Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/7k0Vb7LszgASgJ4e0MOzC_bsHtA.roa
File: 7k0Vb7LszgASgJ4e0MOzC_bsHtA.roa (raw, json)
Hash identifier: sLMUkyzoupwRvrF0+BYdebPap+EaZrf3bld+eBRtfq8=
Subject key identifier: EE:4D:15:6F:B2:EC:CE:00:12:80:9E:1E:D0:C3:B3:0B:F6:EC:1E:D0
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0926EEFD
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/7k0Vb7LszgASgJ4e0MOzC_bsHtA.roa
Signing time: Sat 01 Jan 2022 16:00:48 +0000
ROA not before: Sat 01 Jan 2022 16:00:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209181
IP address blocks: 5.182.49.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153546493 (0x926eefd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 16:00:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ee4d156fb2ecce0012809e1ed0c3b30bf6ec1ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ce:e7:04:73:88:7b:ca:65:d4:a8:7a:85:ef:
e0:09:d3:62:44:43:d7:aa:32:8f:d1:47:21:3d:cb:
de:ff:d1:e7:fb:cc:d9:98:5a:69:b6:8b:07:6f:11:
6d:d9:37:d7:75:fe:77:22:6d:91:e3:f0:f0:c3:22:
bc:0b:66:ea:63:38:c5:dc:6f:09:53:22:a6:90:83:
2a:2e:bc:b1:8d:e7:a1:e6:21:45:ab:20:f1:62:18:
8c:41:df:86:b0:1f:c7:6b:80:e3:a4:9d:28:ca:1e:
40:6e:0e:33:e6:0f:72:0a:ac:b2:8d:07:5c:e1:5e:
38:38:d0:8b:fe:23:39:a0:ed:bf:f4:9d:3e:4b:2d:
8a:72:4a:95:94:e4:9e:1d:c5:1a:94:ea:57:a9:cc:
f7:6b:0c:3c:66:c5:25:fd:51:38:2f:3f:db:f5:af:
d5:a8:02:03:01:8f:69:35:a4:51:96:af:41:e0:aa:
5c:2f:f3:ba:f7:5c:47:f3:17:6f:f2:ab:15:6d:4e:
c3:7e:1e:bc:ee:6a:b6:7f:ab:41:71:47:54:f9:f1:
d6:ad:4c:5a:1e:fe:14:31:56:9e:fc:11:f0:2f:4c:
ab:d8:13:4d:48:a3:32:e3:3c:17:3f:a8:02:d4:3e:
5a:d0:89:2d:6e:0e:cb:94:ad:15:bd:31:d2:ff:0e:
18:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:4D:15:6F:B2:EC:CE:00:12:80:9E:1E:D0:C3:B3:0B:F6:EC:1E:D0
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/7k0Vb7LszgASgJ4e0MOzC_bsHtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.49.0/24
Signature Algorithm: sha256WithRSAEncryption
72:a0:88:53:06:d0:16:bc:65:26:5b:c8:f0:53:e7:8e:14:b2:
bc:a7:62:ce:94:55:8d:6d:aa:d4:c7:85:b2:4c:f7:86:70:cb:
54:35:27:1c:10:d0:58:eb:c9:0a:36:60:f6:6b:ca:ca:e8:a9:
c6:5f:f1:33:b7:51:01:99:88:a1:7e:3b:25:4d:90:0d:9b:29:
40:45:65:69:7a:26:da:5d:30:b5:ba:9e:5d:2e:90:af:1c:8a:
48:a3:20:b5:08:aa:ec:33:3b:65:8a:af:40:80:9f:39:ef:25:
d7:bc:26:dc:b2:44:f6:81:e6:fe:d6:31:c0:f5:42:8c:ab:79:
b0:68:10:72:c2:2b:b1:f9:e7:a1:56:df:3d:66:b2:fd:19:79:
de:98:fe:a1:7e:36:4d:30:3d:70:03:a9:a3:f8:16:70:68:8f:
0c:b7:b1:55:7f:51:dc:65:af:88:5e:e0:c3:8e:db:8f:7e:25:
f4:ce:b2:bc:3e:15:07:d7:ad:7d:59:d7:31:04:04:70:b1:83:
5e:3b:d8:6c:00:42:c8:b9:54:1d:40:1f:5c:2f:06:53:77:17:
f6:8c:95:e3:06:24:bc:e1:48:e0:bf:48:da:f4:a1:b4:13:37:
88:47:ce:99:71:7f:6d:a1:c2:20:d2:4c:90:2f:77:85:3a:8f:
49:7b:24:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:48 2024 by rpki-client on console-fra.rpki-client.org