Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/4OD52-vhf10ZDWbMjJz4E69Ypf8.roa
File: 4OD52-vhf10ZDWbMjJz4E69Ypf8.roa (raw, json)
Hash identifier: dsHJm+2vUrgskjRY4o0BRUb8YGfdEVeDP5o1PEq8zWI=
Subject key identifier: E0:E0:F9:DB:EB:E1:7F:5D:19:0D:66:CC:8C:9C:F8:13:AF:58:A5:FF
Certificate issuer: /CN=fab796d980fa60fe2514fce62646f45d12c95165
Certificate serial: 0916DEDB
Authority key identifier: FA:B7:96:D9:80:FA:60:FE:25:14:FC:E6:26:46:F4:5D:12:C9:51:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-reW2YD6YP4lFPzmJkb0XRLJUWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/4OD52-vhf10ZDWbMjJz4E69Ypf8.roa
Signing time: Sat 01 Jan 2022 05:02:13 +0000
ROA not before: Sat 01 Jan 2022 05:02:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209435
IP address blocks: 5.253.172.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152493787 (0x916dedb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fab796d980fa60fe2514fce62646f45d12c95165
Validity
Not Before: Jan 1 05:02:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e0e0f9dbebe17f5d190d66cc8c9cf813af58a5ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fe:e5:bf:bf:37:4c:13:28:28:4e:04:55:be:
4f:12:78:2e:cb:ff:c0:b9:ed:2c:b2:cc:fd:2b:fd:
19:b1:e0:73:8c:26:40:84:fe:d0:85:3d:aa:9e:d3:
65:a7:5a:e7:a8:a5:a9:f3:c4:9a:23:b8:22:14:05:
e0:c1:e6:a2:4b:82:01:06:ae:05:37:cb:9d:2b:bf:
64:21:78:c6:23:c7:fb:f4:56:32:5a:dd:bf:76:50:
84:37:a8:58:82:47:a5:5c:b6:bd:b6:ed:9a:a2:cc:
8f:b0:df:60:51:d5:37:53:ef:82:09:22:c9:d4:00:
f5:1e:0d:94:4e:90:b4:d0:6d:6c:6c:14:31:06:69:
4c:45:b3:26:9b:76:83:49:51:7c:03:9e:0a:ec:69:
4a:c7:be:4f:06:02:6a:19:d3:cb:be:c7:11:5e:20:
2a:bb:b8:f4:cb:c8:e0:2c:76:ab:7b:d3:87:5a:27:
ad:f8:10:b4:2f:de:a7:ec:ee:3c:95:f6:05:09:1f:
c9:b7:6c:42:9c:78:ee:91:02:15:e8:66:74:f1:d2:
64:71:f8:66:13:b2:c7:9d:0a:ee:2f:3a:59:4e:65:
a1:38:42:a4:98:90:d4:90:65:eb:ef:48:0e:49:b6:
ac:f5:48:30:f6:fc:a1:3e:41:69:98:30:35:1b:49:
21:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E0:F9:DB:EB:E1:7F:5D:19:0D:66:CC:8C:9C:F8:13:AF:58:A5:FF
X509v3 Authority Key Identifier:
keyid:FA:B7:96:D9:80:FA:60:FE:25:14:FC:E6:26:46:F4:5D:12:C9:51:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-reW2YD6YP4lFPzmJkb0XRLJUWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/4OD52-vhf10ZDWbMjJz4E69Ypf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.172.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:f8:7f:cf:fd:df:32:49:2b:cb:12:d1:20:76:1f:bb:65:0e:
d1:7d:2b:45:a4:b5:88:91:91:0f:92:4e:6e:f6:fd:2c:57:bb:
82:64:e7:02:3b:9a:11:00:96:8d:1b:a8:18:b2:ca:72:86:ac:
a7:25:43:39:7e:ec:eb:e4:98:13:9d:41:0d:40:f9:61:dc:1c:
72:01:4b:c9:f7:ed:79:15:f7:bc:71:a9:af:9b:9c:a9:75:bc:
d7:10:65:49:1a:0d:30:2a:61:9a:ca:8e:13:17:41:26:72:c8:
d2:9b:3a:d3:09:bd:c7:fe:ba:ba:7b:19:6f:49:28:82:75:ac:
6f:2a:93:3c:5b:6e:03:0a:4b:e9:8d:45:ef:9e:3a:a7:a6:8a:
d2:6b:72:46:1b:27:b9:7f:2b:2a:f9:47:00:90:56:28:b2:01:
32:d3:09:be:24:61:e8:bb:76:ad:ea:23:b0:6d:55:9b:11:13:
dc:01:33:0d:6b:89:79:a7:cf:00:75:49:ae:1a:9e:e8:9f:20:
7a:07:6b:c4:14:ba:a7:13:04:88:cf:fa:7e:7f:b2:b7:5d:9d:
ab:04:a5:8c:d4:02:1d:90:e3:d8:18:45:d7:24:60:e6:e3:e9:
1c:26:90:da:53:9a:d9:f7:51:3d:c3:f1:15:c0:b6:15:fe:04:
23:a5:11:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:47 2024 by rpki-client on console-ams.rpki-client.org