Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/ooFLoejEgtomuGoBERA_Z3zq5Rg.roa
File: ooFLoejEgtomuGoBERA_Z3zq5Rg.roa (raw, json)
Hash identifier: YeOmKT3qIU0MDWmoy9PYCZEYRwUCnyQjx8gZGoQrB44=
Subject key identifier: A2:81:4B:A1:E8:C4:82:DA:26:B8:6A:01:11:10:3F:67:7C:EA:E5:18
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 0184136589CFA37FCD4B92458F30A2220408
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/ooFLoejEgtomuGoBERA_Z3zq5Rg.roa
Signing time: Wed 26 Oct 2022 08:25:32 +0000
ROA not before: Wed 26 Oct 2022 08:25:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61424
IP address blocks: 5.252.23.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:13:65:89:cf:a3:7f:cd:4b:92:45:8f:30:a2:22:04:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Oct 26 08:25:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a2814ba1e8c482da26b86a0111103f677ceae518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c7:3e:c3:52:a2:ef:30:2f:f1:a8:ba:43:fb:
bd:c4:e7:93:76:99:a0:a6:f4:9f:27:5c:a1:9c:4e:
b2:57:bc:96:bc:0d:94:22:13:55:44:63:d4:40:1c:
ea:cb:60:95:8c:84:2e:41:c6:c3:47:13:05:cb:c6:
38:1f:a7:53:73:ad:fa:e9:b9:ee:8c:71:a3:50:9f:
92:4b:9f:09:8d:33:33:44:b5:88:bb:3e:49:ae:9c:
af:c4:f0:24:54:d7:53:25:2c:df:d8:7b:5a:97:90:
c1:00:e7:66:d8:b4:03:eb:6d:47:02:22:ef:a8:9e:
0f:f1:85:e5:ce:7b:b8:da:a9:5e:a2:4a:83:55:32:
15:06:78:23:bc:b9:31:c1:a4:7f:81:f7:db:29:7e:
33:51:34:fd:75:8e:5e:38:5d:19:d6:cc:ca:02:26:
92:fa:bc:6d:1b:fd:66:96:e9:a1:4a:95:a4:e3:0f:
e4:15:75:f4:94:c7:7c:da:fa:1e:e9:45:18:e9:c8:
7c:d9:f9:3f:ab:52:90:4b:ac:12:85:56:0e:49:f9:
4a:01:a4:d5:a4:fb:16:8c:47:2e:45:f8:14:7d:3f:
7f:a9:f8:d8:58:41:c8:ce:83:df:2d:a8:b1:c8:83:
a0:5c:4f:64:8a:8f:6d:72:cc:79:9b:a5:08:5d:aa:
8d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:81:4B:A1:E8:C4:82:DA:26:B8:6A:01:11:10:3F:67:7C:EA:E5:18
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/ooFLoejEgtomuGoBERA_Z3zq5Rg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.23.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:68:81:20:0d:aa:19:30:dd:b4:40:fb:f6:91:1e:96:29:db:
5b:25:11:d4:63:ce:5b:f8:b1:ee:3e:29:ad:c3:8e:5d:a2:3d:
cd:c4:ba:78:a2:a4:0e:d0:6d:56:ba:fa:fc:ec:0e:e0:a4:79:
8c:15:d3:c2:64:3d:d0:2d:5b:fa:d1:d6:59:5b:ef:7c:df:9f:
76:dd:26:d4:e4:2e:7e:7a:35:ad:91:71:89:46:58:41:da:63:
47:59:0c:47:f4:a1:bd:6b:c3:4e:5d:29:77:54:4a:07:da:10:
51:d4:9a:59:88:ae:58:81:51:4b:74:e1:6d:79:b6:d0:bd:05:
80:5f:7d:50:3a:27:62:19:a9:3a:25:59:88:87:df:15:ea:f8:
99:18:d8:30:83:a2:44:2e:f7:b4:c6:96:04:4f:e7:27:f7:06:
72:08:a9:c6:71:cd:45:a9:ce:7f:e2:77:18:d6:2e:ac:5a:d8:
c2:1e:9d:43:ee:56:2d:c4:42:bd:e0:e3:55:e7:45:20:5e:3c:
67:38:42:d0:b6:28:7e:61:bf:a6:5e:0c:23:df:2d:52:48:e2:
d1:28:88:5f:7b:05:28:8d:a9:3b:d7:dd:d1:c7:91:ba:5f:1a:
9c:a4:9e:18:02:54:63:16:bc:d8:db:1f:c2:d0:10:4a:10:6c:
06:d1:30:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:37 2024 by rpki-client on console-fra.rpki-client.org