Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/bkcOdrUg9Ou9qDOwea6iVNnVaA4.roa
File: bkcOdrUg9Ou9qDOwea6iVNnVaA4.roa (raw, json)
Hash identifier: GdbOYzZ+ug7cR/G4+LQPdq0TR0dCJHzkl9JZKZgjZJs=
Subject key identifier: 6E:47:0E:76:B5:20:F4:EB:BD:A8:33:B0:79:AE:A2:54:D9:D5:68:0E
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 42A77AF6
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/bkcOdrUg9Ou9qDOwea6iVNnVaA4.roa
Signing time: Sat 01 Jan 2022 06:05:05 +0000
ROA not before: Sat 01 Jan 2022 06:05:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60716
IP address blocks: 5.140.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1118272246 (0x42a77af6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 1 06:05:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6e470e76b520f4ebbda833b079aea254d9d5680e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:15:d9:25:7a:bb:93:77:89:f3:df:fc:08:95:
e9:99:4a:d9:ce:f2:e9:75:a5:6d:9b:e4:d1:48:91:
49:8e:ef:d9:bd:54:f2:95:5d:3a:66:81:d1:8c:5b:
64:89:65:34:ca:ad:3c:e5:ef:1a:0b:cc:03:a0:01:
d2:db:85:1a:f3:a1:81:cc:7c:3c:ee:6c:48:0e:d2:
80:bd:93:a7:b0:4f:7e:72:93:81:67:1e:fe:c0:2c:
ce:15:35:16:85:24:5e:dd:dc:d0:9f:22:5a:0b:18:
29:0e:c6:59:10:04:e1:8f:7f:74:e8:02:44:6b:1d:
99:ea:89:a2:04:13:d3:59:86:19:6b:88:c4:1e:af:
46:fb:8b:92:e1:7b:19:7c:8f:1d:f9:b5:90:fa:bc:
93:b1:68:06:c9:72:cf:61:95:fa:4d:8e:ef:5b:ed:
a0:20:c5:0f:df:c3:8c:8a:6c:5f:8e:a6:85:68:7a:
86:d4:ea:dc:49:f6:6e:37:c8:d6:56:e8:b9:3d:55:
16:35:54:ec:0d:ab:36:aa:6a:0d:26:ed:e7:17:4c:
aa:bf:00:14:9c:fd:b2:e9:29:43:8c:54:1f:da:bf:
e0:4e:8e:5e:3e:2d:bf:4f:61:fa:32:1d:96:5e:a6:
f0:02:1e:92:a6:b3:60:14:fa:12:63:06:1a:08:53:
9e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:47:0E:76:B5:20:F4:EB:BD:A8:33:B0:79:AE:A2:54:D9:D5:68:0E
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/bkcOdrUg9Ou9qDOwea6iVNnVaA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.140.161.0/24
Signature Algorithm: sha256WithRSAEncryption
70:b4:08:0e:95:63:84:10:5c:ab:3f:bf:72:67:2f:5a:99:e5:
c0:3c:de:53:45:be:25:60:4c:30:8b:a7:a8:a7:29:da:50:8c:
26:c5:41:62:f7:b4:ca:c0:a2:02:52:55:b9:54:6f:0a:31:68:
2f:a9:7e:ec:f7:df:ca:11:88:74:63:cc:6f:98:c8:f8:c0:8e:
8d:8f:18:15:d3:90:a4:4d:e4:d8:27:19:2c:ea:ec:f2:c8:0c:
83:b1:21:f7:68:1d:32:8b:1b:e9:f2:54:ef:81:e2:0c:72:04:
ed:f4:95:a2:db:50:f5:3b:87:c1:c7:3a:ac:14:02:8e:98:e5:
d7:c6:f4:7e:d0:9e:b1:84:1c:59:0f:a5:23:ac:d0:a4:e2:7b:
ab:86:6c:e3:17:97:f2:6e:96:92:c6:6a:57:b2:11:40:a9:61:
83:49:ef:e6:57:29:4f:0e:eb:2c:b8:67:4b:35:01:e1:4e:f1:
18:1b:1b:0b:cf:93:b3:c1:91:92:83:14:9c:9a:ec:57:9a:40:
6c:87:d4:8b:3a:ef:44:92:6b:f1:29:a7:f9:81:0f:3d:ae:80:
0d:a3:60:2d:fc:dd:49:da:82:09:f0:1b:75:70:ff:dd:93:24:
45:f1:20:8c:b7:2b:aa:1f:e0:d9:3b:e6:34:cd:a5:b7:60:5d:
99:34:74:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:25 2024 by rpki-client on console-ams.rpki-client.org