Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5WxHzGvAcn0Z8guRNyNPzy-birA.roa
File: 5WxHzGvAcn0Z8guRNyNPzy-birA.roa (raw, json)
Hash identifier: Ki6DtsvB817ueNjPZFUnC4MjfBKAz13h+wGvW7dg+hc=
Subject key identifier: E5:6C:47:CC:6B:C0:72:7D:19:F2:0B:91:37:23:4F:CF:2F:9B:8A:B0
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1C73A344
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5WxHzGvAcn0Z8guRNyNPzy-birA.roa
Signing time: Sat 01 Jan 2022 01:02:38 +0000
ROA not before: Sat 01 Jan 2022 01:02:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51925
IP address blocks: 87.121.126.0/24 maxlen: 24
87.120.11.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 477340484 (0x1c73a344)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 01:02:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e56c47cc6bc0727d19f20b9137234fcf2f9b8ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:92:29:64:d5:91:43:40:43:45:dd:d4:40:8a:
c9:74:74:04:1c:7f:cc:97:16:21:53:11:bb:b1:69:
a3:a7:a5:eb:e9:d1:1d:04:46:87:ba:14:87:9c:0e:
e5:93:e2:f4:9c:5b:71:4a:ff:5c:d1:e7:c7:05:2c:
89:7a:df:58:6d:1b:84:a8:49:55:09:00:8a:b5:82:
5d:d1:51:d5:82:25:72:fa:0c:97:ff:89:c8:00:fd:
4f:85:41:d6:73:67:3b:36:80:17:85:2b:fa:ae:b1:
61:b6:f4:4d:12:53:22:97:41:e4:98:c8:60:90:8f:
49:e6:c9:dc:6d:a2:8d:76:1d:59:a4:1a:f3:24:6a:
a0:ab:bb:b9:d0:49:63:fd:c2:a2:b5:f8:b2:07:8f:
59:06:da:05:01:a9:0c:c3:db:e8:4e:30:71:d3:d1:
f8:f7:68:9e:8f:0e:12:42:68:7c:fb:4b:f1:78:3c:
46:30:6f:70:79:8e:e7:ce:ec:c4:49:eb:9a:3d:aa:
d3:0a:f0:68:8b:f3:d8:f9:70:11:59:8e:43:58:0b:
ca:7f:de:7c:76:91:da:f0:0e:62:8c:d8:8a:8b:8b:
a5:6b:db:e5:03:b3:55:d6:88:2a:7d:c6:8b:f4:ce:
3a:71:32:2f:58:48:f2:eb:f2:5b:fe:6b:f9:cd:73:
c8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:6C:47:CC:6B:C0:72:7D:19:F2:0B:91:37:23:4F:CF:2F:9B:8A:B0
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5WxHzGvAcn0Z8guRNyNPzy-birA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.11.0/24
87.121.126.0/24
Signature Algorithm: sha256WithRSAEncryption
53:8d:7f:31:db:1a:c7:f9:3b:7a:0a:d7:e4:b4:fa:8d:05:ff:
1c:07:6d:8e:84:21:c1:78:66:70:28:ef:19:86:0b:11:ba:11:
99:8d:95:3c:7b:75:2f:d4:25:30:50:8e:2b:33:37:0e:f0:17:
75:a6:e4:86:c0:f5:91:f4:af:36:69:f3:2b:66:11:95:43:44:
bd:95:94:8d:74:fc:6b:e5:00:cc:bf:54:5c:d3:1b:e3:96:28:
27:91:dc:02:a9:f7:ff:13:c1:28:28:c3:ac:e1:66:2e:59:09:
de:bc:d6:cb:bb:c2:6d:7d:a0:fa:6f:6a:18:28:17:62:46:86:
64:78:79:9a:67:f0:6c:f8:67:72:48:cb:09:01:64:82:69:19:
8b:61:95:e5:6a:fd:f4:8a:3b:18:11:bc:37:15:90:63:1e:eb:
12:4d:ab:4b:06:e9:e1:91:47:54:db:d0:67:56:d1:20:11:e6:
f5:68:a1:56:40:0f:0b:15:6f:08:91:9a:12:a5:28:cf:db:6c:
c9:c7:ce:d5:23:f5:9e:bd:13:6c:b3:9b:77:9a:d4:d8:e7:99:
52:2f:e0:d0:13:46:5d:e0:2b:73:ba:60:95:72:ac:ce:87:75:
be:be:7a:05:63:f1:f2:a4:69:a9:c9:cd:fd:ff:8d:c4:5a:8e:
7d:a5:ed:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:32 2023 by rpki-client on console-ams.rpki-client.org