Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/fq60dCE-PpeBhKnKgd4fLk0x-Nk.roa
File: fq60dCE-PpeBhKnKgd4fLk0x-Nk.roa (raw, json)
Hash identifier: 32cxZCgQLXvf5HmcrMczWE1fTrD197yh/FzrLu2wZ88=
Subject key identifier: 7E:AE:B4:74:21:3E:3E:97:81:84:A9:CA:81:DE:1F:2E:4D:31:F8:D9
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 495987F4
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/fq60dCE-PpeBhKnKgd4fLk0x-Nk.roa
Signing time: Mon 28 Mar 2022 18:10:41 +0000
ROA not before: Mon 28 Mar 2022 18:10:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49981
IP address blocks: 5.188.232.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1230604276 (0x495987f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Mar 28 18:10:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7eaeb474213e3e978184a9ca81de1f2e4d31f8d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:75:8b:cc:bc:af:21:71:a8:8d:b2:b8:cb:d6:
18:8d:f0:10:0b:3c:45:7e:8b:32:f8:cd:57:bf:da:
b4:ae:78:b8:9c:2a:dc:f0:d5:bf:e8:f7:4a:e7:9f:
f3:57:3d:d2:c2:44:12:85:d4:35:8b:b7:56:70:78:
2a:cf:8c:26:12:4a:c6:1f:b2:d1:5d:0d:35:c2:ad:
c7:56:38:1c:88:46:e3:a4:0d:e9:ea:3f:0b:ac:ee:
a9:87:10:3e:34:76:1f:bb:eb:2c:5f:e1:72:e2:01:
ba:4f:7e:fe:36:06:98:5a:1a:a3:5e:4f:ee:ef:96:
1f:a3:55:ac:45:48:45:35:0d:2c:18:ec:3c:79:01:
02:6e:4e:04:72:49:d5:94:71:57:8e:ac:21:a4:bb:
5b:9f:81:66:ec:48:c4:55:38:07:4e:d1:ef:3f:53:
30:8c:67:2b:9a:1d:e4:5d:98:c2:64:ac:f9:2a:90:
39:6b:dc:83:b9:95:fb:f6:e9:d9:2c:73:6d:0d:72:
dc:97:f1:d2:38:f8:07:88:61:9a:41:79:27:d7:62:
ba:3a:54:77:f1:d7:a1:cd:1d:e5:cc:02:1b:27:7b:
67:c1:c9:88:02:ee:6a:2d:04:13:77:43:c4:39:c3:
28:e6:5f:26:b2:a0:c9:41:20:05:91:2b:fd:af:49:
30:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:AE:B4:74:21:3E:3E:97:81:84:A9:CA:81:DE:1F:2E:4D:31:F8:D9
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/fq60dCE-PpeBhKnKgd4fLk0x-Nk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.188.232.0/24
Signature Algorithm: sha256WithRSAEncryption
59:97:a3:dc:bf:de:16:ee:ef:29:15:7a:1d:9d:19:de:ee:60:
ed:1e:02:92:05:86:5f:5b:c4:2a:7f:38:3a:f5:ff:69:00:39:
4d:5e:85:8b:a9:a8:24:9b:86:87:8a:a5:81:9b:f2:c8:b3:5f:
44:5c:90:57:25:ee:5b:56:9d:3e:89:9f:1b:61:c8:c2:8b:56:
ed:9e:28:b7:5c:be:0a:e4:f9:06:1e:80:4d:46:b4:c4:77:36:
e5:eb:fe:1e:81:c6:92:8b:15:c3:59:68:aa:1f:9a:b8:39:86:
4d:b6:40:64:05:f5:8a:ed:a3:0f:2d:b2:99:31:a3:6e:af:0d:
d2:f4:4b:a1:8f:b9:56:31:6f:af:de:b0:53:5d:be:db:86:47:
9e:17:62:54:fc:7d:c2:68:74:cb:df:ab:bb:ae:23:7e:91:81:
fa:3a:c3:a1:58:48:89:cb:ca:f4:cf:fa:8e:6d:df:98:fc:3a:
c9:30:5a:0d:81:48:bb:24:b4:84:fb:b3:00:dc:8d:57:55:8a:
58:7a:27:31:ff:c9:d0:12:52:e6:23:c2:82:12:a3:1a:16:8d:
ae:be:bb:6e:80:34:70:20:0b:d3:3e:fd:87:62:f6:ee:1f:44:
aa:3f:4e:32:67:f5:9f:d2:ca:aa:3e:fc:b8:d0:3d:97:fb:ee:
d6:3d:22:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:43 2023 by rpki-client on console-ams.rpki-client.org