Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/oSu_n0jn_JOK37lH-G86tz2oBJE.roa
File: oSu_n0jn_JOK37lH-G86tz2oBJE.roa (raw, json)
Hash identifier: A5xV4n2vRfpVQRpT4s7wwFuOanvbk7NQO67oQHEAgNU=
Subject key identifier: A1:2B:BF:9F:48:E7:FC:93:8A:DF:B9:47:F8:6F:3A:B7:3D:A8:04:91
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 3A5CBF99
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/oSu_n0jn_JOK37lH-G86tz2oBJE.roa
Signing time: Sat 01 Jan 2022 14:56:33 +0000
ROA not before: Sat 01 Jan 2022 14:56:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62318
IP address blocks: 5.160.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 979156889 (0x3a5cbf99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 14:56:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a12bbf9f48e7fc938adfb947f86f3ab73da80491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:01:f6:d4:6a:83:48:28:64:1a:63:16:d7:d7:
d8:cd:2f:55:6c:3b:e9:f7:a0:38:91:a6:a0:20:ca:
cb:2e:aa:9b:f5:52:e7:58:6b:80:27:cc:3d:86:25:
94:ce:09:34:56:dd:f5:21:66:e2:8b:3b:4f:65:3b:
a7:41:86:41:e6:f3:20:8c:63:fc:25:a8:9e:3d:5d:
eb:71:cd:db:9e:8e:25:2b:e8:0c:99:aa:de:6b:21:
31:c5:3b:85:d8:94:df:43:c8:d1:be:eb:99:fa:4f:
bd:1a:4f:fd:58:69:b8:74:d5:ac:d3:8b:15:4c:47:
c6:76:32:f0:5e:a6:11:8d:8c:99:e3:ef:ca:f8:b1:
b0:1c:39:72:8c:5b:91:a0:20:a6:3e:e5:7a:c7:a2:
80:15:e1:8d:c6:be:0e:09:07:0d:13:8b:55:37:49:
b0:c9:b5:62:c6:87:ef:48:f0:12:2b:37:1a:b0:72:
f1:25:13:11:07:f3:d3:4d:0c:22:04:a0:49:92:11:
aa:83:d1:5e:b3:a4:cb:7a:de:32:d6:c2:c4:61:9c:
0a:1b:cb:68:bf:d3:f1:07:36:cb:25:75:89:b3:f7:
2c:1d:8e:72:ae:25:ef:9e:af:e8:03:63:39:1a:27:
bd:1f:f8:ca:6a:6f:be:58:12:95:08:11:ec:31:4b:
bc:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:2B:BF:9F:48:E7:FC:93:8A:DF:B9:47:F8:6F:3A:B7:3D:A8:04:91
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/oSu_n0jn_JOK37lH-G86tz2oBJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.30.0/24
Signature Algorithm: sha256WithRSAEncryption
28:fa:76:c1:a6:03:72:e6:c2:02:08:d2:9f:85:56:88:31:28:
a7:ca:fd:46:45:00:ab:8c:11:8e:82:4b:cd:dc:b6:8f:60:f2:
74:f3:bc:db:5c:92:be:2b:00:1f:b1:ca:04:89:bb:0a:28:0a:
86:62:ca:68:85:1c:a5:d2:fb:7e:c4:ab:2e:83:e4:b6:a2:74:
a7:ca:fd:6b:a0:0b:a1:d4:e8:1f:59:c7:3f:e6:d6:34:a8:b7:
ba:71:9a:9d:69:9b:05:ce:24:82:71:83:13:e8:0d:eb:dc:52:
06:d0:2f:e8:d1:92:56:2d:d3:74:26:d4:76:ee:80:33:cc:ba:
5d:c4:b5:08:00:4a:c1:45:64:dc:5b:a4:38:75:fd:b6:39:e8:
57:64:dd:2b:85:ca:29:68:18:7b:c6:7f:19:21:32:83:e7:25:
36:0d:54:f1:4d:28:88:f1:74:97:65:8e:82:d9:be:c1:f5:c5:
da:6c:67:ce:70:59:e4:e7:df:60:01:e6:4d:91:e9:1f:dd:c4:
4b:5f:6c:27:49:ad:82:ae:02:00:de:a2:03:b2:be:19:d1:a2:
b4:99:96:e8:ff:d3:e8:57:5d:46:af:0f:59:5f:83:70:10:8a:
ce:9e:b7:48:14:39:65:47:28:fd:b9:41:c9:d3:70:cc:d5:32:
27:f6:51:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:07 2023 by rpki-client on console-ams.rpki-client.org