Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/S2GmIUkdjmYoxfTizK3bs_l6BBQ.roa
File: S2GmIUkdjmYoxfTizK3bs_l6BBQ.roa (raw, json)
Hash identifier: RUJqTAJDjwojzihBFdHMQICD7gU97DkwLJAlfxpfZWk=
Subject key identifier: 4B:61:A6:21:49:1D:8E:66:28:C5:F4:E2:CC:AD:DB:B3:F9:7A:04:14
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 3A619EE9
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/S2GmIUkdjmYoxfTizK3bs_l6BBQ.roa
Signing time: Sat 01 Jan 2022 14:56:37 +0000
ROA not before: Sat 01 Jan 2022 14:56:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202616
IP address blocks: 5.160.125.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 979476201 (0x3a619ee9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 14:56:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b61a621491d8e6628c5f4e2ccaddbb3f97a0414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c0:8a:dd:d5:c2:16:d9:86:b1:81:35:9b:b8:
0a:e0:64:17:98:b3:75:51:65:7f:03:2e:8c:62:a4:
a3:44:cb:b1:b8:8b:b3:c5:21:94:69:61:3c:ae:2a:
ea:4a:9d:45:79:07:46:bb:9e:41:84:28:8d:b5:16:
86:ae:8c:eb:ae:ad:f5:15:b8:3d:21:05:07:15:14:
23:3d:13:9c:54:86:64:eb:d5:95:96:fc:ee:ae:b7:
30:00:5a:fc:ed:93:32:34:f4:fb:26:f8:5c:44:5d:
17:7f:a8:c4:84:e2:1b:25:fb:9b:60:54:d4:00:0a:
f6:06:a1:f8:27:06:c1:9d:83:f5:59:59:69:68:53:
9c:02:14:9f:7b:d1:02:18:de:dc:b6:d5:57:b6:a2:
09:c8:c8:b9:94:79:2f:a0:d1:30:25:1c:58:de:3f:
e6:c4:51:c9:91:dc:70:ea:63:40:5b:17:db:d5:96:
13:67:96:06:2c:b8:d5:90:de:9e:e7:e3:80:48:3a:
44:94:06:82:08:96:29:2f:62:7e:18:bc:40:92:7f:
c9:78:4f:6e:c7:f4:a7:91:98:29:b5:a3:24:e7:e8:
7c:a5:2c:05:1f:71:2b:a3:56:d0:6f:19:b3:75:7a:
52:7b:de:0c:6c:dc:6f:34:0a:e3:36:d2:71:0a:be:
d6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:61:A6:21:49:1D:8E:66:28:C5:F4:E2:CC:AD:DB:B3:F9:7A:04:14
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/S2GmIUkdjmYoxfTizK3bs_l6BBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.125.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:4e:84:ae:07:fe:d4:cc:46:c6:e2:54:44:8c:a4:e7:7a:e9:
26:20:96:db:78:bc:6d:3c:3b:9f:df:6d:f2:17:2d:c5:02:81:
6f:af:e1:54:f6:46:00:5e:82:34:d6:68:2b:fd:42:fd:a5:99:
17:88:4a:2e:d4:10:e2:7a:f3:bc:99:c3:40:dc:7c:8d:70:ab:
8c:e4:95:80:3c:0b:4c:31:12:ea:3f:c4:3b:9a:d7:bd:80:ef:
be:ad:d8:2a:b0:a4:39:54:3d:8e:9c:6a:39:ec:26:33:9f:c9:
96:74:24:a5:e5:63:44:4c:fb:3e:1f:3c:81:d9:0a:22:6f:bc:
39:67:dd:d5:ef:c9:a1:d5:6e:7d:d2:43:43:5a:6c:b4:56:31:
d8:75:eb:0a:78:ab:d9:f8:4f:49:37:a0:6e:9f:35:55:a1:a6:
cd:83:82:58:ab:66:52:bd:ff:17:12:54:8f:ed:15:01:bd:c1:
ec:c8:3c:c5:62:ed:70:18:f9:ad:7d:78:69:96:b7:8f:b6:61:
33:d6:26:df:dc:c6:fe:3b:54:0d:fb:5f:bd:08:7a:30:19:52:
b1:f9:cd:a9:b2:00:ce:92:35:bb:cd:83:ec:26:a1:3a:82:d9:
9b:1c:2b:bd:3f:9c:1f:0d:f1:a3:7e:3c:bb:d0:3e:c7:1e:bb:
af:3f:5d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:19 2023 by rpki-client on console-fra.rpki-client.org