Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/6Do23R5Xp8UpYs5O8ugRExPTLuc.roa
File: 6Do23R5Xp8UpYs5O8ugRExPTLuc.roa (raw, json)
Hash identifier: 17b8ruoHX5hiSlQsBDTlZjGPOvldw3eASX5BsqGJNvg=
Subject key identifier: E8:3A:36:DD:1E:57:A7:C5:29:62:CE:4E:F2:E8:11:13:13:D3:2E:E7
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 3A43A4DD
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/6Do23R5Xp8UpYs5O8ugRExPTLuc.roa
Signing time: Sat 01 Jan 2022 14:56:18 +0000
ROA not before: Sat 01 Jan 2022 14:56:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35615
IP address blocks: 5.160.244.0/24 maxlen: 24
5.160.245.0/24 maxlen: 24
5.160.244.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 977511645 (0x3a43a4dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 14:56:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e83a36dd1e57a7c52962ce4ef2e8111313d32ee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1c:7b:7c:a9:aa:06:f0:d0:b6:18:13:9f:fe:
4e:b5:9b:be:c4:b5:6c:50:65:73:9c:c5:74:41:6f:
a2:87:72:21:79:79:35:55:52:8b:10:20:7d:6a:30:
bc:3a:db:92:27:51:3e:1d:b1:27:dc:b0:28:54:75:
d9:56:6b:a3:a9:d3:2b:1c:c7:60:c4:e4:72:ac:62:
d3:96:37:11:9c:87:29:b2:81:f7:93:f5:f0:81:fb:
08:63:85:e5:90:0e:ec:14:4c:83:d2:3a:1c:08:41:
82:53:cb:4f:fb:fe:20:ff:fb:04:76:9d:79:b1:78:
6a:3f:14:06:03:74:35:3e:5c:96:90:45:27:d7:a8:
49:0f:6a:c4:3d:b9:13:b6:5d:83:83:f8:64:3c:58:
5a:32:6e:91:13:a0:d0:e8:41:d9:2a:ed:27:5d:bf:
42:cb:cd:c7:1d:7e:d7:05:d5:21:60:b6:7a:3b:7f:
ae:80:b4:2f:d7:55:22:06:ae:6d:37:f1:07:ed:bc:
4f:02:1a:0b:d7:d6:8a:70:43:0e:dc:af:b9:32:b1:
08:77:1a:6d:e1:66:fb:47:48:3e:61:59:9e:6b:03:
5b:52:7b:eb:fe:1c:aa:81:a6:9f:3a:21:4c:d6:7c:
40:b2:54:e6:32:e5:21:2d:0a:fc:7d:10:05:6f:59:
7a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:3A:36:DD:1E:57:A7:C5:29:62:CE:4E:F2:E8:11:13:13:D3:2E:E7
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/6Do23R5Xp8UpYs5O8ugRExPTLuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.244.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:f7:8a:29:c2:1d:d3:25:76:d9:87:55:d7:e1:07:de:b3:f2:
a7:1c:ed:c8:3a:48:cb:c5:94:4b:59:cc:6c:32:dd:6c:ce:0c:
18:a5:ee:b1:2c:b1:81:cb:d0:63:3f:e5:6f:99:c8:92:fb:0c:
e4:ab:09:93:b7:bd:54:6d:ac:d0:aa:83:76:d5:cb:54:18:65:
90:d5:f3:07:81:d1:99:f1:c3:74:49:d6:04:3c:e0:f0:f7:15:
72:7a:70:e9:63:61:41:70:8d:f8:78:d2:34:89:71:46:33:ae:
63:be:ed:20:1b:0d:95:dd:53:18:73:81:d2:3d:00:83:25:f3:
8f:b8:ba:7c:4b:8d:6b:08:7e:35:0a:43:76:15:57:df:3e:12:
d2:e0:01:a4:e1:e2:b5:9d:8d:20:98:b7:33:a6:ff:cc:94:d0:
e7:c0:0e:fd:1f:a4:9f:fc:64:9d:82:49:f5:1f:6c:4e:1e:37:
db:5d:d2:a3:30:3a:ac:4e:e2:4a:74:fc:3d:9a:cf:81:04:21:
f3:de:23:64:66:15:5f:34:da:56:70:ba:e4:1a:52:ea:c1:1d:
ea:7f:44:5e:e5:02:bf:45:e2:d9:02:25:c1:f2:72:84:ee:74:
8f:32:18:8c:01:04:1e:34:43:a6:54:92:cb:b4:fb:5d:c8:5a:
c9:04:63:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:19 2023 by rpki-client on console-fra.rpki-client.org