Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/gMcYKGM_Guv1WoaZqeTmtUmDOT0.roa
File: gMcYKGM_Guv1WoaZqeTmtUmDOT0.roa (raw, json)
Hash identifier: h6ryNhG0rkpHKomvN5BiR4zK06dHGftzb0XNZ49UeP4=
Subject key identifier: 80:C7:18:28:63:3F:1A:EB:F5:5A:86:99:A9:E4:E6:B5:49:83:39:3D
Certificate issuer: /CN=69c67969c3c9d8fadbc9a73e3ff56361d0203b71
Certificate serial: 1A3FD8E4
Authority key identifier: 69:C6:79:69:C3:C9:D8:FA:DB:C9:A7:3E:3F:F5:63:61:D0:20:3B:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/gMcYKGM_Guv1WoaZqeTmtUmDOT0.roa
Signing time: Sat 01 Jan 2022 05:00:23 +0000
ROA not before: Sat 01 Jan 2022 05:00:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207191
IP address blocks: 5.102.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 440391908 (0x1a3fd8e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69c67969c3c9d8fadbc9a73e3ff56361d0203b71
Validity
Not Before: Jan 1 05:00:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=80c71828633f1aebf55a8699a9e4e6b54983393d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4a:6f:73:da:61:db:58:9e:dc:47:cf:39:a4:
cf:d0:1f:2b:a0:9e:0d:7c:b4:03:85:12:50:5a:02:
70:50:8b:75:a4:0f:84:28:58:fd:17:b3:2a:79:1f:
e4:95:80:42:f3:33:a6:df:fa:34:fa:34:36:aa:e9:
ba:9f:e1:ee:6b:d2:b1:c9:af:c5:5c:be:c0:2a:ea:
67:75:ed:b5:ad:1d:e4:2a:ca:a0:56:84:bb:5b:91:
3e:4d:04:4c:df:58:a7:47:df:4e:88:7a:d6:3d:38:
b5:2a:2e:15:0d:bb:da:67:1e:8f:ae:0a:8e:8c:21:
d1:54:d8:e8:45:90:2f:60:72:15:47:e6:ce:cc:a9:
ab:f6:1c:69:c3:82:f6:43:ff:84:84:66:b0:e7:a0:
89:ac:01:91:21:d3:35:94:e4:82:64:53:7a:a9:6a:
f6:16:30:c4:5b:e1:4d:8f:de:af:a3:ea:10:88:df:
74:e4:4d:e4:d1:fb:82:68:6b:d7:d1:1c:c2:90:96:
95:dc:5f:67:26:43:35:e2:2c:7f:7f:bf:c2:85:c5:
5c:89:8f:6e:65:f5:0e:34:ab:76:7f:88:3f:44:d1:
39:b2:75:7d:b5:d0:a7:35:d4:35:5a:8e:13:d3:17:
ed:bc:75:40:bc:89:2b:e9:4a:19:67:da:cf:50:29:
8f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C7:18:28:63:3F:1A:EB:F5:5A:86:99:A9:E4:E6:B5:49:83:39:3D
X509v3 Authority Key Identifier:
keyid:69:C6:79:69:C3:C9:D8:FA:DB:C9:A7:3E:3F:F5:63:61:D0:20:3B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/gMcYKGM_Guv1WoaZqeTmtUmDOT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.134.0/24
Signature Algorithm: sha256WithRSAEncryption
93:7a:6b:14:38:29:d4:60:00:64:3d:fb:36:b3:5a:3e:a8:f0:
b9:1d:b4:48:40:f8:72:b7:fa:9f:3b:47:43:35:55:63:a8:94:
f6:23:e6:1d:e2:f8:14:bd:1b:4e:e1:7a:62:fb:8e:7d:dc:cc:
e7:a7:ed:06:3d:de:61:60:c4:fb:d2:21:37:76:b7:d9:16:09:
8a:60:55:c7:d7:19:72:bb:63:19:6c:29:ff:21:93:b7:57:76:
e1:dc:28:a6:cf:a3:d3:ed:1d:2d:8e:e3:76:9f:c8:8d:03:ca:
c2:84:2e:6f:05:13:d7:67:12:37:0a:8c:6e:75:a9:61:4b:54:
2f:31:cd:37:12:16:f7:a9:eb:28:f0:98:2f:ac:63:d5:ce:86:
68:76:d7:8a:eb:ac:1c:6e:5a:56:af:e9:c9:d4:f7:f2:c9:20:
df:6d:72:b3:27:69:f4:3c:21:39:78:8e:8b:e7:31:33:65:f0:
15:ee:fd:64:e5:13:36:bd:99:f7:ac:dd:d1:12:5b:75:8f:f4:
d5:bc:2a:4f:cb:35:7b:0f:b3:09:f4:e1:c2:8f:dd:5d:54:53:
9d:fb:d2:4b:84:15:ce:95:e3:e2:59:a6:9b:b6:e0:bf:db:73:
99:94:9c:76:2c:ad:f9:63:93:3a:b2:ab:5e:81:31:a3:cd:84:
a9:d0:7e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:44 2023 by rpki-client on console-ams.rpki-client.org