Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/a6dWdl-by4Bk864NTL79t2osLXE.roa
File: a6dWdl-by4Bk864NTL79t2osLXE.roa (raw, json)
Hash identifier: kYj8Ge16Mko2qfyKRHfIEW8lSFi/CA3DvWgb9ywNsXk=
Subject key identifier: 6B:A7:56:76:5F:9B:CB:80:64:F3:AE:0D:4C:BE:FD:B7:6A:2C:2D:71
Certificate issuer: /CN=0f0f9f044e2b929878d747c5ffbb80ad10e3d6bd
Certificate serial: 01847CC60961728B9A1FAEAFDA80ADAC7BCE
Authority key identifier: 0F:0F:9F:04:4E:2B:92:98:78:D7:47:C5:FF:BB:80:AD:10:E3:D6:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dw-fBE4rkph410fF_7uArRDj1r0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/a6dWdl-by4Bk864NTL79t2osLXE.roa
Signing time: Tue 15 Nov 2022 19:31:03 +0000
ROA not before: Tue 15 Nov 2022 19:31:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201589
IP address blocks: 5.101.71.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7c:c6:09:61:72:8b:9a:1f:ae:af:da:80:ad:ac:7b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f0f9f044e2b929878d747c5ffbb80ad10e3d6bd
Validity
Not Before: Nov 15 19:31:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ba756765f9bcb8064f3ae0d4cbefdb76a2c2d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ba:38:8a:cc:32:e1:ec:3d:5f:a4:b1:09:bf:
96:b7:52:4b:5c:10:05:ad:d7:51:4c:a5:39:8c:6c:
f2:39:c0:8e:60:fd:a1:52:5a:b6:52:80:4c:2c:a3:
c9:17:c6:aa:6d:a0:31:bd:37:82:06:0a:9b:ce:d2:
e1:8f:00:7a:68:eb:fc:fc:d7:8e:a1:5a:6d:cd:f0:
3f:a2:3b:cf:da:b8:61:35:32:a1:97:07:da:c5:9c:
9a:67:ed:5f:9f:86:74:ed:5b:ca:d6:08:7f:a2:0d:
5a:99:14:7b:82:27:de:98:e5:c8:88:88:94:93:63:
01:b4:06:db:77:d1:94:f5:4e:c2:8d:52:74:f4:29:
69:89:45:ff:60:45:fb:70:ea:65:52:2b:40:87:36:
e0:53:a4:74:bb:52:17:23:6c:66:f8:c1:a8:2f:15:
6d:3d:7d:69:3e:8d:c5:73:85:08:9f:75:e6:63:2c:
d6:ed:ec:ef:c2:e2:7d:4d:d5:2c:14:21:b5:94:0d:
d1:1d:2e:e1:ed:a7:c1:63:0d:29:51:e2:6e:4f:73:
3f:d2:db:cf:71:82:81:5a:fb:7d:b1:d2:86:43:14:
0b:1e:20:2e:6d:4c:6f:6d:cc:56:e9:70:0a:57:a3:
41:97:5d:6d:0d:57:ee:fb:55:10:fc:60:b9:71:9e:
2e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A7:56:76:5F:9B:CB:80:64:F3:AE:0D:4C:BE:FD:B7:6A:2C:2D:71
X509v3 Authority Key Identifier:
keyid:0F:0F:9F:04:4E:2B:92:98:78:D7:47:C5:FF:BB:80:AD:10:E3:D6:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dw-fBE4rkph410fF_7uArRDj1r0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/a6dWdl-by4Bk864NTL79t2osLXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.101.71.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:a7:2f:0b:93:39:60:aa:31:c2:fe:a9:a6:7e:df:6f:be:0a:
93:bd:83:95:fb:8b:28:65:77:5d:12:5d:3d:65:8d:58:48:4d:
2b:6f:1d:8b:b6:88:71:ee:92:32:a7:cd:84:05:c3:14:91:a4:
d2:b3:a8:3a:6a:59:a2:f0:59:14:e8:30:f1:2e:f4:1a:c2:af:
da:34:4e:51:2d:18:af:c8:c8:20:55:73:91:86:91:a0:fc:77:
9a:53:b2:84:81:fa:ec:43:c9:02:1e:5c:f5:9a:5c:d3:b7:56:
96:e1:23:24:cb:ee:08:a9:77:af:89:15:bd:0d:ee:62:a4:8d:
0b:a0:93:27:48:b7:85:5e:a8:63:cd:81:34:c1:43:0d:bb:21:
20:8f:a3:ba:90:96:43:b1:f7:56:7e:c1:2e:3e:fb:52:1d:9e:
24:57:ef:34:e0:be:21:b2:b0:b3:ee:97:cc:85:83:a0:03:30:
83:6a:6b:45:aa:1d:73:47:bc:9a:f0:b6:84:e9:82:4e:9a:0f:
4d:e1:50:7e:e0:17:6b:86:63:33:6d:a8:ce:b9:c3:58:30:45:
15:90:58:0f:fc:21:b0:e6:73:da:2d:63:65:3b:3a:9b:18:b1:
05:73:fb:78:5a:35:5b:ad:c0:21:90:fa:c1:63:74:f3:2c:5b:
79:5d:fa:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:34 2023 by rpki-client on console-fra.rpki-client.org