Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/ab6LyV_E5UxkduDHK7VDwnK5hL8.roa
File: ab6LyV_E5UxkduDHK7VDwnK5hL8.roa (raw, json)
Hash identifier: 0cAzZ3qH4RuyUjyu/ZMlVyrT756VuraZwhRFNgEitqs=
Subject key identifier: 69:BE:8B:C9:5F:C4:E5:4C:64:76:E0:C7:2B:B5:43:C2:72:B9:84:BF
Certificate issuer: /CN=e84187984faaeff8fa1d0d48aed7c0cfd800de34
Certificate serial: 01B42A91
Authority key identifier: E8:41:87:98:4F:AA:EF:F8:FA:1D:0D:48:AE:D7:C0:CF:D8:00:DE:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/ab6LyV_E5UxkduDHK7VDwnK5hL8.roa
Signing time: Sat 01 Jan 2022 05:51:59 +0000
ROA not before: Sat 01 Jan 2022 05:51:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211128
IP address blocks: 5.181.55.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28584593 (0x1b42a91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84187984faaeff8fa1d0d48aed7c0cfd800de34
Validity
Not Before: Jan 1 05:51:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=69be8bc95fc4e54c6476e0c72bb543c272b984bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2f:1c:9a:4c:82:27:24:ba:23:1a:37:a1:75:
d4:c7:55:a9:54:eb:99:f5:ae:bf:73:59:2d:ed:41:
57:c8:a3:db:4c:2a:09:6a:43:d2:62:40:7f:3d:be:
70:dd:ea:c5:61:e3:1e:1d:f7:19:b9:83:bb:6f:32:
61:6a:bc:5f:c7:43:76:c6:6a:8f:a6:78:52:54:51:
fc:b5:60:dd:c3:64:4b:12:c8:0d:89:42:b1:cc:d7:
75:53:76:ba:97:29:30:c3:04:a2:b3:af:5a:fe:e2:
92:49:47:45:40:b2:78:ff:82:52:fa:51:7f:18:10:
28:41:8e:a5:2f:5f:6e:68:72:09:00:ce:d4:ed:15:
20:02:65:44:49:4a:36:cb:36:77:c8:fa:9f:d5:70:
62:ee:27:8c:33:2a:5f:31:5a:9f:8a:a4:44:a7:a7:
34:a7:15:2a:35:cc:0b:77:21:2f:fe:0e:ee:08:4f:
02:ee:73:af:92:8b:67:06:1f:71:cb:f6:40:27:82:
a4:ad:73:9b:07:84:f6:9f:e8:db:32:86:0c:f6:64:
d4:00:2d:35:1b:be:0b:52:69:1b:b9:8b:c3:9a:17:
6d:5d:02:a8:45:13:01:09:23:ad:5b:16:2e:e0:8d:
18:09:d9:ea:10:14:e9:89:ff:be:95:c5:ed:b3:9d:
b2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:BE:8B:C9:5F:C4:E5:4C:64:76:E0:C7:2B:B5:43:C2:72:B9:84:BF
X509v3 Authority Key Identifier:
keyid:E8:41:87:98:4F:AA:EF:F8:FA:1D:0D:48:AE:D7:C0:CF:D8:00:DE:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/ab6LyV_E5UxkduDHK7VDwnK5hL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.55.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:a7:c9:27:57:c2:b6:6a:fc:a0:49:53:87:0c:cf:bc:21:77:
4b:4c:8b:17:07:36:41:d2:d1:3b:50:19:85:b4:a9:08:7b:12:
01:9e:d6:d6:c3:ae:2a:51:12:3c:b9:a5:e6:e7:30:7d:cf:ed:
30:0c:58:57:0f:b2:7b:36:89:d9:8e:66:92:ad:5d:0b:1f:e8:
1d:0f:f9:da:1a:4b:16:0f:83:f9:8f:f0:67:30:f7:d3:e5:42:
7b:ce:ea:de:b6:8f:cc:96:9e:3d:9c:72:ea:fc:57:2b:70:93:
09:26:6f:a7:af:d1:50:b2:70:cb:e9:ae:b6:e3:e8:fa:5f:4e:
f6:fb:11:ea:da:90:d5:28:1e:57:19:dd:d1:8d:14:ec:fb:ce:
05:6b:35:b6:ea:a7:80:30:b5:4e:86:f1:31:58:ad:5c:85:95:
b4:dc:2f:34:97:61:6a:6a:68:ab:3a:11:da:f9:e0:7d:bf:3c:
a2:57:20:ed:09:6c:15:51:c4:5c:72:24:5b:a2:38:0f:f6:df:
d3:f6:56:f0:22:1b:61:46:f0:c7:f1:87:c4:44:ae:f4:7f:01:
be:43:65:08:a8:47:38:13:80:7e:55:85:62:ba:de:2a:54:3b:
a6:ee:c1:63:a3:9e:6c:93:67:54:74:52:94:a2:f0:8c:1f:69:
20:98:49:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:41 2024 by rpki-client on console-fra.rpki-client.org