Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/jXcFxnSUcVRl7LPi0HGGPX9zJ4E.roa
File: jXcFxnSUcVRl7LPi0HGGPX9zJ4E.roa (raw, json)
Hash identifier: kVM/3ET9LtSYVLMZAotakTpbpikn0YmZ/cwPn5UL5Rg=
Subject key identifier: 8D:77:05:C6:74:94:71:54:65:EC:B3:E2:D0:71:86:3D:7F:73:27:81
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 11229166
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/jXcFxnSUcVRl7LPi0HGGPX9zJ4E.roa
Signing time: Sat 01 Jan 2022 14:04:48 +0000
ROA not before: Sat 01 Jan 2022 14:04:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206862
IP address blocks: 5.200.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 287478118 (0x11229166)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Jan 1 14:04:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8d7705c67494715465ecb3e2d071863d7f732781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e4:ed:1e:91:54:b2:9b:88:c1:04:bc:22:a1:
7b:d1:b9:8a:0e:30:e8:96:e4:4a:e6:4c:51:8c:a7:
ce:ee:f8:64:10:4b:19:6d:1f:f0:f6:9e:29:4f:9b:
e8:ce:fd:e5:dd:f1:6d:ed:b4:0b:35:c5:3e:b3:00:
9c:b8:a1:79:ec:e8:52:78:3c:65:37:2f:01:73:1d:
71:e7:9d:83:d9:ba:e5:a4:30:62:14:b8:08:19:34:
96:40:a5:07:4d:61:1e:8c:1b:a4:bc:49:9e:4c:35:
ae:54:78:7d:97:4f:ec:2f:6f:0e:09:30:fd:7f:a6:
45:bd:fc:c8:5b:a6:0a:f0:d6:2f:58:13:92:e7:84:
0b:ec:67:76:0d:43:88:31:12:f7:04:92:3b:b9:d9:
50:4a:a1:92:fd:93:b8:74:d1:88:73:67:81:b1:11:
35:0e:eb:62:ee:ff:92:b2:40:1e:59:16:b6:48:21:
0a:6f:46:b5:94:bd:bd:d9:73:d1:86:44:d2:e3:d4:
47:6a:6c:17:01:88:67:0f:b7:5c:2f:04:28:d3:8f:
14:90:89:e2:7f:33:76:53:b4:c8:6d:63:45:50:00:
59:7a:7d:7b:fa:81:44:b9:6a:ec:49:fb:ca:de:1c:
26:5c:c5:c7:05:ab:5c:fb:2e:a1:04:7c:12:98:77:
47:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:77:05:C6:74:94:71:54:65:EC:B3:E2:D0:71:86:3D:7F:73:27:81
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/jXcFxnSUcVRl7LPi0HGGPX9zJ4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.200.95.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:97:08:e2:00:fa:8f:b6:b9:17:ad:e8:70:64:2a:af:0f:e7:
3c:c5:87:cd:4f:66:a0:85:0f:9c:43:05:19:31:0a:cb:ee:43:
24:a6:de:bc:ca:8c:6f:93:0d:db:d4:f4:53:92:84:b9:6a:21:
47:1b:19:fc:3e:22:0f:f5:8e:24:b4:7c:c5:55:dc:6e:96:75:
c5:a1:2b:e1:26:86:30:97:57:52:dc:8e:b9:ac:f7:f5:16:5a:
37:78:bc:a8:3c:01:5f:c7:0d:97:b9:51:1b:f3:7f:a3:0c:6d:
37:04:1f:02:cd:d6:ad:61:c8:0f:10:34:2b:92:7c:da:bd:d9:
7e:87:3b:64:79:ca:16:c0:43:0c:57:7e:16:60:58:14:9c:6f:
8f:94:8a:07:cc:55:48:cf:e8:9f:b3:66:26:20:b3:34:0b:7b:
78:8e:38:e7:35:ee:ec:86:36:d3:1a:88:03:8c:96:a9:1c:e3:
96:aa:77:40:c5:40:94:67:fc:ec:c0:34:5c:cc:6f:df:fd:92:
9e:19:51:37:4c:66:17:45:a3:10:9d:79:3e:a8:13:6e:d6:37:
0c:4f:24:ed:38:2e:19:76:36:dc:07:b5:6c:fa:25:c3:d2:e9:
62:d8:a1:9a:12:a3:22:fe:6a:84:b6:84:1b:7a:f2:6f:05:d6:
02:c9:40:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:06 2024 by rpki-client on console-ams.rpki-client.org