Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/1KTn0IRSSTJAkoihkbAp4ccCpYY.roa
File: 1KTn0IRSSTJAkoihkbAp4ccCpYY.roa (raw, json)
Hash identifier: ahfO5AyxB/HZzTReTJDFVsKcl7at36sTfyF2PXHtw18=
Subject key identifier: D4:A4:E7:D0:84:52:49:32:40:92:88:A1:91:B0:29:E1:C7:02:A5:86
Certificate issuer: /CN=69c67969c3c9d8fadbc9a73e3ff56361d0203b71
Certificate serial: 1A40108F
Authority key identifier: 69:C6:79:69:C3:C9:D8:FA:DB:C9:A7:3E:3F:F5:63:61:D0:20:3B:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/1KTn0IRSSTJAkoihkbAp4ccCpYY.roa
Signing time: Sat 01 Jan 2022 05:00:23 +0000
ROA not before: Sat 01 Jan 2022 05:00:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209259
IP address blocks: 5.102.133.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 440406159 (0x1a40108f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69c67969c3c9d8fadbc9a73e3ff56361d0203b71
Validity
Not Before: Jan 1 05:00:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d4a4e7d084524932409288a191b029e1c702a586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:84:e6:0d:7a:51:51:36:67:fd:2d:92:67:96:
c7:23:8d:8c:45:39:1a:37:e6:aa:a6:0a:2e:d7:60:
96:5e:57:9e:34:38:96:e7:dc:90:fc:04:a5:9b:1f:
8f:1d:ce:08:9e:46:cd:53:66:76:c6:d8:9d:c0:a6:
37:8e:9b:4d:ad:7c:31:dc:60:e3:09:c9:bb:22:37:
7e:1f:e1:c4:82:98:ca:46:8e:08:67:e4:45:43:2b:
a7:a6:78:c4:da:2c:d8:b3:29:f2:ed:17:69:da:85:
dc:6f:73:40:6e:a8:15:7a:63:d9:49:86:55:46:67:
22:6c:12:62:1a:0d:3a:ba:23:c3:ce:e9:e9:4a:17:
6c:0e:54:e8:79:ac:eb:cc:ad:20:eb:10:97:8b:ac:
7e:f9:f7:89:6d:75:ec:10:de:7d:38:9f:68:fe:b3:
98:49:85:07:87:fe:c8:87:f2:93:90:05:47:6d:fa:
44:7b:84:90:b7:12:29:45:fc:ba:8f:2d:66:57:97:
fd:7a:96:bb:0c:47:81:df:5c:f4:66:80:6e:41:2c:
83:e9:6f:b9:9e:61:6c:6f:e9:1e:ac:a6:2a:ac:9b:
07:1a:da:b9:db:2d:8f:bd:39:3b:6e:d7:76:48:2b:
92:b4:f8:a1:62:fc:e4:08:ea:3e:5c:e6:d1:68:40:
d6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A4:E7:D0:84:52:49:32:40:92:88:A1:91:B0:29:E1:C7:02:A5:86
X509v3 Authority Key Identifier:
keyid:69:C6:79:69:C3:C9:D8:FA:DB:C9:A7:3E:3F:F5:63:61:D0:20:3B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/1KTn0IRSSTJAkoihkbAp4ccCpYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.133.0/24
Signature Algorithm: sha256WithRSAEncryption
41:19:b0:e5:c6:cb:8d:ed:0f:bd:73:11:83:c6:6a:72:7e:eb:
a8:e7:3f:f0:2f:86:90:e6:93:8e:2c:66:4d:9b:c9:23:b7:8e:
48:bd:05:3f:70:7a:76:b7:d6:6a:61:77:09:9e:b9:a5:23:93:
97:3d:d5:b3:29:25:69:49:08:6d:b6:64:bd:c0:8b:77:8e:1f:
ff:4d:de:f3:8c:3e:ec:93:ba:af:68:80:73:f7:33:9e:98:1c:
95:85:34:50:10:9a:ef:9b:46:78:bf:8b:31:d8:c5:22:31:56:
9c:e8:03:7b:bd:31:1d:e6:fe:fb:3b:4d:c0:16:29:54:d5:e1:
90:a4:60:31:eb:1b:94:96:4f:ad:a2:c1:ed:e8:94:ac:6f:9a:
6e:9f:b5:17:cc:f8:4d:7d:be:62:4f:8a:fa:6f:56:aa:70:bf:
c3:af:a1:97:8a:b0:30:2f:22:0a:58:71:0c:5f:52:c7:e2:9c:
25:21:58:99:0c:ad:7b:7b:f9:d4:14:97:79:be:2d:ee:20:62:
f8:df:da:20:c4:0c:24:c5:f8:13:c3:d3:aa:33:0c:05:08:00:
9b:b2:1a:28:d9:b5:9d:34:1f:85:b4:61:4d:73:61:24:43:93:
85:01:f6:88:75:1e:4d:eb:0b:72:c9:18:a8:37:8b:d5:8a:9f:
c6:b6:76:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:06 2024 by rpki-client on console-ams.rpki-client.org