Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/f-Cutt-OBEsqjn07GevI5viGUSU.roa
File: f-Cutt-OBEsqjn07GevI5viGUSU.roa (raw, json)
Hash identifier: zadU9kCF4ISNprZfJpEe/zCrMUtLYJiyUECa1nxa8Jc=
Subject key identifier: 7F:E0:AE:B6:DF:8E:04:4B:2A:8E:7D:3B:19:EB:C8:E6:F8:86:51:25
Certificate issuer: /CN=69c67969c3c9d8fadbc9a73e3ff56361d0203b71
Certificate serial: 1A3E4414
Authority key identifier: 69:C6:79:69:C3:C9:D8:FA:DB:C9:A7:3E:3F:F5:63:61:D0:20:3B:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/f-Cutt-OBEsqjn07GevI5viGUSU.roa
Signing time: Sat 01 Jan 2022 05:00:22 +0000
ROA not before: Sat 01 Jan 2022 05:00:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200380
IP address blocks: 5.102.135.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 440288276 (0x1a3e4414)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69c67969c3c9d8fadbc9a73e3ff56361d0203b71
Validity
Not Before: Jan 1 05:00:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7fe0aeb6df8e044b2a8e7d3b19ebc8e6f8865125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:49:cb:16:2e:b1:a1:ac:18:a2:36:6d:41:55:
7f:90:ac:10:14:d1:29:6f:a2:71:c6:75:25:cd:d4:
c0:e6:5d:a1:35:27:0d:ed:e5:9e:18:e3:d2:85:a2:
6a:f4:71:b9:96:cf:25:3b:a3:ce:bb:9a:92:6f:56:
94:80:f7:1c:95:98:2b:75:db:c8:4a:f1:39:1e:9c:
dc:c9:f6:30:eb:be:f7:2d:d1:25:54:f7:ea:9f:d5:
ba:0d:07:dd:b7:ac:d5:3f:ec:1c:8e:7b:e8:6a:77:
4d:4a:31:34:fc:16:46:79:87:b5:ae:71:e3:33:b5:
5f:33:2e:75:a4:54:38:8f:b6:fa:48:66:83:dc:d2:
b6:0c:cf:e3:2c:60:e5:77:69:62:ab:f0:d0:61:b9:
16:d9:7d:f7:f2:b0:53:10:94:3a:f8:57:2c:ce:c8:
75:3a:f8:e3:3a:9d:8a:6b:65:b6:f7:03:cb:45:bb:
4f:8a:6c:8d:3b:a9:2f:95:c3:57:6d:52:48:87:9d:
58:53:45:d7:c6:b2:2c:97:7f:d1:1f:f4:f7:ff:51:
d4:09:c9:b7:70:82:d8:83:39:b5:9e:23:8b:8a:15:
ed:fe:d0:09:62:28:9b:ff:c8:21:91:cd:be:48:b3:
b3:c1:cb:b2:9d:55:46:df:2e:30:f0:11:07:90:3b:
29:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E0:AE:B6:DF:8E:04:4B:2A:8E:7D:3B:19:EB:C8:E6:F8:86:51:25
X509v3 Authority Key Identifier:
keyid:69:C6:79:69:C3:C9:D8:FA:DB:C9:A7:3E:3F:F5:63:61:D0:20:3B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/f-Cutt-OBEsqjn07GevI5viGUSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.135.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:3e:ea:6c:fd:01:3d:a9:bb:d6:0c:f9:a4:46:6b:3d:c6:ed:
9a:56:e6:3b:71:bf:91:ce:ff:ee:cc:7f:ec:ad:41:25:d7:d6:
6b:22:f3:48:b5:cd:cd:d6:86:95:f6:e8:1d:5e:cd:4a:0e:57:
3a:72:02:c7:7a:92:dd:ed:11:7c:4d:32:47:20:87:cd:cc:8d:
46:bb:9f:2b:5a:17:a3:30:ae:e0:bf:b9:e9:89:36:35:67:2d:
78:2f:d1:40:e6:a3:77:93:70:08:1d:4e:ff:46:1b:fa:5b:16:
b0:f1:06:e1:08:2f:df:63:e2:0f:e3:d9:34:55:b6:89:2d:9c:
32:ff:fb:9b:74:2d:da:62:89:21:db:f6:04:17:f8:00:19:01:
a1:06:64:60:46:82:5d:54:1c:e9:cd:6d:60:8b:c0:07:1c:d6:
c2:af:52:28:90:1c:a7:e3:e3:ac:42:e3:98:ee:11:da:ca:50:
d5:8e:1a:05:d4:ab:e8:bf:c0:37:46:c2:7b:50:db:1a:5e:db:
27:f4:19:90:47:96:1d:46:ee:c0:e7:24:3a:9b:df:06:04:35:
1c:c0:82:b7:c0:7a:84:4e:0b:9c:c9:55:0c:de:bc:5b:75:d3:
de:41:cd:b7:6a:32:f0:61:ed:18:22:4c:66:82:47:f9:23:cb:
df:c6:70:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:02 2023 by rpki-client on console-fra.rpki-client.org