Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/Z44cEWmUsx0aDwZ44kUwVtAVFwQ.roa
File: Z44cEWmUsx0aDwZ44kUwVtAVFwQ.roa (raw, json)
Hash identifier: iCBaQtyEylDW7S/MBLVtCp381hycjMUwJB7J4VxCAMQ=
Subject key identifier: 67:8E:1C:11:69:94:B3:1D:1A:0F:06:78:E2:45:30:56:D0:15:17:04
Certificate issuer: /CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498
Certificate serial: 1B6F196B
Authority key identifier: 60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/Z44cEWmUsx0aDwZ44kUwVtAVFwQ.roa
Signing time: Tue 14 Jun 2022 10:31:44 +0000
ROA not before: Tue 14 Jun 2022 10:31:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12779
IP address blocks: 5.104.26.0/23 maxlen: 23
5.104.30.0/24 maxlen: 24
5.104.28.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 460265835 (0x1b6f196b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498
Validity
Not Before: Jun 14 10:31:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=678e1c116994b31d1a0f0678e2453056d0151704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:86:6a:e5:b5:0f:d4:4f:fd:ad:6e:69:bb:30:
d7:a3:13:75:df:48:8a:32:01:2b:98:95:c5:86:03:
29:e0:d5:49:37:6e:72:ce:1d:e8:6f:11:3d:4e:6e:
cb:ab:ef:78:63:e4:03:2f:05:d4:41:ea:c8:6e:51:
b2:84:fa:14:3b:34:b1:bd:a9:bc:9f:35:70:c0:53:
a9:29:d5:83:34:21:78:f7:f1:5f:3e:e6:13:19:02:
7a:37:28:1f:95:cf:68:1d:95:df:ac:5e:11:56:ba:
58:d7:0a:b9:10:7a:7b:31:20:31:87:2d:0b:dd:77:
99:12:7f:01:e2:07:bf:35:32:ff:f2:f0:21:81:b1:
1f:70:21:6b:55:4f:7d:35:56:66:b5:52:19:a4:7d:
a3:99:13:51:77:7e:3b:8a:27:34:48:0b:89:84:25:
da:38:c0:64:e1:e0:91:b9:b4:b0:84:8a:52:0f:0e:
39:89:1b:b8:62:4a:e1:79:f0:3c:06:99:fb:d1:30:
48:85:8f:c0:c2:4b:b0:d8:de:63:3b:2c:e1:9e:3d:
9c:a4:e3:8a:2e:2b:a2:47:71:34:70:6d:88:da:d0:
92:ec:0f:d3:7a:a4:cc:c9:e0:36:ba:bd:1b:73:9f:
e9:89:46:03:b4:e1:a0:1b:b3:0f:83:46:52:ff:a5:
b2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:8E:1C:11:69:94:B3:1D:1A:0F:06:78:E2:45:30:56:D0:15:17:04
X509v3 Authority Key Identifier:
keyid:60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/Z44cEWmUsx0aDwZ44kUwVtAVFwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.26.0-5.104.30.255
Signature Algorithm: sha256WithRSAEncryption
b1:c5:72:e4:3d:7f:ef:33:1e:40:a4:2e:22:c5:58:4d:01:38:
22:87:a9:b0:0f:b8:08:a0:c9:12:c1:ac:9f:88:b6:63:e0:2f:
b4:92:36:80:36:38:d9:5e:21:55:f0:fd:9d:b4:a9:be:25:e0:
13:9c:10:e3:76:65:9b:39:20:f8:63:28:c3:f3:58:e4:85:a5:
cd:c1:ba:1d:b9:e9:27:2c:94:90:52:d3:05:83:2a:5a:cc:f9:
a2:6b:b7:9c:00:fe:d1:06:26:87:1f:0f:c3:97:60:0e:ce:db:
8c:64:f2:aa:aa:26:b2:28:3d:f0:84:7c:3a:bb:7c:3a:38:0b:
04:0b:0d:92:98:16:ce:9a:f6:3f:98:e8:c9:6a:c2:36:6f:51:
cf:7c:8f:83:f8:f1:85:8d:9e:26:1f:25:35:07:25:fd:5c:e4:
e9:55:5e:8b:8e:3d:f6:70:7b:0a:1c:84:19:66:b2:b8:9d:2c:
08:80:0a:2d:9e:f9:89:43:d2:f3:ee:2b:02:5d:3f:5c:a3:11:
a4:3d:7a:2f:66:8e:56:8b:ac:ad:1c:b8:21:65:43:7f:ff:e5:
fc:3e:97:c4:fa:97:45:2c:d2:a8:ba:70:5a:c4:5b:9b:dc:06:
4a:3c:cc:6e:38:17:fe:ac:67:bc:33:90:64:ae:46:96:d5:3e:
a5:b4:17:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:50 2024 by rpki-client on console-fra.rpki-client.org