Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/jdPD0IseNIFhDqQ_5IJdRhRxVcE.roa
File: jdPD0IseNIFhDqQ_5IJdRhRxVcE.roa (raw, json)
Hash identifier: Pz41kgsqMZRG5eT1eOtdl0KC+O/cFCoNUlNi6c0vRdU=
Subject key identifier: 8D:D3:C3:D0:8B:1E:34:81:61:0E:A4:3F:E4:82:5D:46:14:71:55:C1
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 092BFA33
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/jdPD0IseNIFhDqQ_5IJdRhRxVcE.roa
Signing time: Sat 01 Jan 2022 05:55:26 +0000
ROA not before: Sat 01 Jan 2022 05:55:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12360
IP address blocks: 5.231.128.0/18 maxlen: 32
5.231.128.0/19 maxlen: 32
5.231.160.0/20 maxlen: 32
5.231.176.0/21 maxlen: 32
5.231.184.0/21 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153877043 (0x92bfa33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 1 05:55:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8dd3c3d08b1e3481610ea43fe4825d46147155c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9a:9f:82:e1:51:e6:91:c7:6b:10:38:f8:f4:
ee:72:fa:b5:d3:b5:d2:f4:f8:98:b0:76:0a:0e:20:
3e:0e:88:0d:6b:3d:4c:40:1e:e3:47:66:de:ef:77:
ae:16:e6:be:2b:f9:59:ef:5f:c0:d3:e9:1d:0d:a7:
73:e1:f5:73:8c:b8:3b:ac:3a:76:ec:28:7a:25:29:
fb:ba:28:b8:35:4a:f6:24:6f:c7:08:2f:37:e2:3e:
e6:98:ef:7f:18:33:af:80:b2:38:a8:0a:84:72:fb:
aa:17:8d:f4:4f:ef:03:07:9c:b4:c2:a9:e2:cc:6b:
66:09:76:04:7f:bc:be:5a:4e:ec:e2:df:50:d6:13:
35:2d:ac:53:77:8e:1f:0e:f6:00:89:8c:3c:5b:0a:
c0:83:f8:3e:92:df:aa:84:bd:3e:e1:b9:e4:8d:0f:
65:7d:d1:37:fa:1d:09:5a:a6:6e:33:3f:ff:72:4f:
9f:49:a3:80:45:d7:53:c8:3a:f0:33:75:cc:32:7c:
25:a0:83:45:f8:8e:81:3b:fb:a5:ef:cc:63:0e:e0:
55:b9:f2:8a:36:eb:f6:09:c3:d3:5b:de:82:61:0b:
e1:b8:e7:69:85:b8:21:ac:21:1c:42:a8:bb:d1:8f:
be:bd:76:aa:0c:da:4f:d0:39:5b:c7:53:64:36:40:
c0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D3:C3:D0:8B:1E:34:81:61:0E:A4:3F:E4:82:5D:46:14:71:55:C1
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/jdPD0IseNIFhDqQ_5IJdRhRxVcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.128.0/18
Signature Algorithm: sha256WithRSAEncryption
00:4a:03:aa:35:f7:d3:b4:ea:bd:92:25:65:41:ba:4f:66:9f:
af:a7:82:a3:90:c8:d4:70:3a:5f:dd:06:9c:51:54:e4:e4:ef:
e1:ef:88:62:60:69:50:8e:f0:db:6e:f9:4d:61:bf:a0:a4:47:
46:ae:df:96:54:6a:bd:36:23:01:fe:8a:10:d2:98:83:ce:f6:
13:bf:c7:9d:2c:16:78:35:16:e1:2e:20:cd:99:75:c6:1d:90:
c9:57:c9:85:f9:4e:1b:b4:41:c1:84:61:16:96:75:eb:d7:f1:
5a:ee:86:96:b7:e3:c3:cd:3a:d6:05:f9:51:05:d6:2f:a0:08:
67:74:51:ae:40:94:3b:3c:8f:f4:a8:78:72:d1:47:29:10:73:
bf:51:80:b5:7c:ef:57:ea:7a:ba:ae:e2:0d:d8:49:ee:34:91:
06:e1:f0:ea:67:d0:0f:bb:31:6f:b8:a0:97:82:47:1f:6f:6d:
71:66:06:1e:ed:44:d8:94:fb:88:3c:03:88:2e:24:b7:93:9e:
69:2e:72:42:d7:60:a8:ce:ae:32:3c:56:f7:09:d6:0f:1c:cf:
8c:45:9f:32:9a:7b:19:e9:95:69:ef:dd:11:1f:64:34:ac:f5:
35:2b:ac:95:0b:13:12:cf:8f:08:5a:e6:11:ae:4d:60:6f:98:
58:44:01:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:30 2024 by rpki-client on console-fra.rpki-client.org