Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/yL94iVjLDzqvKCZgVgYEARCYRCY.roa
File: yL94iVjLDzqvKCZgVgYEARCYRCY.roa (raw, json)
Hash identifier: K0ipTScBqPCjj0M5gSnbS2BqvbnGeYSxumLRZ8AaOrY=
Subject key identifier: C8:BF:78:89:58:CB:0F:3A:AF:28:26:60:56:06:04:01:10:98:44:26
Certificate issuer: /CN=18c1ac6882de0893060f80917d7b858c5c30f061
Certificate serial: 0184522112A11781F8137F4D13AB8E6B4F70
Authority key identifier: 18:C1:AC:68:82:DE:08:93:06:0F:80:91:7D:7B:85:8C:5C:30:F0:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/yL94iVjLDzqvKCZgVgYEARCYRCY.roa
Signing time: Mon 07 Nov 2022 12:46:49 +0000
ROA not before: Mon 07 Nov 2022 12:46:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51236
IP address blocks: 5.180.57.0/24 maxlen: 24
2a0c:3d00::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:52:21:12:a1:17:81:f8:13:7f:4d:13:ab:8e:6b:4f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18c1ac6882de0893060f80917d7b858c5c30f061
Validity
Not Before: Nov 7 12:46:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c8bf788958cb0f3aaf2826605606040110984426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ac:1e:44:63:a1:2a:75:2c:df:c5:c4:4d:0e:
40:d3:d0:3f:26:a5:ea:de:f0:2b:3e:9f:c0:d5:11:
f5:13:38:13:e5:91:80:4e:ad:9a:ac:03:2a:ae:84:
81:30:62:f3:c7:01:f6:0e:f1:dd:ae:6e:f7:28:9f:
ae:29:34:82:f6:c8:69:f2:37:e1:15:36:76:b0:76:
d2:95:78:a7:78:cd:a0:e0:b4:c8:0d:f3:00:a7:fe:
7b:8d:e0:cf:4b:6a:a8:14:5b:d0:f9:1a:ed:b2:fc:
64:5f:63:ed:b8:c8:a9:19:f4:d0:3e:f5:e9:23:2d:
bb:01:8f:2b:eb:a8:95:66:26:69:17:59:b3:1e:ac:
42:d5:f5:f7:d6:5a:50:0f:e0:7b:a5:8f:e7:e2:f4:
25:fb:c6:9a:51:59:c2:02:fd:d8:c7:e9:ca:7a:95:
e0:1c:78:e6:99:f4:23:ed:6a:d5:da:d3:44:e1:e2:
b5:9e:25:87:ae:0a:54:60:6b:87:85:20:d9:77:ec:
9e:53:94:27:1d:3e:15:d4:b9:54:db:cf:10:77:93:
9f:00:64:cd:c4:9f:d1:d4:36:7e:b3:fe:e3:67:11:
54:79:6e:4e:a4:70:8c:e1:3e:c4:2a:f0:fa:7e:db:
bb:db:b0:3b:b0:2a:68:80:37:e3:c2:9b:97:db:2a:
ee:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:BF:78:89:58:CB:0F:3A:AF:28:26:60:56:06:04:01:10:98:44:26
X509v3 Authority Key Identifier:
keyid:18:C1:AC:68:82:DE:08:93:06:0F:80:91:7D:7B:85:8C:5C:30:F0:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/yL94iVjLDzqvKCZgVgYEARCYRCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.57.0/24
IPv6:
2a0c:3d00::/29
Signature Algorithm: sha256WithRSAEncryption
6a:0c:12:34:4c:7c:48:ad:a7:cf:d9:6e:3c:0f:c6:1f:51:15:
f8:6e:f7:80:6f:c3:6c:a9:ca:59:d3:dc:a2:12:9b:4b:6c:0d:
b8:22:80:60:a1:29:67:73:26:4a:2d:c2:11:bb:4e:11:74:a0:
d4:4e:dd:38:f0:82:d0:76:2c:15:5b:10:fc:44:c7:f6:7d:ad:
ad:23:1a:6b:23:df:e3:e5:8e:c2:6e:1d:7a:e5:58:fd:09:6f:
81:76:96:00:fe:d6:c8:8e:ba:83:70:ce:39:7d:99:be:f0:35:
fb:35:30:7d:1f:61:28:34:2d:5e:3f:c7:5c:64:ad:d8:cf:1b:
f4:67:1b:67:1e:67:a6:9d:1f:be:e7:68:fa:ed:bb:a7:77:36:
33:2d:30:de:f2:5a:5d:cf:a4:b8:b7:5a:3f:2c:31:de:d8:a5:
1c:7e:64:55:0a:b0:15:c8:27:8a:c0:d9:cf:36:b1:12:90:2d:
4c:55:bb:62:61:e5:3a:e3:2c:41:ff:e5:4a:e2:fe:9f:24:0c:
ba:bd:85:9b:96:34:b5:aa:91:20:77:ac:a6:24:f9:67:24:e1:
c4:1f:e0:34:7e:a1:54:9c:a9:4b:04:b7:89:a8:fc:0b:9e:f6:
0f:6a:2e:fa:e7:bc:8a:db:83:9c:d7:e6:bb:0f:7b:9b:e0:4a:
fd:ee:d4:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:39 2024 by rpki-client on console-fra.rpki-client.org