Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/3Tzgm6WdzZ46OGCQl2ySWgya4Ro.roa
File: 3Tzgm6WdzZ46OGCQl2ySWgya4Ro.roa (raw, json)
Hash identifier: 7uvw0lKcu+mh3AHXQ2u0PHD7tKK6JtOrjkLJHRMS4gU=
Subject key identifier: DD:3C:E0:9B:A5:9D:CD:9E:3A:38:60:90:97:6C:92:5A:0C:9A:E1:1A
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 3A3BEA70
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/3Tzgm6WdzZ46OGCQl2ySWgya4Ro.roa
Signing time: Sat 01 Jan 2022 14:56:15 +0000
ROA not before: Sat 01 Jan 2022 14:56:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3177
IP address blocks: 5.160.129.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 977005168 (0x3a3bea70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 14:56:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dd3ce09ba59dcd9e3a386090976c925a0c9ae11a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:67:65:23:c7:d7:79:18:ff:b8:d3:84:0c:e1:
54:b0:a1:65:7c:b2:94:62:9f:77:91:b7:09:57:55:
f6:41:b8:dd:d9:eb:d9:56:49:1a:0e:bc:42:d5:10:
e1:e8:73:69:77:2e:d9:3a:13:c8:6a:d9:28:08:6b:
60:79:39:84:bc:b3:d2:68:b4:3f:5b:fa:6a:6f:b5:
d6:d2:eb:9f:fc:7c:ea:b6:5e:57:c1:ec:fc:fa:7b:
e9:e2:6a:a7:11:4b:6e:c5:a6:03:0a:49:1d:d0:0c:
34:b5:7d:c9:d5:4f:28:e4:72:c8:ce:71:50:c0:53:
fc:9e:e1:94:24:03:db:96:2e:13:99:01:0d:b1:0b:
25:2a:79:a1:b7:9b:2d:63:55:65:8f:0b:8b:ff:18:
77:cd:90:a8:0a:c1:b4:44:5a:29:79:fb:37:74:1e:
44:7c:37:54:ed:93:36:63:57:1f:dd:aa:4d:39:36:
88:06:8f:9f:0c:b7:95:c3:15:44:d7:33:aa:1e:42:
51:62:51:47:3c:98:de:7c:13:b2:ef:2d:e4:5b:d2:
67:4c:8c:e8:56:cb:07:de:29:0a:5a:5f:05:a7:26:
e7:6c:8b:97:ff:19:d1:ae:0f:36:4a:3d:06:fa:e3:
18:d3:2b:69:0c:98:25:77:f6:93:a5:f8:20:dd:86:
a4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:3C:E0:9B:A5:9D:CD:9E:3A:38:60:90:97:6C:92:5A:0C:9A:E1:1A
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/3Tzgm6WdzZ46OGCQl2ySWgya4Ro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.129.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:b5:5f:d7:fe:88:15:04:a3:3f:6d:e5:5a:80:43:94:56:4e:
6f:f2:89:52:4e:f4:9c:15:f4:33:94:04:25:7c:89:ab:f7:07:
06:78:51:85:2c:74:4a:01:fe:8c:b0:a6:78:d3:1d:20:98:73:
99:b8:47:17:30:bf:27:02:7c:d7:b6:bd:5f:6e:92:3e:79:7b:
38:13:bd:11:99:39:54:75:cb:c3:07:fa:d8:61:0b:87:bc:3a:
e4:f4:6b:64:af:99:38:3c:2a:42:c3:a4:e0:b0:99:27:29:6c:
2f:27:0a:b4:31:9b:45:65:91:4b:1b:1d:81:2d:d8:dd:39:9f:
4b:49:81:eb:d9:7b:01:ce:c8:c2:ea:80:6f:3a:e6:68:58:c6:
39:ef:42:fe:1e:ee:85:c9:3b:1e:b0:36:7b:43:9b:1c:7a:ae:
fd:22:22:81:92:1f:72:08:71:5c:2b:c0:da:71:c2:cc:90:0d:
83:6b:2e:16:bd:60:ef:b0:7c:8d:d7:be:91:21:4d:5c:c5:19:
a3:16:e6:05:d7:b6:56:fc:fd:b1:a5:b7:1c:4d:6a:1e:b3:2f:
c9:58:b0:1f:45:e7:73:49:85:1b:48:45:bb:fd:23:6f:52:ab:
ec:f3:22:9c:c4:c1:44:f5:ba:d4:08:0d:2a:d4:ec:f1:86:86:
23:ea:9e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:31 2024 by rpki-client on console-fra.rpki-client.org