Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/JdZ5SrUqATdoSgiqvV0TSsD6eFI.roa
File: JdZ5SrUqATdoSgiqvV0TSsD6eFI.roa (raw, json)
Hash identifier: D08ZKeoDvtWxjF92vqdQ6+CU++iuu+3f6Fk2V/a5O0k=
Subject key identifier: 25:D6:79:4A:B5:2A:01:37:68:4A:08:AA:BD:5D:13:4A:C0:FA:78:52
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 3A4BEF23
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/JdZ5SrUqATdoSgiqvV0TSsD6eFI.roa
Signing time: Sat 01 Jan 2022 14:56:22 +0000
ROA not before: Sat 01 Jan 2022 14:56:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50855
IP address blocks: 5.160.198.0/24 maxlen: 24
5.160.154.0/24 maxlen: 24
5.160.154.0/23 maxlen: 23
5.160.155.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 978054947 (0x3a4bef23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 14:56:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=25d6794ab52a0137684a08aabd5d134ac0fa7852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:51:79:3d:d4:67:4c:2f:c3:32:7c:37:3a:6d:
35:f7:08:9a:86:1b:98:31:a0:3f:a5:4a:74:73:e2:
ae:fc:98:d5:f0:57:68:de:f8:c8:35:d5:00:2a:70:
47:22:1d:3e:3a:3e:e9:d3:cf:90:aa:2a:57:a6:82:
52:d5:1b:c9:86:5f:29:a6:01:c1:9b:1f:ab:f4:74:
ea:c5:77:35:14:ab:0b:5c:d7:0e:e6:7c:44:55:26:
bc:e9:9d:52:94:e3:53:ed:85:ed:8a:20:9e:e4:f4:
20:8e:40:f8:bd:e5:b4:1e:f2:0f:57:fd:1d:97:8d:
44:07:b2:af:52:40:27:2e:bc:e2:95:d7:08:1b:9d:
82:4b:bc:83:a2:05:a1:0e:be:08:e2:60:d5:b0:e9:
04:3b:c7:c0:fa:57:4f:ad:63:66:50:a5:cf:41:5e:
86:c7:28:cc:c5:f0:67:d8:b8:b1:a0:5d:d8:18:27:
40:a3:85:a8:0f:2f:14:4d:af:0c:e9:f7:2a:9c:09:
f7:99:e7:b7:2d:bc:6d:6a:f2:e6:a9:c0:70:56:2e:
4a:f3:19:a1:80:00:01:59:d0:54:74:6b:fd:79:f4:
41:e0:2f:38:04:b3:96:e6:ff:98:28:e6:6a:26:62:
ff:1d:31:95:db:f3:33:a9:5f:1a:8f:16:cf:97:dc:
f8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D6:79:4A:B5:2A:01:37:68:4A:08:AA:BD:5D:13:4A:C0:FA:78:52
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/JdZ5SrUqATdoSgiqvV0TSsD6eFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.154.0/23
5.160.198.0/24
Signature Algorithm: sha256WithRSAEncryption
74:7d:5f:04:3d:7f:92:04:36:45:be:b2:58:88:7a:ad:2f:f2:
64:e0:0d:34:df:4d:0e:51:78:02:6b:f9:47:78:6d:14:30:b9:
c5:75:f4:21:68:ee:de:98:ed:15:80:46:06:5a:dd:44:d9:23:
09:a3:d0:0d:9e:0b:ee:dc:67:a0:b0:3f:3a:aa:c5:71:69:56:
13:e3:37:83:ac:e6:fa:f9:a6:59:b1:64:78:4f:b0:00:dc:58:
9b:e3:db:e5:54:5c:07:f6:a9:ce:18:e3:02:ba:d5:af:fe:e3:
82:e7:20:9c:36:27:5d:4d:e5:2b:00:0f:63:79:f3:b7:95:e7:
05:38:d9:5e:eb:24:b8:d7:8a:ad:34:59:d3:a9:b3:b4:de:78:
26:d0:75:86:06:83:77:ec:61:a6:c9:35:34:ab:5f:99:77:41:
25:98:00:a7:58:2e:d0:25:88:c1:2b:7c:18:bb:f0:78:b6:55:
75:9a:c8:42:bd:c0:b2:17:21:46:b6:b1:b4:01:f6:69:cd:4b:
a0:f5:33:83:dc:7f:3c:4e:28:f8:ef:72:6c:31:25:fd:18:27:
40:a9:57:0b:36:64:ef:cd:4c:ed:e5:93:0b:f4:fa:a9:4e:5c:
96:89:62:50:e5:47:ad:2d:05:2a:d7:ea:70:5a:d5:44:45:86:
64:cc:1b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:21 2024 by rpki-client on console-ams.rpki-client.org