Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/vRMKHHsF2Z5wFLLTK8J9HLwodRc.roa
File: vRMKHHsF2Z5wFLLTK8J9HLwodRc.roa (raw, json)
Hash identifier: liViRoIFW+FbI9kbSDgUpzw1wCaVzQdkhQSgYqqajpM=
Subject key identifier: BD:13:0A:1C:7B:05:D9:9E:70:14:B2:D3:2B:C2:7D:1C:BC:28:75:17
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 3A5653F4
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/vRMKHHsF2Z5wFLLTK8J9HLwodRc.roa
Signing time: Sat 01 Jan 2022 14:56:30 +0000
ROA not before: Sat 01 Jan 2022 14:56:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60932
IP address blocks: 5.160.198.0/24 maxlen: 24
5.160.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 978736116 (0x3a5653f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 14:56:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bd130a1c7b05d99e7014b2d32bc27d1cbc287517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3a:8e:b7:a9:bd:8a:e4:a6:aa:4d:51:fb:79:
de:da:f5:39:91:bd:a2:a9:a8:94:39:3d:83:63:91:
5b:69:08:2e:c2:44:e9:31:d7:98:47:13:60:34:7e:
47:cb:5c:4c:f1:d9:9f:c1:d8:be:c0:ec:09:9d:b7:
06:da:80:4f:00:b0:35:7a:c6:3f:bf:b2:d9:34:a7:
96:09:f0:1e:26:db:2f:2f:fe:0d:df:95:bc:20:6c:
6c:72:5c:e6:c1:a7:2d:87:f0:c4:c0:84:0c:4a:5e:
6c:3c:f7:21:14:cc:df:c0:c4:90:08:6c:a4:df:8e:
93:40:83:20:bc:7c:24:a0:f3:9a:5d:5a:c5:2a:92:
29:be:2e:22:a2:12:f9:8a:49:a4:4a:0a:c3:14:8e:
d1:fb:7e:2d:e5:a7:97:d8:08:6b:a8:78:79:25:7d:
4f:4c:d0:0d:ae:fb:65:c8:5c:4d:2f:cb:7e:d1:72:
c9:b0:b8:6e:83:76:6d:c1:41:26:8b:81:a5:93:77:
86:9b:ad:85:6c:ad:0e:7f:0e:12:7c:8f:f9:ef:b3:
a6:f6:fc:41:9b:b4:18:79:36:21:31:0e:b7:79:81:
f0:74:bb:f3:ed:85:c4:0a:5f:6b:c2:c1:06:31:35:
c7:ab:9e:74:65:ee:2c:22:4a:86:cd:57:22:19:72:
53:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:13:0A:1C:7B:05:D9:9E:70:14:B2:D3:2B:C2:7D:1C:BC:28:75:17
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/vRMKHHsF2Z5wFLLTK8J9HLwodRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.153.0/24
5.160.198.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:6b:41:1c:2c:82:4d:05:d3:d4:c0:cf:2c:71:35:3d:ff:0d:
2d:a0:bb:4c:17:6d:1a:5d:ca:b5:ee:20:28:0f:6a:8b:0d:87:
f6:c2:a4:c9:26:db:9a:19:4a:9c:40:22:a3:29:d1:4f:d8:e6:
71:96:70:69:76:2f:34:94:b5:eb:1a:b2:64:c4:c3:8c:4f:f1:
d0:38:ac:b2:5e:46:0a:bd:5b:c8:5d:8f:90:4c:0f:9a:84:78:
8e:29:da:b8:ea:3f:7f:cb:37:1c:41:d8:ea:0b:38:4f:8a:13:
c9:c4:23:df:ad:b2:97:26:01:c0:2f:2a:06:98:84:e0:c9:30:
2a:e9:44:a5:14:b9:fb:ef:7d:f6:8a:b9:8b:02:43:39:84:dd:
b4:19:c2:04:f7:e9:17:c0:9d:80:af:95:f9:38:49:9c:b3:cf:
b9:3f:69:96:b3:02:25:85:f1:21:b4:ed:96:aa:08:01:eb:8e:
78:c5:8b:ae:54:1b:52:08:49:fa:51:db:25:a7:fb:90:bf:fc:
9a:69:f4:97:e4:cd:89:e8:29:ad:90:4d:62:2d:bb:99:81:a2:
59:3f:28:ca:d6:75:36:4a:11:1c:6b:0c:c0:90:4f:f7:37:dd:
d8:50:d3:d1:d0:47:5d:58:1c:6c:26:55:ec:b6:a5:37:22:46:
1b:f4:c0:c2
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEOlZT9DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MWNjYTlmMTVlMTkyMTk1M2E2MjhjOGFkMmFjNGJlOTc3YjZjMzAzMB4XDTIyMDEw
MTE0NTYzMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmQxMzBhMWM3YjA1
ZDk5ZTcwMTRiMmQzMmJjMjdkMWNiYzI4NzUxNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJk6jrepvYrkpqpNUft53tr1OZG9oqmolDk9g2ORW2kILsJE
6THXmEcTYDR+R8tcTPHZn8HYvsDsCZ23BtqATwCwNXrGP7+y2TSnlgnwHibbLy/+
Dd+VvCBsbHJc5sGnLYfwxMCEDEpebDz3IRTM38DEkAhspN+Ok0CDILx8JKDzml1a
xSqSKb4uIqIS+YpJpEoKwxSO0ft+LeWnl9gIa6h4eSV9T0zQDa77ZchcTS/LftFy
ybC4boN2bcFBJouBpZN3hputhWytDn8OEnyP+e+zpvb8QZu0GHk2ITEOt3mB8HS7
8+2FxApfa8LBBjE1x6uedGXuLCJKhs1XIhlyUxUCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBS9EwocewXZnnAUstMrwn0cvCh1FzAfBgNVHSMEGDAWgBSBzKnxXhkhlTpi
jIrSrEvpd7bDAzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2djeXA4VjRaSVpVNllveUswcXhMNlhlMnd3TS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjQvMWVhMmIwLTZiOWEtNDRkNy1hMmU1LTIyMDZjYzJlNjkxYy8x
L3ZSTUtISHNGMlo1d0ZMTFRLOEo5SEx3b2RSYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQv
MWVhMmIwLTZiOWEtNDRkNy1hMmU1LTIyMDZjYzJlNjkxYy8xL2djeXA4VjRaSVpV
NllveUswcXhMNlhlMnd3TS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAAWgmQMEAAWgxjANBgkqhkiG9w0B
AQsFAAOCAQEAbGtBHCyCTQXT1MDPLHE1Pf8NLaC7TBdtGl3Kte4gKA9qiw2H9sKk
ySbbmhlKnEAioynRT9jmcZZwaXYvNJS16xqyZMTDjE/x0Dissl5GCr1byF2PkEwP
moR4jinauOo/f8s3HEHY6gs4T4oTycQj362ylyYBwC8qBpiE4MkwKulEpRS5++99
9oq5iwJDOYTdtBnCBPfpF8CdgK+V+ThJnLPPuT9plrMCJYXxIbTtlqoIAeuOeMWL
rlQbUghJ+lHbJaf7kL/8mmn0l+TNiegprZBNYi27mYGiWT8oytZ1NkoRHGsMwJBP
9zfd2FDT0dBHXVgcbCZV7LalNyJGG/TAwg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:31 2024 by rpki-client on console-fra.rpki-client.org