Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/1HToip8BqoHjtUK4HN7heDoHP8w.roa
File: 1HToip8BqoHjtUK4HN7heDoHP8w.roa (raw, json)
Hash identifier: QlD2SWYfi5VKAqG1k+8JdRKEE4qgHiuOgiL57OgFQgc=
Subject key identifier: D4:74:E8:8A:9F:01:AA:81:E3:B5:42:B8:1C:DE:E1:78:3A:07:3F:CC
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 3A4D0B13
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/1HToip8BqoHjtUK4HN7heDoHP8w.roa
Signing time: Sat 01 Jan 2022 14:56:22 +0000
ROA not before: Sat 01 Jan 2022 14:56:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51235
IP address blocks: 5.160.180.0/22 maxlen: 22
5.160.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 978127635 (0x3a4d0b13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 14:56:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d474e88a9f01aa81e3b542b81cdee1783a073fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b6:69:f1:ca:fc:f9:3d:d4:fd:76:c9:5b:4e:
b9:f9:8f:29:a5:68:6d:16:8d:43:c1:e9:86:67:1d:
64:5b:a3:b8:00:38:cf:9c:e3:fe:01:71:f8:b0:da:
e5:2a:4d:79:1e:89:70:ed:b0:2f:d7:b6:05:b7:34:
80:cc:2b:21:b2:90:32:bd:43:65:fb:0d:8a:98:79:
32:f6:60:dc:64:62:49:29:91:4c:7a:bf:9d:39:1d:
ca:dd:b2:23:c0:1f:42:7f:b8:38:4e:c8:91:64:59:
cf:39:64:ba:69:18:32:14:ac:7f:0f:8c:a3:20:f0:
9e:c8:a5:72:40:20:d4:ce:71:ea:c3:1a:1a:93:55:
31:70:c2:51:56:98:25:b1:14:3d:5e:af:d0:46:5d:
8b:50:01:e4:90:e7:ef:00:1b:bb:4b:33:ff:18:5d:
f8:b1:5e:f8:43:9c:ae:fa:7e:1f:a1:c1:23:46:15:
f9:4a:e4:ac:cb:5f:b2:72:d4:c3:ce:90:af:8d:7c:
99:cd:21:3d:2c:3a:8c:91:30:ae:3e:64:37:34:ed:
ef:6a:5d:33:dd:7d:55:f3:8e:2e:64:56:89:9a:e6:
d9:c6:21:59:96:0f:7e:2d:c9:e5:1d:93:2a:86:8d:
4d:5f:fe:5e:00:ea:0c:71:2a:f5:25:14:af:bf:54:
45:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:74:E8:8A:9F:01:AA:81:E3:B5:42:B8:1C:DE:E1:78:3A:07:3F:CC
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/1HToip8BqoHjtUK4HN7heDoHP8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.128.0/24
5.160.180.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:74:cc:6b:22:5e:21:63:84:04:16:fa:25:37:c6:15:86:cc:
64:7d:58:4a:4d:80:7b:f7:15:33:35:a1:ae:6a:1d:06:9e:ef:
2b:71:04:2d:ca:a0:e2:f1:f2:be:b0:06:62:94:42:9d:f7:10:
5f:ee:f7:b7:b3:0f:ee:0a:9d:c7:9a:cf:bb:5b:cd:ea:12:c9:
1a:61:c9:cf:41:b3:63:54:2d:20:99:98:eb:f2:42:25:fd:54:
67:45:3b:35:a5:83:a1:01:19:c2:97:5a:3c:28:22:17:e6:18:
30:d0:81:ea:93:b7:b6:d4:3c:c0:85:d6:7e:c9:3f:c0:49:26:
b2:1e:26:0b:27:79:51:ed:b5:38:eb:44:5a:87:6c:c3:20:f3:
c0:d6:33:92:d2:72:85:18:5f:b5:59:14:94:87:99:47:80:d2:
84:bf:0f:e3:c3:76:38:5b:a2:a0:e4:32:b5:10:77:ba:53:c7:
3a:55:f9:34:19:3d:a2:ef:c8:28:3d:3c:f4:cd:6e:4b:04:e1:
0b:0d:f6:d5:01:92:6d:5e:bc:e6:00:d3:4e:b0:61:e5:9c:57:
46:6b:23:96:c1:04:63:e7:c6:04:00:60:91:c1:da:cf:69:d9:
2f:87:d5:01:d2:66:84:1a:35:1b:06:e1:e6:f8:63:a5:20:c9:
5b:50:c8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:20 2024 by rpki-client on console-ams.rpki-client.org