Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/52e3c064nwlBZtNQdDjoP7WAyq8.roa
File: 52e3c064nwlBZtNQdDjoP7WAyq8.roa (raw, json)
Hash identifier: jolVrLYNxH22+aeLXd+3aY/qcT7NZ1gZ91kz5cUTS0E=
Subject key identifier: E7:67:B7:73:4E:B8:9F:09:41:66:D3:50:74:38:E8:3F:B5:80:CA:AF
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 3A61082B
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/52e3c064nwlBZtNQdDjoP7WAyq8.roa
Signing time: Sat 01 Jan 2022 14:56:36 +0000
ROA not before: Sat 01 Jan 2022 14:56:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202391
IP address blocks: 46.209.162.0/24 maxlen: 24
5.160.152.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 979437611 (0x3a61082b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 14:56:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e767b7734eb89f094166d3507438e83fb580caaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:46:53:c6:94:55:ae:bf:19:e2:d5:7f:54:37:
ba:66:27:6e:d2:f0:d3:fb:89:12:76:b5:5f:74:3f:
f1:94:7e:5e:aa:d2:a0:5c:ee:73:2b:75:b1:92:d4:
1c:a2:34:22:97:b8:e2:c4:93:49:a8:a1:75:f9:93:
24:9f:b0:13:58:8c:ab:98:e8:7e:01:69:2e:38:bb:
a4:6d:98:d1:05:72:ac:43:d0:30:c6:7b:f8:17:26:
60:e4:6c:37:53:d2:07:af:74:ff:6d:4a:3f:ff:6f:
93:d9:4c:ab:81:20:2a:0f:8a:f7:ae:2d:ea:f1:0b:
57:d2:5e:fa:1a:ba:c7:fc:71:aa:f5:32:85:5e:84:
4f:49:36:bc:79:e2:2e:27:55:ac:58:1a:d9:36:86:
de:d7:49:16:5f:4d:6d:c5:9f:ca:6c:e3:bc:4b:da:
23:72:48:af:07:df:55:19:c1:45:8c:a4:71:e1:f3:
a1:13:2e:0d:ef:ff:d7:cd:25:6f:3e:fd:5c:29:97:
a3:19:79:d5:53:44:cd:6a:b9:f3:bf:c3:2a:31:1b:
4f:4e:2e:e4:cb:64:b4:a9:20:9a:bb:62:18:9e:c8:
57:25:1a:7d:c7:54:2b:27:1e:f5:a2:cd:f1:a6:74:
d8:86:7e:cd:1b:ca:3a:91:03:02:ee:40:58:2c:a1:
40:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:67:B7:73:4E:B8:9F:09:41:66:D3:50:74:38:E8:3F:B5:80:CA:AF
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/52e3c064nwlBZtNQdDjoP7WAyq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.152.0/24
46.209.162.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:43:c0:de:09:08:18:43:d3:fd:9d:7b:6c:72:2d:9c:cd:e1:
f8:e4:df:cc:55:b3:08:4b:3d:33:84:8e:ea:c5:f8:64:35:f9:
c5:9c:5b:fa:e4:7a:db:a7:4e:b9:2b:6e:74:f9:1f:b0:eb:fa:
16:24:75:f2:69:99:f7:4a:c7:3c:97:d5:3f:2a:a5:f1:47:1b:
48:78:c3:85:8e:fb:d1:db:14:54:38:f9:d7:fe:6f:31:ad:2a:
9b:10:16:dc:bb:6c:90:9f:64:09:d1:e5:11:be:45:ef:ef:ce:
1e:e6:47:16:3a:a1:06:80:8f:85:da:a0:8e:6d:8c:e7:1e:52:
69:dc:3a:d1:2f:35:78:8e:03:4c:9f:d7:fd:2c:51:1a:ae:a3:
1b:0b:a8:3e:cb:e5:08:0e:a4:42:d1:0c:f1:a5:90:67:c3:04:
a0:66:41:05:d1:19:6f:6a:be:35:ed:ff:5e:67:fe:23:92:98:
ca:b6:1b:ef:7d:a8:62:68:ef:91:e6:bb:3b:be:74:0d:4a:e5:
39:5f:6c:c1:fd:e7:46:33:6d:68:1f:a5:7e:72:b5:3c:77:f1:
f7:7b:09:2a:9c:76:b2:45:d8:44:01:91:1d:6f:37:2b:bd:42:
c8:54:43:cb:a1:50:c5:73:ca:97:fa:75:f1:01:b1:f9:dc:01:
29:2d:55:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:31 2024 by rpki-client on console-fra.rpki-client.org