Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/CW1vf-EJsLvKq3PKGg8aYHIPK94.roa
File: CW1vf-EJsLvKq3PKGg8aYHIPK94.roa (raw, json)
Hash identifier: eDf8U53TdxSMbdMpUm+Az9Gm3OE7zUQojukh3QV1EsM=
Subject key identifier: 09:6D:6F:7F:E1:09:B0:BB:CA:AB:73:CA:1A:0F:1A:60:72:0F:2B:DE
Certificate issuer: /CN=fab796d980fa60fe2514fce62646f45d12c95165
Certificate serial: 0183F9AE46EF7037653B092965407FC243F3
Authority key identifier: FA:B7:96:D9:80:FA:60:FE:25:14:FC:E6:26:46:F4:5D:12:C9:51:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-reW2YD6YP4lFPzmJkb0XRLJUWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/CW1vf-EJsLvKq3PKGg8aYHIPK94.roa
Signing time: Fri 21 Oct 2022 08:34:51 +0000
ROA not before: Fri 21 Oct 2022 08:34:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209435
IP address blocks: 5.253.173.0/24 maxlen: 24
5.253.172.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f9:ae:46:ef:70:37:65:3b:09:29:65:40:7f:c2:43:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fab796d980fa60fe2514fce62646f45d12c95165
Validity
Not Before: Oct 21 08:34:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=096d6f7fe109b0bbcaab73ca1a0f1a60720f2bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ac:8b:9e:16:5a:50:d5:4c:7c:64:4f:db:93:
97:05:a0:05:55:4e:23:10:e7:a0:7b:28:b3:17:da:
07:7b:53:eb:55:38:2c:24:8a:24:18:2d:98:9e:58:
1a:eb:f4:f9:54:36:c9:b8:c0:50:e8:7d:11:54:05:
fd:a3:b4:e2:17:ab:76:ba:7f:67:2b:72:13:bd:32:
c4:e9:69:24:16:23:ee:69:b7:39:14:9b:0b:3c:44:
84:9b:2f:8d:70:5f:60:3e:96:6d:88:62:1f:49:a0:
6c:ae:19:3a:1d:b0:dd:6b:39:3e:87:75:6d:be:4b:
8a:1f:75:da:03:1a:fc:8e:74:55:c7:ea:76:01:a5:
49:99:6d:3c:0f:6c:ab:cb:66:7e:b3:ce:cf:d5:7c:
65:80:42:04:d1:5f:06:2b:a4:ef:33:ba:14:cd:f6:
98:f1:67:5b:18:45:ce:4d:f8:40:f7:7a:3c:a9:2f:
68:aa:bc:d3:77:6f:b0:81:b3:ed:4b:4d:03:f6:5f:
92:5b:f9:3e:84:f0:be:5d:02:3f:66:89:2c:00:e1:
c0:4b:5b:54:c0:a8:59:99:9e:47:c2:1d:91:18:82:
ff:43:70:ea:88:54:8f:23:d1:c0:e9:1e:06:f5:de:
6d:b8:0c:c5:3d:d5:64:f9:47:e1:0e:2c:2d:dc:ca:
53:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:6D:6F:7F:E1:09:B0:BB:CA:AB:73:CA:1A:0F:1A:60:72:0F:2B:DE
X509v3 Authority Key Identifier:
keyid:FA:B7:96:D9:80:FA:60:FE:25:14:FC:E6:26:46:F4:5D:12:C9:51:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-reW2YD6YP4lFPzmJkb0XRLJUWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/CW1vf-EJsLvKq3PKGg8aYHIPK94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.172.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:40:24:e0:be:9f:7f:17:79:7a:da:37:ad:48:ec:b2:48:73:
35:51:1b:bb:23:cb:0f:3d:4b:b0:0c:34:de:33:2f:b9:c9:ee:
a9:e3:6d:5c:3a:b7:46:ff:7b:33:14:85:5e:43:04:f5:6d:6b:
49:b8:24:79:9a:4b:fb:e7:f6:06:95:77:75:27:bb:c3:9a:9a:
40:b8:9f:5d:e5:45:61:2e:84:af:6b:4b:ee:f2:8e:40:c8:7f:
fc:f1:40:28:82:7d:d2:63:ed:38:63:0e:4f:2c:ee:9a:b2:44:
43:a5:2f:84:51:6d:e1:4a:64:9f:17:83:1b:20:ee:bf:44:1c:
2c:03:ea:fb:b9:4f:66:76:6a:4a:b3:47:2c:8a:b7:8a:14:96:
1b:4b:99:42:cc:d2:1c:f3:26:36:b8:d8:3d:d3:f2:36:2f:50:
2e:24:93:d1:a1:18:2a:9b:e7:8b:21:65:1a:c6:bd:71:18:89:
98:c3:58:fd:80:4d:f2:31:ff:88:a3:13:b1:dd:4b:17:2a:e5:
ec:d3:e1:c3:27:2f:f8:94:db:a1:b9:70:b9:14:34:e5:eb:ce:
11:00:47:75:05:bf:dc:72:53:d2:7f:c3:00:24:67:c7:83:29:
61:49:30:2d:cb:ea:a2:d3:b0:96:f0:c6:5a:d7:82:f7:d2:bd:
e5:96:4a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:47 2024 by rpki-client on console-ams.rpki-client.org