Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/73vNdJy7kPCGRmk8XR_Aq1AsPGA.roa
File: 73vNdJy7kPCGRmk8XR_Aq1AsPGA.roa (raw, json)
Hash identifier: cbk80dUhU1gAc0cXm9bjK0yaJ3uETvjO2YLvKhdefzw=
Subject key identifier: EF:7B:CD:74:9C:BB:90:F0:86:46:69:3C:5D:1F:C0:AB:50:2C:3C:60
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 3AE522C4
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/73vNdJy7kPCGRmk8XR_Aq1AsPGA.roa
Signing time: Wed 16 Feb 2022 14:57:53 +0000
ROA not before: Wed 16 Feb 2022 14:57:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49847
IP address blocks: 5.160.160.0/23 maxlen: 24
5.160.164.0/23 maxlen: 24
46.209.54.0/23 maxlen: 24
46.209.178.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 988095172 (0x3ae522c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Feb 16 14:57:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ef7bcd749cbb90f08646693c5d1fc0ab502c3c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:bf:00:dd:29:5a:0c:3c:d1:16:1f:62:03:9c:
f8:0d:3e:67:ff:b6:66:78:54:c6:1e:d3:21:7e:bb:
98:c5:0a:b7:9b:ec:11:56:fa:97:e9:34:7b:c7:30:
c7:82:39:12:d2:2b:96:b0:c4:1a:a8:f9:b8:45:4f:
a1:ee:35:b3:6f:dd:bf:87:ba:3a:07:47:a2:04:6a:
00:44:74:b0:84:37:d3:66:36:2b:da:0e:a5:a2:48:
e6:19:84:39:11:c3:9d:fc:97:b8:a9:42:78:bf:64:
08:ce:b8:f7:2c:0e:cc:67:84:f6:ce:8e:d7:ef:45:
db:22:5b:52:d8:7a:87:34:7b:f5:05:0e:66:63:55:
c9:43:25:44:7a:f7:94:ee:95:53:1c:62:8f:5a:47:
56:b6:94:4b:40:20:19:b1:35:10:b3:8f:e1:69:33:
c8:13:1b:24:90:1c:28:4a:57:73:ea:be:b2:e3:2c:
99:92:c9:b6:2b:33:47:92:d8:b0:ff:f3:5d:02:9e:
d6:5c:f1:18:ce:4b:a7:67:3f:cf:9c:ea:c1:84:ee:
65:c1:a6:1a:5f:2d:08:30:db:e0:a8:81:eb:fb:5a:
35:d4:d8:3c:cb:de:a9:f8:0e:f1:19:4d:93:86:f9:
41:89:8f:a5:e6:9c:33:10:ad:9b:b1:d0:da:e9:49:
b7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:7B:CD:74:9C:BB:90:F0:86:46:69:3C:5D:1F:C0:AB:50:2C:3C:60
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/73vNdJy7kPCGRmk8XR_Aq1AsPGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.160.0/23
5.160.164.0/23
46.209.54.0/23
46.209.178.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:54:b4:19:18:76:64:66:3e:9c:93:04:d9:7f:d9:36:df:89:
7d:8e:6b:79:21:bc:35:0d:cf:d9:76:16:c6:e7:37:e3:58:21:
e8:9c:23:60:a2:66:93:25:53:4b:c2:38:1b:e6:c0:e4:d6:75:
a9:b0:16:3b:5f:93:e3:c6:fa:91:84:86:8c:f9:68:50:65:ce:
dc:15:e8:4a:ca:3e:0f:b4:4f:ac:85:c2:4f:0e:9b:30:05:aa:
d5:e2:4e:2c:58:78:4b:5b:78:15:7d:cf:ad:22:db:4f:b8:b4:
f4:8e:a1:35:f0:4f:a1:bf:9d:38:9c:ab:bc:d6:9c:37:56:33:
ea:2f:0f:46:18:47:74:49:56:4b:3c:f5:11:86:d2:12:7b:d8:
01:d3:c6:53:68:b6:6d:6c:7d:21:03:a2:93:c3:92:da:16:78:
36:f0:1f:53:0d:19:73:66:37:76:8c:13:39:71:09:e8:c6:7a:
58:97:0d:e4:3c:57:57:92:83:8b:cb:8f:f6:c4:e9:38:ca:77:
d5:de:16:c3:13:44:18:0a:08:f5:93:74:ff:52:3a:a1:85:f4:
dc:d8:d3:50:1e:bf:fc:ea:11:98:c7:59:42:50:12:7a:73:eb:
e1:00:84:eb:ad:44:12:50:49:03:be:e8:3d:60:95:e8:c1:23:
b2:0d:4a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:06 2023 by rpki-client on console-ams.rpki-client.org