b:d4:46:66:ef:d3:ef:f6:83:0c:
0b:c4:99:63:06:e7:4a:d8:b7:75:3f:88:3a:2d:eb:f0:54:49:
19:08:ed:83:28:10:36:ef:9c:b2:9c:1d:cd:58:34:a1:a5:c9:
65:1b:70:e0:e2:18:bd:41:21:80:0c:20:a3:7b:21:66:b7:97:
84:73:3d:e9:17:49:7a:44:ba:77:0a:da:57:46:c1:3b:c3:c2:
dc:29:c6:08:60:27:71:76:bf:fe:d1:f1:1c:6e:85:c4:1e:23:
cf:86:46:8e:d4:cd:cf:6f:d8:94:e2:af:19:81:35:f8:b6:bb:
5a:ba:68:82:24:47:91:45:0a:a5:00:27:65:b5:33:db:86:89:
a1:ef:88:10:95:80:29:eb:60:9e:7d:f4:d7:7c:44:e9:84:df:
17:d8:42:27:fa:91:3b:6f:cc:66:c5:d6:d9:ac:7a:67:eb:d7:
aa:8e:a0:53:fd:15:67:7b:8e:14:67:ab:f4:5b:2c:e7:d0:ef:
a8:9f:66:2b:1a:ba:12:38:7e:66:dc:ff:12:76:0d:c6:18:51:
b2:ff:8f:3e:44:07:1b:5c:5c:b2:c1:ab:5c:e1:dc:8c:73:af:
41:d2:70:c0:e8:5e:cb:71:8e:8b:65:94:0d:89:87:44:1c:73:
a9:21:8e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:01 2024 by rpki-client on console-ams.rpki-client.org