Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/L743-tVLjuW2KXqnStBNw6Oycaw.roa
File: L743-tVLjuW2KXqnStBNw6Oycaw.roa (raw, json)
Hash identifier: zBCLrhNnYE6piG/4XqxItOFvj/C5dhRkr8DNfBuuflQ=
Subject key identifier: 2F:BE:37:FA:D5:4B:8E:E5:B6:29:7A:A7:4A:D0:4D:C3:A3:B2:71:AC
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 3A4FDB4A
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/L743-tVLjuW2KXqnStBNw6Oycaw.roa
Signing time: Sat 01 Jan 2022 14:56:26 +0000
ROA not before: Sat 01 Jan 2022 14:56:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59501
IP address blocks: 5.160.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 978312010 (0x3a4fdb4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 14:56:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2fbe37fad54b8ee5b6297aa74ad04dc3a3b271ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e6:e3:99:db:54:1f:a2:f1:e0:1f:cd:0f:7c:
27:19:00:0c:d1:dd:71:7d:89:c6:d6:f4:82:e2:4e:
4d:12:f3:66:f5:dc:30:e4:c9:ea:b0:7d:3a:c4:9c:
35:55:2f:aa:f1:da:41:45:50:85:fc:75:0c:8f:dd:
82:aa:e8:cf:6e:25:c0:22:e8:e5:27:d2:67:ea:96:
9d:f2:6a:1e:1d:6a:18:06:7a:ed:2c:74:a1:20:9b:
ec:f9:ae:7e:79:83:34:68:3a:fc:45:f4:d7:3b:f8:
69:af:fa:95:4b:2e:6a:93:f6:06:65:c0:65:31:7d:
1d:59:3f:42:e8:3a:08:2c:d2:9a:f8:dd:18:4c:e4:
3a:4b:70:f3:21:eb:c2:2d:e5:b1:2b:f2:ce:55:5c:
3c:2e:9a:fd:24:37:94:3b:d3:ac:30:15:81:fa:3b:
0d:e0:3f:c5:92:e2:c4:d8:32:d9:97:ab:4b:fb:95:
2a:9b:5a:9c:15:d0:83:1a:e4:0f:f3:ed:86:05:95:
46:94:75:99:f9:28:df:e9:8f:b9:61:e4:ce:9f:7b:
ef:34:b5:af:c1:0b:50:34:ff:51:27:75:56:dc:8b:
78:15:10:4c:99:04:38:28:3e:ac:8c:15:ad:48:e0:
b7:03:d3:79:ee:85:fc:11:f8:64:b6:ca:fa:45:09:
dc:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:BE:37:FA:D5:4B:8E:E5:B6:29:7A:A7:4A:D0:4D:C3:A3:B2:71:AC
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/L743-tVLjuW2KXqnStBNw6Oycaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.217.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:15:32:81:f9:f7:a0:f4:36:50:c4:e6:77:25:9c:86:17:af:
14:5c:f6:3e:3e:97:47:2b:ee:8f:3f:5c:23:ff:5e:de:f2:cc:
04:6d:81:b4:93:ec:97:00:df:55:2e:5f:57:ce:9c:a7:c6:73:
4b:78:cc:22:01:2e:6e:38:87:4f:a6:96:65:cd:00:4a:f5:e8:
4f:8a:35:e2:4c:9f:48:47:1f:ba:f2:3c:e2:94:b5:40:60:f9:
3c:47:94:14:22:4e:26:fa:f1:b1:5c:f4:b2:49:2d:ca:63:53:
7c:cf:92:44:41:40:28:6b:07:af:18:d0:07:4f:07:13:66:15:
9e:c2:5d:d6:54:7c:70:3b:54:22:89:8c:e6:e8:c0:e5:5d:1e:
ca:94:85:61:d3:5a:41:90:2d:d1:19:fa:e3:6b:3e:8b:00:21:
b2:0a:32:ec:26:34:64:11:c3:35:3c:93:48:08:ba:4d:43:44:
9c:57:c6:cd:e7:37:b4:52:d6:82:cc:2e:3e:23:99:cf:39:70:
e0:92:43:20:af:1d:75:46:88:04:9e:ab:19:54:2e:97:80:34:
d6:54:2b:a9:e8:7f:43:dc:2a:71:bf:07:81:55:04:24:24:69:
8f:fe:43:17:a7:86:b4:81:9a:df:64:e4:76:8d:33:81:64:82:
73:d3:5f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:19 2023 by rpki-client on console-fra.rpki-client.org