Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/lTt2R9WtZdAug_J6g4etcvLM59c.roa
File: lTt2R9WtZdAug_J6g4etcvLM59c.roa (raw, json)
Hash identifier: 1n8ubxDHZABDDIdAJ5D1XVkWBp9nVqdRmUU0wd5eXDQ=
Subject key identifier: 95:3B:76:47:D5:AD:65:D0:2E:83:F2:7A:83:87:AD:72:F2:CC:E7:D7
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 3B926E32
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/lTt2R9WtZdAug_J6g4etcvLM59c.roa
Signing time: Sun 24 Apr 2022 11:04:49 +0000
ROA not before: Sun 24 Apr 2022 11:04:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62048
IP address blocks: 5.160.146.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 999452210 (0x3b926e32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Apr 24 11:04:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=953b7647d5ad65d02e83f27a8387ad72f2cce7d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f1:ac:ce:4e:d5:f6:86:e4:df:07:0c:3f:9b:
af:af:46:6c:09:e6:19:a9:45:fc:37:15:cc:84:f0:
e2:dd:43:d3:95:c0:bb:7c:bb:d7:9c:67:72:c4:ec:
39:aa:7b:8b:45:27:fd:b3:4d:30:a3:9d:12:1c:53:
55:12:cf:46:0e:fe:a2:a5:00:88:89:24:50:f8:6f:
ac:88:76:a2:48:c5:7f:00:33:94:11:40:98:4f:1f:
91:c5:6c:47:1f:a3:b0:3f:e1:04:78:1d:f6:f5:b8:
0b:c3:b0:a2:4e:3f:3d:59:cb:8a:93:68:11:b9:87:
16:69:61:b7:97:30:63:48:b8:66:be:59:86:55:e5:
60:c1:39:71:6a:f8:9c:a2:1c:1c:1e:82:4b:81:c6:
62:a3:1a:ba:e9:34:d5:e5:37:5a:c3:31:99:b9:b1:
1a:82:3c:33:77:0c:6e:26:c6:5c:6e:da:c7:e8:3a:
b1:9b:b4:c0:8d:61:bb:bf:a5:47:66:ac:82:6a:36:
fa:1e:eb:e6:ac:a2:73:a4:41:79:dd:18:0e:9f:c9:
cf:5f:1b:82:52:49:39:de:0c:b1:3c:b2:23:10:fd:
95:e7:bc:73:96:41:fd:d2:85:46:ca:b0:54:a0:b3:
3a:c3:e1:dc:bf:91:0c:6a:80:c7:a2:55:b4:53:aa:
40:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:3B:76:47:D5:AD:65:D0:2E:83:F2:7A:83:87:AD:72:F2:CC:E7:D7
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/lTt2R9WtZdAug_J6g4etcvLM59c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.146.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:70:f4:6b:18:e8:55:e7:6f:3b:16:62:75:7c:0a:ae:8b:38:
9a:50:ae:51:9c:e3:b7:48:ef:5e:b4:90:00:c9:cd:00:3d:08:
94:3f:7f:96:19:10:28:7d:59:e0:88:64:ac:10:f3:45:0b:eb:
40:5e:83:09:f4:93:cf:cd:af:fa:36:b3:19:a0:f0:51:2d:3c:
8e:8f:d0:6a:84:f5:50:2a:c2:bf:8b:0b:d0:81:77:1f:9c:98:
7d:c0:85:1b:11:d8:8d:aa:fc:c9:ce:55:5a:c1:7a:85:97:73:
b3:15:7e:bd:ec:83:18:83:91:cc:29:04:4e:b2:25:18:cf:9b:
66:6f:2e:ee:48:9d:f7:68:0b:53:f4:c7:94:da:b4:92:66:fa:
3c:67:b8:b8:71:d4:fd:72:a2:1c:a4:b1:e0:ce:f9:70:7d:1a:
8b:d1:6a:c0:0a:36:77:06:9d:e1:c9:a6:95:78:83:9a:18:ed:
2b:2e:ba:5e:e4:07:9c:c1:13:d4:fc:cf:34:39:8c:8d:cb:ee:
37:76:48:e1:72:a4:10:86:ba:60:ea:28:5d:38:00:c7:d6:42:
40:5b:c0:cf:eb:50:7f:68:12:3f:4d:55:b9:9a:14:6f:9e:81:
b5:e3:bb:cf:8a:2c:97:9d:19:d4:cd:2b:f9:be:61:3a:c9:7b:
d7:71:81:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:19 2023 by rpki-client on console-fra.rpki-client.org