Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/kmvcvKOrZJrI4Va0_ABCZM5z6bM.roa
File: kmvcvKOrZJrI4Va0_ABCZM5z6bM.roa (raw, json)
Hash identifier: UwxcynL5ps4H8z5WV6pJqaa2lcoF27PAgTriYa8u6kU=
Subject key identifier: 92:6B:DC:BC:A3:AB:64:9A:C8:E1:56:B4:FC:00:42:64:CE:73:E9:B3
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 3A50BD4B
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/kmvcvKOrZJrI4Va0_ABCZM5z6bM.roa
Signing time: Sat 01 Jan 2022 14:56:26 +0000
ROA not before: Sat 01 Jan 2022 14:56:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59691
IP address blocks: 5.160.146.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 978369867 (0x3a50bd4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 14:56:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=926bdcbca3ab649ac8e156b4fc004264ce73e9b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a3:77:77:b7:88:44:29:50:72:a2:f4:f9:f3:
15:1a:fc:7b:04:eb:2d:e0:99:55:05:4b:95:9e:11:
7c:4e:f4:2d:c4:bb:a5:12:a2:33:d6:b2:5b:85:eb:
9d:b1:4b:85:b3:ce:e9:6b:71:be:52:50:e7:34:9a:
b2:9e:c5:0d:d2:5e:6b:82:27:e9:b3:b8:84:61:1e:
62:f6:17:68:d7:8c:f8:8e:3f:eb:57:70:57:c5:59:
4f:e3:4b:f3:d1:21:9d:03:9a:23:b1:e4:f7:10:f9:
4c:3c:09:68:ce:7d:62:2b:73:7b:98:4f:73:5b:f5:
08:13:16:81:7e:b8:0f:ba:1a:42:b2:87:b8:3c:bb:
6d:08:26:64:e7:c6:45:ee:da:1c:40:52:a8:af:9e:
ff:c0:b5:95:a1:84:32:1c:c8:eb:e5:40:b9:17:c2:
01:a2:2b:bc:d6:f3:17:cb:a1:16:b1:86:f7:3a:bd:
1a:76:7b:8a:bc:b6:d0:b7:6f:4f:34:1e:5a:cd:e8:
d4:21:2f:9d:b2:0d:5f:23:4e:d3:f6:d7:9a:1a:59:
d3:69:1c:23:70:48:e5:2c:3a:17:19:6b:9c:88:a6:
a0:a6:cd:c8:66:07:06:e4:03:cb:70:42:c1:bb:c5:
b7:d7:9f:68:6d:be:82:5c:4a:1d:b9:5f:ff:2e:ab:
f6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:6B:DC:BC:A3:AB:64:9A:C8:E1:56:B4:FC:00:42:64:CE:73:E9:B3
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/kmvcvKOrZJrI4Va0_ABCZM5z6bM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.146.0/24
Signature Algorithm: sha256WithRSAEncryption
12:c9:f6:a0:16:e1:bc:3e:6a:01:26:60:53:6e:54:0b:8a:ef:
54:79:53:fc:69:e5:83:9d:c2:bc:b9:d4:dd:71:3e:10:f2:6d:
c0:7e:60:5b:8c:3c:44:0e:79:59:77:32:2d:82:ac:05:31:94:
e8:83:be:41:b2:2c:d0:54:9d:29:e5:da:91:83:55:5b:e8:15:
9b:61:0e:8a:0e:43:0b:54:49:d1:01:46:4a:98:0a:90:71:84:
48:5c:94:77:1f:6a:87:f8:a5:3e:86:29:b5:03:90:4a:95:d4:
cc:b4:a3:de:0c:6f:25:e6:29:f6:55:d9:42:fd:dd:7e:92:37:
75:72:32:b3:88:93:95:a4:73:ee:ad:13:15:bf:6a:b1:b5:2b:
82:91:c6:48:20:b8:07:57:0d:b5:3f:4f:9e:7f:ca:5c:9f:0d:
bf:24:8f:9b:6b:49:22:3f:47:75:11:ba:8c:76:8e:ad:b4:da:
ed:7f:7b:96:cc:f3:be:4a:59:5c:4e:07:86:d1:60:b7:06:49:
46:91:9c:79:13:fb:60:87:6c:79:6f:1d:e7:26:cd:5f:ba:71:
7f:52:5a:3d:0e:c4:9c:aa:81:07:10:83:1d:55:c0:1f:41:37:
c7:80:fe:52:e9:62:9f:1f:3e:4c:c9:03:c6:1d:16:25:73:eb:
f6:13:e4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:19 2023 by rpki-client on console-fra.rpki-client.org