Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/L-rUcdaJRbZmSp2Rw3awfFq10AI.roa
File: L-rUcdaJRbZmSp2Rw3awfFq10AI.roa (raw, json)
Hash identifier: 8VB/X9XDcl6ykJR4dupNH8JGktUO3uxaQXVitSh7+k4=
Subject key identifier: 2F:EA:D4:71:D6:89:45:B6:66:4A:9D:91:C3:76:B0:7C:5A:B5:D0:02
Certificate issuer: /CN=25ae551af0bb5d7977ea73f6896f25f1eca28f9d
Certificate serial: 0184C2E9EA37484FA3334F0F0342CDDBCA07
Authority key identifier: 25:AE:55:1A:F0:BB:5D:79:77:EA:73:F6:89:6F:25:F1:EC:A2:8F:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/L-rUcdaJRbZmSp2Rw3awfFq10AI.roa
Signing time: Tue 29 Nov 2022 10:23:40 +0000
ROA not before: Tue 29 Nov 2022 10:23:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201121
IP address blocks: 5.158.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c2:e9:ea:37:48:4f:a3:33:4f:0f:03:42:cd:db:ca:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25ae551af0bb5d7977ea73f6896f25f1eca28f9d
Validity
Not Before: Nov 29 10:23:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2fead471d68945b6664a9d91c376b07c5ab5d002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:2a:bb:dd:07:61:11:51:67:c4:f3:d5:9d:ae:
5d:4d:32:0c:fa:c3:b0:60:e7:70:9b:f2:1a:b9:f2:
e7:a3:a0:46:20:86:cc:3e:84:a4:d2:cd:71:89:c4:
8b:d6:3e:a5:c2:db:63:68:2e:a4:bf:33:88:3a:d3:
17:a3:59:62:90:79:20:1d:5b:47:9a:13:58:fb:2d:
fa:e5:87:6c:33:f7:fe:20:ec:89:47:b4:ab:c8:32:
78:36:d5:a7:72:4b:28:3b:9a:55:2a:ff:61:8d:a7:
0d:21:8f:18:ee:94:3f:d7:7e:17:83:c5:bb:b2:40:
49:1d:04:55:24:5f:4b:a8:e7:40:01:24:3d:06:2e:
0e:c1:32:e5:7a:6e:07:75:35:bd:b0:94:29:08:f0:
14:e0:8f:2f:53:cc:9f:72:2a:d5:61:58:c2:53:8e:
8d:e5:91:b5:31:8a:3f:ec:6d:db:df:6a:de:b8:a6:
66:8e:8f:7a:2a:05:da:25:c9:81:4c:24:f3:e3:45:
94:8a:7e:f2:81:47:bb:ee:e4:97:7e:38:c2:47:4d:
58:98:7b:55:48:be:1c:bd:b9:ae:4b:a0:55:8e:bc:
57:88:79:65:3b:7e:b3:de:6b:2d:5d:19:a5:16:8b:
70:88:71:03:1f:8e:e6:6c:88:07:08:a9:55:e0:a0:
14:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:EA:D4:71:D6:89:45:B6:66:4A:9D:91:C3:76:B0:7C:5A:B5:D0:02
X509v3 Authority Key Identifier:
keyid:25:AE:55:1A:F0:BB:5D:79:77:EA:73:F6:89:6F:25:F1:EC:A2:8F:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/L-rUcdaJRbZmSp2Rw3awfFq10AI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.158.87.0/24
Signature Algorithm: sha256WithRSAEncryption
63:ec:71:2e:56:90:6a:e5:03:21:ce:6e:c0:7a:13:52:5f:1a:
f2:b0:d5:3e:30:b1:53:4c:6c:82:8d:a7:4f:80:3d:f5:23:6b:
8e:cb:ec:fb:7c:8d:ff:19:3b:23:3a:8c:0a:0a:01:8a:a5:3f:
2b:c7:d0:ec:30:17:3f:18:d3:dd:56:98:55:d6:a8:15:37:8d:
f4:42:80:e7:c8:a0:a6:ca:6a:12:c7:37:67:07:1b:4b:dc:41:
17:ca:04:e8:bf:85:df:23:bf:f3:c3:6b:d6:7c:ef:54:e0:ca:
3f:32:0e:15:59:4d:a2:50:c3:b9:9d:5b:2f:bb:d9:2f:25:b0:
42:f3:45:75:40:90:40:df:10:7e:c1:3b:dd:9b:15:45:78:da:
73:2b:84:d4:b6:62:11:6d:84:05:80:23:53:76:26:d7:c0:dd:
23:f7:fc:11:f5:03:97:60:8d:8b:8c:4e:c4:56:b1:97:42:e9:
c2:20:e5:48:c6:90:1c:c9:fa:97:2c:28:62:a2:c0:04:d7:59:
99:d6:99:5f:34:86:5d:31:98:8e:61:af:89:f1:9a:90:67:87:
3b:e1:21:d9:9f:ac:db:5c:f3:ef:f3:9c:af:d0:74:92:5a:0d:
ae:e4:6c:22:61:bb:de:4a:56:e3:c2:47:88:8c:d8:e9:1c:10:
ee:31:0c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:39 2024 by rpki-client on console-ams.rpki-client.org