Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/15995TpEKQKDncoA82jUQTLNUqQ.roa
File: 15995TpEKQKDncoA82jUQTLNUqQ.roa (raw, json)
Hash identifier: yvb4rPx+o5Y06tbCGvjYpbZTtPRHLP87SSoUafE7nFE=
Subject key identifier: D7:9F:7D:E5:3A:44:29:02:83:9D:CA:00:F3:68:D4:41:32:CD:52:A4
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 3A415C99
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/15995TpEKQKDncoA82jUQTLNUqQ.roa
Signing time: Sat 01 Jan 2022 14:56:17 +0000
ROA not before: Sat 01 Jan 2022 14:56:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31549
IP address blocks: 5.160.222.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 977362073 (0x3a415c99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 14:56:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d79f7de53a442902839dca00f368d44132cd52a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7d:6f:22:71:55:40:49:cc:04:3f:61:a9:ab:
50:51:2a:90:37:00:7c:59:51:f9:cc:56:73:17:f9:
3c:58:0e:72:de:78:06:31:4f:1c:f4:d0:a9:f1:4d:
77:0f:3c:ee:6b:f1:24:91:ac:89:90:d1:62:8c:2c:
e2:0c:50:4c:aa:16:b1:a6:63:bb:d3:c0:de:f9:2a:
77:03:40:55:85:4e:a2:3b:37:58:5e:40:0b:98:ef:
a9:a3:c1:fc:e6:14:ad:23:f7:97:2b:95:76:c7:91:
be:e7:6c:0b:00:16:c3:c8:69:ef:ad:01:76:d7:79:
87:2f:9f:83:cb:cd:21:64:12:c5:35:30:35:32:b4:
d3:13:1a:51:11:c2:bd:ab:43:3e:ba:b0:17:98:0b:
29:33:36:c3:ae:22:6c:1a:31:b2:ea:3a:91:0a:99:
96:f7:36:95:6b:95:8e:6f:71:1d:dc:97:a9:b4:ed:
be:43:2c:13:77:03:5c:70:fe:a6:bc:67:d2:63:bc:
61:34:fb:2c:0c:18:30:03:f1:e9:49:a3:06:38:50:
96:45:da:d3:95:80:3a:e8:ef:97:7b:c5:04:d7:7f:
5d:38:e0:7a:22:06:b2:e5:3a:a3:eb:2f:28:65:10:
af:2b:5d:26:a0:0d:ea:8b:f0:15:01:45:ec:5c:84:
a3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:9F:7D:E5:3A:44:29:02:83:9D:CA:00:F3:68:D4:41:32:CD:52:A4
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/15995TpEKQKDncoA82jUQTLNUqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.222.0/24
Signature Algorithm: sha256WithRSAEncryption
31:7f:f8:1e:4e:30:56:25:01:3e:c3:42:2b:d7:ff:94:b7:c8:
60:ef:68:31:56:87:e6:08:29:34:6e:e2:da:a8:45:fb:5e:ba:
97:45:76:bf:03:12:f2:99:cc:e0:cf:b3:85:d2:d9:41:58:cc:
c4:c5:0f:d8:41:29:80:c4:4e:a2:e2:40:a4:ed:4b:2c:ad:82:
50:a9:69:f9:96:4b:dd:22:97:81:70:50:87:7e:d0:79:fd:a9:
7f:38:a1:cf:16:22:29:a4:a7:12:52:be:f0:f0:ef:49:1b:4d:
b3:bc:aa:73:5d:e1:4d:48:ec:7a:ab:c2:c5:63:5c:c4:8d:f0:
b1:6e:a2:cc:11:e2:06:f9:57:5c:62:91:b9:ff:f2:9d:ea:1b:
61:5a:32:23:aa:35:9e:e5:59:d5:c8:55:70:0f:5e:a2:d2:cd:
c9:81:a0:ea:aa:81:89:45:be:29:07:c4:80:d5:96:c7:ee:fb:
16:e9:b0:e6:29:64:fa:22:4d:9d:2c:06:b4:95:f5:f4:68:44:
43:52:ed:f6:82:6f:95:cb:b9:4a:cc:3c:fc:bc:bc:95:6e:d6:
e1:c2:67:8c:71:00:7d:32:00:8d:07:bb:ee:b9:20:e4:82:6a:
0c:57:1b:ca:fe:8f:18:24:6c:6c:bc:cb:73:d5:e7:b2:d2:2c:
b3:7f:70:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:19 2023 by rpki-client on console-fra.rpki-client.org