Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/XA7CR2EZrG1ij2F613XJIB0KgK4.roa
File: XA7CR2EZrG1ij2F613XJIB0KgK4.roa (raw, json)
Hash identifier: RAx0wHjo7GvtQK8U9SirCCPVMFdlYPs9B604YRiKGUs=
Subject key identifier: 5C:0E:C2:47:61:19:AC:6D:62:8F:61:7A:D7:75:C9:20:1D:0A:80:AE
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 4869EC12
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/XA7CR2EZrG1ij2F613XJIB0KgK4.roa
Signing time: Sat 01 Jan 2022 03:00:29 +0000
ROA not before: Sat 01 Jan 2022 03:00:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50113
IP address blocks: 5.101.88.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1214901266 (0x4869ec12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 1 03:00:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c0ec2476119ac6d628f617ad775c9201d0a80ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:66:aa:21:79:12:89:ae:42:db:75:d1:c9:73:
16:20:31:a8:fa:a5:b1:dc:7b:47:9f:d2:10:09:9f:
27:e4:e0:99:3e:83:c1:d6:26:6c:c7:f1:ad:7e:ae:
78:13:5a:15:00:db:ac:2b:82:86:0e:b0:f7:42:eb:
e8:eb:24:37:7e:60:57:4b:ca:d9:ab:f1:6c:96:cd:
d5:c8:3d:be:58:d8:ab:56:75:51:87:24:16:09:93:
9a:8f:7f:8d:c0:85:f5:a3:ab:16:29:fe:6c:37:b8:
be:ec:83:f2:87:83:c2:aa:a4:13:36:95:dd:d5:98:
d2:8e:d5:b8:12:a7:cb:4d:9e:89:cd:89:28:e3:15:
b1:48:52:bf:73:42:ab:91:a6:66:00:43:85:ce:cb:
59:1f:10:f0:e0:4f:56:71:03:18:c9:ab:15:83:aa:
fd:e5:c0:d8:54:bf:8c:56:59:76:1c:9e:8b:35:59:
43:09:e1:6b:01:83:7d:da:71:f3:24:77:a2:d9:a5:
7e:11:c1:5b:59:e1:5a:ef:77:e6:e7:51:fb:a9:76:
53:50:23:03:79:21:19:4d:d3:80:ad:db:28:15:74:
ca:b8:45:2b:b4:55:9b:7b:02:6b:12:54:32:9a:65:
68:b4:cd:fd:5a:a8:e3:22:0f:c3:f4:c8:df:c4:e4:
28:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:0E:C2:47:61:19:AC:6D:62:8F:61:7A:D7:75:C9:20:1D:0A:80:AE
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/XA7CR2EZrG1ij2F613XJIB0KgK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.101.88.0/24
Signature Algorithm: sha256WithRSAEncryption
34:e3:69:96:e1:92:87:b9:da:99:31:2d:6d:6e:f2:5f:f8:09:
63:bc:61:93:1d:67:ed:02:af:b4:d5:91:ab:40:0b:03:9e:eb:
a9:a3:7e:33:87:15:e2:ed:0b:2c:04:1e:fb:b2:35:61:41:43:
de:bf:e9:06:ff:46:65:40:11:a2:cf:db:f4:4c:5b:7b:eb:4a:
97:8c:0a:0f:e0:56:e3:ee:04:e7:8f:2b:11:6d:0f:a7:1f:60:
ab:89:8b:80:41:ac:52:7f:8f:8c:b0:3e:6f:93:1d:55:92:8c:
0b:ae:18:49:3f:eb:c3:f8:d1:18:08:85:35:05:6a:98:1f:aa:
b3:05:44:9e:de:da:70:df:26:19:e6:ad:fa:3b:af:10:69:09:
ea:36:22:c2:03:c7:d4:1a:c6:2c:0a:e4:d9:b6:51:00:59:cf:
20:af:82:c1:1c:1c:1e:44:fc:f2:de:9f:ed:ee:cb:99:0e:49:
3d:a6:15:c9:2e:c7:26:4a:ab:21:ec:5e:69:f8:e6:8b:1a:18:
c8:7e:55:b3:7f:b3:51:c6:10:0b:e0:35:06:82:88:56:76:d0:
ae:e9:de:b7:6c:b3:69:01:e6:18:b9:6a:d3:d4:0e:e4:d9:dd:
96:36:3f:2a:e0:58:f4:68:f6:20:e6:e1:23:f3:f2:5b:93:f9:
7c:05:9c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:43 2023 by rpki-client on console-ams.rpki-client.org