Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/tANvgZVkWYdEEamnrmtcx60MkMQ.roa
File: tANvgZVkWYdEEamnrmtcx60MkMQ.roa (raw, json)
Hash identifier: 6yxSmPvPuw/7fpnEGk054Wfwr1Bq4CO9PNmX4GiIV1I=
Subject key identifier: B4:03:6F:81:95:64:59:87:44:11:A9:A7:AE:6B:5C:C7:AD:0C:90:C4
Certificate issuer: /CN=18c1ac6882de0893060f80917d7b858c5c30f061
Certificate serial: 01848172A2682FBD8C85AAA73E76228BEA72
Authority key identifier: 18:C1:AC:68:82:DE:08:93:06:0F:80:91:7D:7B:85:8C:5C:30:F0:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/tANvgZVkWYdEEamnrmtcx60MkMQ.roa
Signing time: Wed 16 Nov 2022 17:18:04 +0000
ROA not before: Wed 16 Nov 2022 17:18:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56987
IP address blocks: 5.180.57.0/24 maxlen: 24
5.180.58.0/23 maxlen: 23
2a0c:3d00::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:81:72:a2:68:2f:bd:8c:85:aa:a7:3e:76:22:8b:ea:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18c1ac6882de0893060f80917d7b858c5c30f061
Validity
Not Before: Nov 16 17:18:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b4036f81956459874411a9a7ae6b5cc7ad0c90c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:81:a6:46:0c:b3:2b:f0:1e:de:a5:85:29:62:
72:1a:b2:dd:2d:e3:ae:56:83:98:fe:c4:4f:67:fe:
13:9d:4b:d6:65:8a:50:10:a9:7d:d8:6f:e1:c9:8a:
7c:95:60:4c:ac:d8:74:21:4d:a9:a5:15:5a:dc:49:
56:72:d3:63:d5:5b:d8:45:f2:97:a2:91:e3:4b:fe:
e1:51:33:53:5a:c2:f7:19:ad:5e:b9:1a:a4:5a:53:
5d:bb:a2:f4:a0:f2:23:cf:16:6f:d0:be:db:70:ae:
82:c4:18:42:0f:c5:3a:6c:35:c0:1e:e3:90:1c:a9:
b3:c0:ae:d4:cb:4f:2b:a5:89:3f:04:a3:1b:c3:73:
fe:ff:54:2c:29:33:83:46:45:54:a3:60:ad:f6:8f:
89:96:f2:ba:ee:92:c5:47:f6:c9:6b:34:64:da:e9:
9c:18:17:96:69:8a:a8:8d:79:90:27:cc:00:82:f0:
8a:52:24:ce:35:a5:49:05:13:6d:1d:3a:8c:2d:f1:
0b:59:a0:59:ab:53:4e:fa:ce:81:3a:a3:9a:5a:3e:
bd:8d:30:35:78:34:c7:cd:4c:59:07:14:5e:6c:57:
0b:8e:ca:10:b2:c5:d4:92:4d:67:b9:08:e7:e4:d0:
6c:da:bb:2e:cc:40:09:e6:ed:75:ef:d0:cc:0b:96:
41:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:03:6F:81:95:64:59:87:44:11:A9:A7:AE:6B:5C:C7:AD:0C:90:C4
X509v3 Authority Key Identifier:
keyid:18:C1:AC:68:82:DE:08:93:06:0F:80:91:7D:7B:85:8C:5C:30:F0:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/tANvgZVkWYdEEamnrmtcx60MkMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.57.0-5.180.59.255
IPv6:
2a0c:3d00::/29
Signature Algorithm: sha256WithRSAEncryption
67:9a:b6:a6:cb:af:9b:a5:ae:1c:38:36:e0:2e:4f:d1:65:ed:
2c:0e:8a:fb:eb:8b:57:1a:51:4c:00:16:bf:37:75:9a:25:77:
d2:a2:1c:92:a5:24:11:93:ab:bc:d4:48:a7:94:73:04:14:3c:
56:23:ad:9a:75:ac:15:c8:04:2a:1c:00:6e:38:fe:3c:ba:58:
ce:e3:04:72:fc:29:d8:5e:c6:13:2f:38:1f:5a:09:52:db:e5:
4b:29:d3:55:94:f2:f2:72:cf:c7:2b:0d:ee:21:aa:df:fd:62:
e0:69:e3:75:e3:4b:c5:b2:79:23:b4:a1:c2:c6:26:a1:51:ba:
7c:43:24:21:1b:98:88:65:6a:c1:5a:6d:2a:63:72:95:c5:37:
31:41:cf:6a:1e:21:21:21:5d:4c:7e:70:af:1c:0e:55:59:61:
b4:7b:fc:52:dc:3f:1d:f8:c1:1a:90:5b:bb:fe:a7:6f:be:53:
30:a8:9a:cb:7e:e6:47:4c:e1:69:04:5f:fd:44:95:45:90:21:
23:9c:7d:bf:49:c9:57:bf:fd:47:20:18:95:ba:7a:07:a6:7e:
40:cd:54:11:bc:20:f9:26:15:f6:d2:f4:50:d6:dc:f5:58:5b:
98:a1:fc:c1:96:fc:31:83:b6:3d:f7:67:e9:46:15:c4:0d:e2:
e6:3a:d5:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:03 2024 by rpki-client on console-ams.rpki-client.org