Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/A0Sa6SGq6gTY2Kby1C3HAnC_rqM.roa
File: A0Sa6SGq6gTY2Kby1C3HAnC_rqM.roa (raw, json)
Hash identifier: AwOiRtVWtjSqgIN4hRtWeQEUhKO/ldreENVH0/HmRzU=
Subject key identifier: 03:44:9A:E9:21:AA:EA:04:D8:D8:A6:F2:D4:2D:C7:02:70:BF:AE:A3
Certificate issuer: /CN=297c508d23b38315bbf45b726d22050a46127b8c
Certificate serial: 0F16A290
Authority key identifier: 29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/A0Sa6SGq6gTY2Kby1C3HAnC_rqM.roa
Signing time: Sat 01 Jan 2022 12:05:47 +0000
ROA not before: Sat 01 Jan 2022 12:05:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56844
IP address blocks: 5.133.70.0/24 maxlen: 24
5.133.68.0/23 maxlen: 23
5.133.68.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 253141648 (0xf16a290)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297c508d23b38315bbf45b726d22050a46127b8c
Validity
Not Before: Jan 1 12:05:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=03449ae921aaea04d8d8a6f2d42dc70270bfaea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fa:b5:09:6b:ca:d4:ce:21:91:f6:9d:b0:cd:
e2:3e:63:39:af:2a:e8:b6:51:8c:c1:62:cd:66:05:
62:77:8f:a5:5c:e8:4a:7a:2b:88:a7:6e:91:73:a5:
69:23:73:1a:bb:9d:80:97:34:0d:d4:f7:32:e6:fe:
58:49:bc:f4:23:c6:13:30:d7:9f:7f:3e:71:3a:19:
0e:4f:bf:68:30:6f:7b:34:d1:fc:51:25:b3:71:c5:
09:cb:35:5f:2f:26:b4:ab:8d:a5:5e:ce:d0:10:84:
f7:d5:e0:e8:b6:67:65:8e:d7:3d:ca:cf:fc:c9:94:
55:0b:aa:83:1d:6e:69:3d:8b:ce:18:6d:2c:61:97:
aa:8c:fd:fb:2a:79:17:04:f3:76:d1:ce:59:c6:0c:
8a:77:88:85:5f:fb:48:24:86:67:71:89:a2:d2:5f:
ec:2f:07:fb:df:10:92:c2:b1:4c:0b:5e:1a:9c:87:
dc:e1:e2:26:46:1f:ae:b0:86:f7:2a:bd:40:09:f0:
72:cf:6d:56:fc:3b:3d:a3:f3:d9:2a:2e:7b:b0:e1:
81:07:65:b0:68:2c:8d:c0:44:39:a2:7f:f1:9e:c1:
46:3c:52:7c:8e:e8:8b:1f:15:95:8d:81:37:0b:d4:
3b:d4:15:85:b1:c5:4b:8e:a7:09:50:f7:1d:4e:d5:
50:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:44:9A:E9:21:AA:EA:04:D8:D8:A6:F2:D4:2D:C7:02:70:BF:AE:A3
X509v3 Authority Key Identifier:
keyid:29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/A0Sa6SGq6gTY2Kby1C3HAnC_rqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.68.0-5.133.70.255
Signature Algorithm: sha256WithRSAEncryption
49:dd:0d:f7:23:11:5b:87:5a:72:63:c4:62:9a:e2:a4:6b:52:
f8:84:c9:9d:87:57:d5:9d:15:ed:7f:5c:05:43:41:e9:ac:93:
f1:77:40:e3:e1:c5:00:2b:0e:a5:44:36:28:15:3e:b8:67:da:
89:3a:63:33:a2:85:8e:9b:f6:60:f1:3a:16:74:58:67:6b:18:
bd:cb:8b:36:37:e9:32:32:24:9f:a0:df:8f:fe:ff:53:96:8e:
31:43:db:62:ae:36:25:41:89:0c:24:41:87:41:8c:e2:11:ef:
aa:6d:0c:5c:2b:b1:72:ff:0b:80:6d:d8:48:6f:ae:47:64:b8:
77:3c:3f:3f:40:28:56:f5:cd:be:69:04:ee:92:9a:1c:81:7a:
e8:d6:bd:8e:1f:44:ed:60:ac:ce:b8:fe:a3:46:1b:e7:63:bc:
f1:3f:cd:cc:12:83:7f:fc:89:b8:45:24:c9:f1:1c:2a:04:2e:
ca:d3:45:57:b1:69:83:52:b0:35:20:2b:ef:24:4c:c8:b1:9b:
5f:04:82:a5:2f:a0:81:98:38:09:98:bf:f6:27:c7:fd:b4:40:
ec:c2:0c:c4:b7:5a:93:23:bf:f9:5d:7e:35:ce:ad:46:68:b8:
79:d5:42:85:7a:1a:ea:cf:69:5f:9a:e3:7b:86:c6:a8:81:21:
1c:c6:b6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:46 2023 by rpki-client on console-ams.rpki-client.org