Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/KFeNJQOUHLrZ7FflQD_RuB_nKqw.roa
File: KFeNJQOUHLrZ7FflQD_RuB_nKqw.roa (raw, json)
Hash identifier: hG6Zuqkm/CxwUobLgxBZtq2/8JxU2Gyum8iCiS0JtfM=
Subject key identifier: 28:57:8D:25:03:94:1C:BA:D9:EC:57:E5:40:3F:D1:B8:1F:E7:2A:AC
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 09A4A6EC
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/KFeNJQOUHLrZ7FflQD_RuB_nKqw.roa
Signing time: Sat 01 Jan 2022 05:04:15 +0000
ROA not before: Sat 01 Jan 2022 05:04:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207614
IP address blocks: 5.154.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161785580 (0x9a4a6ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 1 05:04:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=28578d2503941cbad9ec57e5403fd1b81fe72aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:15:a6:e4:f6:ab:60:24:94:2d:5a:7b:0f:42:
37:a8:4b:94:05:9c:de:03:e0:ac:b0:fe:e4:19:50:
b9:30:b4:91:99:5e:8f:49:00:1b:47:ac:0b:f1:92:
f2:5a:46:2c:ce:2b:9b:b4:9d:cc:bc:03:f9:04:7a:
ee:22:a7:29:2f:9a:de:57:6d:04:33:f7:d8:b8:54:
c4:8d:62:de:df:2e:3f:d3:3f:b8:f8:95:52:0c:51:
23:6a:cb:8f:2a:c5:aa:68:d5:37:71:cf:ff:b9:51:
d0:fd:ad:5d:fb:fb:6f:15:fe:0d:a8:33:84:ea:86:
89:6e:05:d1:13:40:ae:03:c2:8a:4d:be:4e:c0:59:
ef:60:62:bd:42:00:79:ef:42:f7:ff:96:4d:de:91:
81:e5:65:73:5a:64:45:3d:97:9c:88:6b:e2:d0:31:
2e:cf:0f:59:07:98:3d:74:12:53:3c:7e:e5:c3:86:
8b:50:43:84:c3:e0:89:b0:9a:5c:dd:c7:f0:b7:db:
c7:f8:b9:0b:d5:2c:ef:b5:31:75:97:44:87:b6:06:
ac:fb:e3:1f:51:32:00:0b:eb:52:99:92:6d:b2:58:
04:a0:7e:58:82:a9:68:22:50:dd:d9:b4:7e:ff:7d:
24:e3:7a:b0:a4:f4:2b:30:ae:65:51:c8:a9:9e:eb:
19:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:57:8D:25:03:94:1C:BA:D9:EC:57:E5:40:3F:D1:B8:1F:E7:2A:AC
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/KFeNJQOUHLrZ7FflQD_RuB_nKqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.7.0/24
Signature Algorithm: sha256WithRSAEncryption
89:ae:19:d4:6c:5f:55:fa:8c:8c:b0:e8:86:d7:c7:b3:a2:fd:
a3:f7:ee:8d:73:c7:ee:a1:cc:57:9e:93:5f:e2:9a:33:17:44:
f2:6b:79:24:12:12:c7:66:eb:81:5b:bd:c8:4f:26:e5:9e:b1:
59:61:9b:bc:0c:2a:a9:78:c5:8e:64:63:c9:f0:f9:3c:65:d7:
01:93:22:1a:93:13:c1:1f:d8:e7:27:bb:a8:a6:b0:02:c7:97:
80:10:ab:8c:c9:a0:f3:b4:57:08:57:b5:cc:5d:70:78:8b:48:
7c:be:da:39:c0:69:c2:fc:1e:6c:4e:d7:3b:c8:9f:9d:9f:3b:
38:ec:9a:0b:ae:6f:53:fd:6c:3d:47:44:22:58:49:37:24:f2:
db:73:c4:74:ce:4d:4a:fc:7b:0b:d2:2a:02:50:47:bb:60:37:
85:90:af:3c:e3:9a:ab:e4:80:80:a5:08:eb:a3:b8:d4:50:86:
24:a4:c9:4d:86:3a:50:1a:4a:e9:bc:a2:7d:3e:88:69:d3:f9:
55:b8:a9:dd:1c:cc:1f:a2:36:e6:8c:b7:a5:ba:f7:7f:40:18:
d5:95:36:69:bc:b7:e1:b9:5c:bf:d0:be:b9:5e:1d:14:39:23:
a2:7b:30:a8:12:4b:8c:3b:f4:03:f4:cd:cf:ec:22:16:0d:b0:
5a:e1:a2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:20 2023 by rpki-client on console-fra.rpki-client.org