Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/5dg7BylSWFOTyIcXcyp6hfHuuGg.roa
File: 5dg7BylSWFOTyIcXcyp6hfHuuGg.roa (raw, json)
Hash identifier: KsQbYYaEcn4cmaf8ZEsEOL8W/V47r+dhMjTFb0n++cA=
Subject key identifier: E5:D8:3B:07:29:52:58:53:93:C8:87:17:73:2A:7A:85:F1:EE:B8:68
Certificate issuer: /CN=5aae19678aa37525512229a94e7890147183273c
Certificate serial: 05D685E4
Authority key identifier: 5A:AE:19:67:8A:A3:75:25:51:22:29:A9:4E:78:90:14:71:83:27:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/5dg7BylSWFOTyIcXcyp6hfHuuGg.roa
Signing time: Sat 01 Jan 2022 09:55:32 +0000
ROA not before: Sat 01 Jan 2022 09:55:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51021
IP address blocks: 195.182.42.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97945060 (0x5d685e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aae19678aa37525512229a94e7890147183273c
Validity
Not Before: Jan 1 09:55:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e5d83b072952585393c88717732a7a85f1eeb868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4e:99:9c:2f:08:b9:ad:9a:c9:b5:5d:c5:cc:
6e:db:dd:a6:0f:e3:20:b9:15:89:b7:a6:e2:d5:cf:
30:04:2a:78:65:b7:37:02:d8:a8:9f:6e:0f:b4:8b:
8e:37:01:6c:9d:b4:d3:91:6c:14:3e:12:54:0c:5e:
0b:f1:53:45:2e:ce:7c:a5:1e:34:94:70:4a:7c:7c:
33:aa:ff:98:3d:64:40:68:8b:71:17:81:e4:3d:05:
12:25:fa:d5:08:a2:00:3d:37:dd:f0:8c:7b:e8:d1:
cc:2b:91:3c:e2:c8:cf:b2:9f:13:9a:82:70:11:aa:
41:b8:ed:73:db:2a:1e:72:df:09:14:99:1e:c5:70:
e2:3a:1c:8c:43:71:db:1d:21:17:3b:75:ab:09:bf:
6c:21:b1:45:25:39:0f:51:bf:0b:65:08:58:54:e5:
67:0e:58:bf:6f:5a:9c:2a:18:49:ae:5f:54:6a:a4:
b6:f6:cc:92:76:f5:05:2b:45:3b:d8:3d:c0:ed:ec:
c0:6b:f2:97:04:ad:eb:55:9c:65:8d:b1:51:b5:1d:
23:bf:ac:0c:63:a3:9c:e2:d9:9f:e4:35:a6:6c:74:
6c:d5:b4:c5:6c:70:07:94:0a:6e:f5:48:ac:4b:6b:
6f:f9:cf:42:3a:42:0d:34:7f:af:38:a0:a7:16:e3:
78:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D8:3B:07:29:52:58:53:93:C8:87:17:73:2A:7A:85:F1:EE:B8:68
X509v3 Authority Key Identifier:
keyid:5A:AE:19:67:8A:A3:75:25:51:22:29:A9:4E:78:90:14:71:83:27:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/5dg7BylSWFOTyIcXcyp6hfHuuGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.182.42.0/24
Signature Algorithm: sha256WithRSAEncryption
26:eb:35:a0:74:c5:54:45:1b:fe:a5:b4:0a:8b:46:98:b8:a8:
74:9c:03:a2:e9:40:3c:5d:12:71:dc:f3:b9:ad:8f:80:2d:82:
f5:eb:87:24:20:8e:20:57:f1:3b:94:87:8f:e5:10:95:0e:64:
0d:ae:05:e0:67:f3:dc:2e:d5:80:35:9c:b1:0c:b3:88:10:14:
db:35:0e:81:7f:a7:0c:7c:ec:f1:b3:92:46:ea:c5:7a:a4:55:
f7:3a:5c:c8:ce:16:3c:92:64:e4:d9:4e:92:88:f7:c2:83:f1:
f7:bf:e5:bc:16:ef:9b:54:04:6f:53:43:d2:d0:25:fa:d6:cc:
31:ad:80:f1:41:86:20:03:68:05:e7:73:56:75:2c:3e:c3:fc:
70:e9:9d:b6:72:d3:34:22:ad:64:13:f6:05:37:0d:cf:2b:68:
2a:55:72:52:76:c3:65:4e:32:db:1f:ca:35:54:dd:7c:24:7d:
f6:88:ba:c8:2c:87:9f:bf:eb:d2:b7:94:a6:5d:bb:70:cc:ec:
32:3b:ba:ce:5f:b8:02:0d:bc:50:38:62:25:40:5b:ea:c0:ae:
8c:eb:f5:7f:e2:31:4d:9b:22:ba:6c:17:d4:0c:91:66:dc:18:
cc:67:9e:67:66:88:65:14:3b:03:3a:5d:f8:cc:54:22:e8:2a:
92:8f:e1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:11 2024 by rpki-client on console-ams.rpki-client.org