Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/XptGTLzLnct0dKKVoVP-u2FJrow.roa
File: XptGTLzLnct0dKKVoVP-u2FJrow.roa (raw, json)
Hash identifier: TyUrW6lf5vfSFMD60YTiwTU2mVRZ5tU1xdc3pYm4YmQ=
Subject key identifier: 5E:9B:46:4C:BC:CB:9D:CB:74:74:A2:95:A1:53:FE:BB:61:49:AE:8C
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 3A4EF840
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/XptGTLzLnct0dKKVoVP-u2FJrow.roa
Signing time: Sat 01 Jan 2022 14:56:25 +0000
ROA not before: Sat 01 Jan 2022 14:56:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58202
IP address blocks: 5.160.78.0/24 maxlen: 24
5.160.155.0/24 maxlen: 24
5.160.154.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 978253888 (0x3a4ef840)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 14:56:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5e9b464cbccb9dcb7474a295a153febb6149ae8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:12:0c:6d:cb:11:d1:c3:e8:b1:81:64:97:0f:
44:c0:c9:e9:bc:66:b5:7b:84:ea:f4:89:ab:85:3c:
a9:a7:d3:f8:0d:93:8d:51:cd:43:86:74:8e:2d:8a:
51:bb:1b:34:17:6d:ea:25:10:30:24:70:d6:af:70:
49:3d:94:2e:df:17:c9:61:6f:cf:23:37:af:10:2c:
d0:ec:6d:9c:a6:21:93:39:b7:c9:3d:b6:cf:7d:48:
e8:d8:63:31:6e:20:2a:1c:b3:8d:d5:0d:98:66:2c:
25:b6:d1:97:4e:b6:9d:d5:ab:b9:da:49:34:24:bc:
d6:ac:44:ab:e9:04:d4:40:fb:6f:f9:7f:56:40:8d:
77:3f:94:f5:0f:3d:73:c9:b5:7c:0a:dc:31:3a:2d:
c8:71:53:27:f2:a3:5e:db:8e:87:f1:fe:ea:bf:8e:
68:15:62:b3:35:f9:5b:0d:41:1e:27:4f:76:ae:66:
dd:4c:22:d0:cd:ba:dd:7b:c1:76:58:b1:64:d5:28:
fb:12:de:25:87:37:9f:71:ca:41:89:da:09:9f:5f:
76:96:3d:e6:5f:19:04:d5:ea:16:9d:5b:b2:e0:ac:
f9:68:bd:a2:47:ed:c1:4c:24:b7:18:1f:81:16:e3:
c9:df:1b:28:c6:4b:c4:ed:86:9f:7d:9a:5b:92:ec:
e8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:9B:46:4C:BC:CB:9D:CB:74:74:A2:95:A1:53:FE:BB:61:49:AE:8C
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/XptGTLzLnct0dKKVoVP-u2FJrow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.78.0/24
5.160.154.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:06:91:3f:c8:f1:8d:0c:b2:d2:a4:6b:d3:1c:b6:d7:d8:24:
c8:1c:f0:94:53:e7:4e:1c:5b:3c:c3:b0:ea:13:35:ea:65:55:
e6:89:1a:1d:a8:b3:d7:3e:b5:6c:ec:7d:9c:6d:b4:a7:1e:9e:
30:ea:e4:21:09:73:22:b5:a9:88:71:ca:d2:29:45:7a:7d:fb:
61:55:49:a5:18:e0:de:1d:5b:29:af:ac:e7:7d:94:17:94:88:
12:e5:0d:4a:31:9c:20:da:42:e3:64:77:2b:80:be:ec:e7:c0:
a5:95:23:fa:f4:e4:00:74:cc:f8:12:cf:16:9c:b0:ff:cb:2b:
5f:4b:bb:d8:21:bb:bc:ad:33:ac:fd:a7:a1:39:9d:6f:58:43:
8c:52:44:80:4f:8c:f0:3f:ff:6d:1a:05:be:e7:06:0a:e5:93:
53:52:47:a6:5c:51:5a:08:d8:99:59:9c:c2:d3:c5:be:e7:06:
f1:66:dd:88:7a:2e:51:e1:9a:67:71:1b:80:47:99:82:d8:e9:
09:90:29:aa:c5:de:3c:fa:45:28:75:ec:04:cd:65:aa:de:8f:
86:46:65:60:4b:e6:a2:6b:c8:5c:ff:7a:0e:e4:47:a2:b0:3e:
a2:bb:29:09:5d:ff:89:84:8d:fa:69:56:dd:f6:f2:5a:b9:32:
1b:ac:77:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:21 2024 by rpki-client on console-ams.rpki-client.org