Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/5UC5tLFelpYAXzdfe_YD-2rBFp8.roa
File: 5UC5tLFelpYAXzdfe_YD-2rBFp8.roa (raw, json)
Hash identifier: zs2KlU3i6nCWpVIhj0s27TQ3CugpkCVxZ4TYomNALc0=
Subject key identifier: E5:40:B9:B4:B1:5E:96:96:00:5F:37:5F:7B:F6:03:FB:6A:C1:16:9F
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0940A964
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/5UC5tLFelpYAXzdfe_YD-2rBFp8.roa
Signing time: Wed 05 Jan 2022 07:28:46 +0000
ROA not before: Wed 05 Jan 2022 07:28:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200275
IP address blocks: 5.231.127.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155232612 (0x940a964)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 5 07:28:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e540b9b4b15e9696005f375f7bf603fb6ac1169f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:19:2b:50:ec:1a:ec:53:2d:ae:13:05:e1:a9:
95:09:22:b1:95:f1:5e:25:72:e9:62:fe:e0:db:14:
54:59:3c:43:c2:b9:a0:6f:e9:59:16:14:7e:65:30:
84:b4:40:fa:37:25:10:1c:a7:05:e3:ba:91:3d:92:
d7:9a:63:dc:01:a9:e6:a9:19:af:90:61:12:08:fc:
73:c0:9b:0c:24:6c:3e:a5:99:de:84:84:4e:84:c5:
28:b2:cc:ae:65:ce:d4:b4:ff:e1:2e:c6:3d:a1:8a:
f3:22:59:68:7a:f0:7d:01:3b:0b:82:be:71:76:c0:
d0:0d:4a:ef:b4:bc:74:10:07:1b:79:6a:5b:a5:58:
2d:d0:3a:78:97:21:17:50:8b:27:0f:7c:d2:3c:a8:
00:c6:e5:40:63:c7:3c:75:0a:b9:29:76:f1:54:9e:
a5:42:d0:ad:4a:54:7c:e7:63:ae:94:f4:1d:49:0d:
26:62:81:05:5b:b0:09:3a:56:4e:be:da:9b:3b:84:
fc:bb:83:7d:fd:d9:f8:4e:0d:7f:49:07:4a:47:01:
3a:9d:0a:64:72:b0:96:f9:69:e0:eb:ab:de:b0:95:
ce:c0:68:fa:ad:62:29:46:78:bd:e3:88:b1:db:a5:
30:b9:b8:30:fd:24:b5:13:82:bf:b6:7b:80:69:e6:
04:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:40:B9:B4:B1:5E:96:96:00:5F:37:5F:7B:F6:03:FB:6A:C1:16:9F
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/5UC5tLFelpYAXzdfe_YD-2rBFp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.127.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:de:5a:40:6e:63:45:58:5f:bf:b5:4c:ab:97:17:3b:8a:ad:
e6:c6:29:2c:c1:b2:71:b4:69:f1:b3:42:89:3a:1c:f9:be:8e:
63:12:c1:d8:c2:a8:d1:7d:fa:d6:63:f7:0e:ef:c8:e0:03:2d:
e1:c1:13:19:ea:07:b7:ed:51:af:6f:ff:b5:02:32:a7:40:e3:
19:78:fe:9b:dd:db:6b:88:f8:03:93:a2:94:1c:45:e1:1b:b1:
b9:f7:97:02:c7:f6:a0:23:84:df:5e:08:f3:ab:9e:cb:f5:a2:
89:7f:cc:34:98:40:0f:bc:45:03:c1:a3:0c:bd:3f:e0:e8:3d:
8e:d2:ee:6c:d5:d8:59:9f:53:92:b2:b7:90:92:af:9a:e2:1e:
0d:d2:9e:45:46:e3:f2:ea:ba:20:e9:6a:cd:72:37:ab:2c:cc:
b7:ec:76:a1:1c:23:96:44:d6:63:c8:66:fc:28:83:4b:e0:53:
7c:32:0b:33:fa:3c:51:20:4a:69:79:f9:02:85:8a:a9:7e:a4:
5a:78:59:b6:2f:bb:c9:96:44:0e:3a:f5:53:ea:a3:98:4f:aa:
43:37:21:f7:69:3e:e1:3f:7a:d0:b4:e6:d4:7e:d4:06:65:44:
56:38:50:ec:43:22:a8:16:ff:7d:9e:ba:f6:fd:cf:6d:a3:7f:
89:44:96:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:30 2024 by rpki-client on console-fra.rpki-client.org