Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/65c891-bb51-4918-b279-1c9aa1ed4c9d/1/DMAn484wTt2n3rMJvHE8TV3EwR8.roa
File: DMAn484wTt2n3rMJvHE8TV3EwR8.roa (raw, json)
Hash identifier: /3JoEPLsxulQ/KGZKHHyLAfTB6vwYsInD0fBAaWvrW4=
Subject key identifier: 0C:C0:27:E3:CE:30:4E:DD:A7:DE:B3:09:BC:71:3C:4D:5D:C4:C1:1F
Certificate issuer: /CN=06653b049325fc287373325d0da4d9631c951e78
Certificate serial: 0834C7C5
Authority key identifier: 06:65:3B:04:93:25:FC:28:73:73:32:5D:0D:A4:D9:63:1C:95:1E:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmU7BJMl_ChzczJdDaTZYxyVHng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/65c891-bb51-4918-b279-1c9aa1ed4c9d/1/DMAn484wTt2n3rMJvHE8TV3EwR8.roa
Signing time: Sat 01 Jan 2022 14:01:35 +0000
ROA not before: Sat 01 Jan 2022 14:01:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209910
IP address blocks: 5.252.92.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137676741 (0x834c7c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06653b049325fc287373325d0da4d9631c951e78
Validity
Not Before: Jan 1 14:01:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0cc027e3ce304edda7deb309bc713c4d5dc4c11f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:e5:35:cc:54:8d:77:ce:68:2d:7e:3d:aa:65:
8e:55:1b:41:4a:37:87:c8:71:9c:d7:73:56:5f:50:
d6:19:a0:03:0e:df:e0:6c:ce:ea:8f:4d:43:42:db:
75:aa:a9:81:7c:f8:2f:91:33:03:b9:8d:38:4b:44:
4f:ac:99:cc:ed:e4:98:c0:d8:c7:5b:17:11:7f:e3:
fe:d9:5a:32:c3:c9:cb:b4:99:f7:01:e2:5f:b4:57:
a9:d2:cf:d3:ab:b6:12:a6:bf:5a:cc:70:16:6c:30:
b9:79:d3:2b:b2:dd:be:c9:31:25:92:4c:36:3c:a1:
a9:f0:a7:0a:3b:c5:96:af:1c:9f:98:8b:46:af:7c:
b8:6c:b6:1a:d9:36:23:f7:16:0d:69:93:f3:1d:ad:
e1:a5:6f:ad:92:0a:08:c0:08:31:49:70:a8:81:73:
32:fe:38:42:9b:f1:9c:a5:3e:fc:c7:c5:08:62:73:
8b:55:74:16:b2:8a:35:c1:69:61:f4:58:e3:79:94:
2d:94:19:94:d3:60:e4:3a:0a:d1:e9:aa:31:43:aa:
e2:8a:19:62:9f:f3:6b:6b:3b:6c:a8:16:59:1c:a4:
90:37:37:06:b3:3f:67:d5:e4:4b:4b:72:c3:79:46:
e1:c1:69:dd:d1:1a:d0:98:fb:30:ea:e2:8d:7c:68:
f9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C0:27:E3:CE:30:4E:DD:A7:DE:B3:09:BC:71:3C:4D:5D:C4:C1:1F
X509v3 Authority Key Identifier:
keyid:06:65:3B:04:93:25:FC:28:73:73:32:5D:0D:A4:D9:63:1C:95:1E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmU7BJMl_ChzczJdDaTZYxyVHng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/65c891-bb51-4918-b279-1c9aa1ed4c9d/1/DMAn484wTt2n3rMJvHE8TV3EwR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/65c891-bb51-4918-b279-1c9aa1ed4c9d/1/BmU7BJMl_ChzczJdDaTZYxyVHng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.92.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:de:10:ce:37:81:3f:d2:93:9a:e5:6f:f7:32:4b:49:32:71:
45:fc:c3:83:46:4d:f2:3e:49:f2:98:a2:5f:d1:f9:ea:7b:90:
79:20:52:2a:f5:e2:02:21:03:ee:9c:52:d8:cc:2a:12:0e:1f:
94:54:b2:d1:6e:b8:ff:02:e7:a3:dd:12:95:40:fe:4a:65:cb:
f2:04:78:db:8d:09:f7:30:e2:7a:10:76:4b:5f:be:b4:14:5d:
52:9a:d2:54:cd:20:64:28:dc:54:95:3f:91:b2:8d:1c:3b:b5:
e1:12:39:be:fc:5e:cd:1f:3e:4e:ac:31:df:0f:65:65:f3:45:
64:a0:2a:a7:9b:26:a4:ae:cf:c9:3d:49:ff:04:3f:18:09:e7:
bb:14:4c:4d:91:23:67:ab:d3:f7:a9:45:1c:0d:bc:cc:e7:21:
14:28:ad:8c:34:2c:63:63:8e:4a:4c:68:7c:d1:93:37:af:be:
f8:c4:5c:3a:97:e3:19:5b:60:cb:92:7c:90:32:8b:79:4b:4e:
63:57:49:39:61:25:01:3d:c5:e4:f2:9e:56:60:e8:9e:04:04:
22:ca:bb:0b:94:1b:ba:33:ef:e0:48:14:88:62:93:a3:8b:e8:
60:dc:e0:8c:dd:0f:4e:f1:31:bc:4a:d8:91:79:44:9f:f1:b4:
9f:45:47:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:33 2023 by rpki-client on console-ams.rpki-client.org