Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/fi19LXS6Py6QHGhB4WP-BxUpvAA.roa
File: fi19LXS6Py6QHGhB4WP-BxUpvAA.roa (raw, json)
Hash identifier: n9eheRCFmGv9STWAcve8QhYy8qk95weOV6geb0oTszM=
Subject key identifier: 7E:2D:7D:2D:74:BA:3F:2E:90:1C:68:41:E1:63:FE:07:15:29:BC:00
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 3C099D63
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/fi19LXS6Py6QHGhB4WP-BxUpvAA.roa
Signing time: Sun 12 Jun 2022 08:28:03 +0000
ROA not before: Sun 12 Jun 2022 08:28:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50530
IP address blocks: 5.160.201.0/24 maxlen: 24
5.160.200.0/23 maxlen: 23
5.160.200.0/24 maxlen: 24
5.160.209.0/24 maxlen: 24
5.160.208.0/23 maxlen: 23
5.160.208.0/24 maxlen: 24
5.160.157.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1007263075 (0x3c099d63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jun 12 08:28:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7e2d7d2d74ba3f2e901c6841e163fe071529bc00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fa:0f:ca:d0:09:64:9b:a3:47:a0:fa:fd:5e:
a6:66:87:a6:a7:f0:89:a5:b6:bc:04:8d:e3:28:2d:
14:19:79:f6:46:e4:48:a6:ba:da:e4:69:96:48:1c:
de:d0:1a:52:0a:e6:29:0b:35:38:12:e8:11:cf:65:
e8:0a:a5:78:05:a1:37:c0:5f:d1:8f:7c:11:e1:aa:
21:a7:67:ca:c7:07:df:08:5b:4e:f4:89:cd:75:61:
32:9f:7a:ed:a7:18:8a:3b:e2:1e:57:8e:b5:63:d1:
97:97:ec:33:27:07:89:ad:6a:bc:49:b1:34:4c:37:
80:3e:3c:b4:cb:86:87:90:e2:e0:56:df:72:88:95:
6a:e1:aa:6d:7d:e4:10:d2:7d:cb:00:6e:b8:78:c8:
44:06:0f:17:33:7e:73:8b:44:2d:79:75:8c:a0:23:
68:93:91:f0:d9:be:37:34:18:b9:7b:9d:02:b3:49:
b0:15:1c:02:db:e3:4c:31:36:7b:91:e6:30:58:0d:
7a:dc:f4:20:b5:b9:75:e5:5f:0d:34:d6:a9:77:51:
89:73:f0:2e:74:0a:f7:17:9d:4b:a3:7f:28:36:fc:
e1:51:bb:f7:7e:8c:1d:ab:f4:59:1b:f7:d3:31:0c:
45:09:6d:50:36:41:52:a3:95:cf:03:06:43:84:e5:
57:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:2D:7D:2D:74:BA:3F:2E:90:1C:68:41:E1:63:FE:07:15:29:BC:00
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/fi19LXS6Py6QHGhB4WP-BxUpvAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.157.0/24
5.160.200.0/23
5.160.208.0/23
Signature Algorithm: sha256WithRSAEncryption
36:bf:1f:da:aa:88:40:88:c9:68:92:f0:32:44:de:de:8c:68:
ae:4d:38:14:fb:b3:fe:1b:23:da:1b:50:70:16:68:2f:30:1d:
20:0c:74:49:ee:ba:d9:43:19:42:05:41:83:01:de:4e:31:e6:
57:37:5f:fa:b7:71:f2:be:fe:02:51:8a:18:47:8a:db:83:10:
60:da:5a:3a:84:5f:d8:ad:c9:d8:07:9f:df:ea:5b:95:65:55:
e5:22:c7:9b:84:70:26:32:b9:2d:bd:5b:c7:66:5a:b2:97:0a:
79:77:cb:30:f8:f7:43:6e:5a:16:9f:4e:b6:9b:c4:9a:60:46:
2b:72:f8:88:48:a5:d9:bc:6c:f7:08:f9:12:af:9a:38:42:50:
3c:5a:9d:55:cb:ba:47:54:9b:b8:dc:c9:96:84:ca:ff:60:a8:
bc:15:6e:0f:3f:f0:40:26:2a:7b:e8:16:26:51:63:f5:eb:73:
52:c0:b5:26:7e:bb:7e:5d:6f:ea:c6:c2:46:45:75:94:f4:00:
cd:66:33:9d:64:ad:0e:d1:11:cf:57:7d:4e:37:22:3f:7f:44:
39:34:e4:86:b0:54:b7:40:49:e7:2f:80:63:20:d2:49:45:1b:
33:9e:27:16:b5:d7:36:1d:0f:1b:cf:4d:05:de:4a:19:cd:ac:
92:f8:86:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:06 2023 by rpki-client on console-ams.rpki-client.org