Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/f7f8e9-a9ef-406d-a593-9cc4805e6777/1/S3j3ALbt_MoKZxtuH2Txanr8M0k.roa
File: S3j3ALbt_MoKZxtuH2Txanr8M0k.roa (raw, json)
Hash identifier: zpyjQYw695JUA54xl2DhZHTKt21C0i8cJ9VlLGgGCFk=
Subject key identifier: 4B:78:F7:00:B6:ED:FC:CA:0A:67:1B:6E:1F:64:F1:6A:7A:FC:33:49
Certificate issuer: /CN=cd5aca299d355aadfe1ef939546280e588d249a3
Certificate serial: 01394533
Authority key identifier: CD:5A:CA:29:9D:35:5A:AD:FE:1E:F9:39:54:62:80:E5:88:D2:49:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVrKKZ01Wq3-Hvk5VGKA5YjSSaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/f7f8e9-a9ef-406d-a593-9cc4805e6777/1/S3j3ALbt_MoKZxtuH2Txanr8M0k.roa
Signing time: Sat 01 Jan 2022 13:55:16 +0000
ROA not before: Sat 01 Jan 2022 13:55:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 5.172.176.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20530483 (0x1394533)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5aca299d355aadfe1ef939546280e588d249a3
Validity
Not Before: Jan 1 13:55:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b78f700b6edfcca0a671b6e1f64f16a7afc3349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:63:b7:10:6f:7a:1a:6d:e4:6b:ed:18:91:cd:
90:e6:36:62:c8:4b:d2:65:f1:0f:c6:14:42:1b:b8:
b8:8c:93:5e:6c:2e:22:ff:21:d4:25:9a:70:9b:8f:
a0:42:d1:e3:f9:97:35:08:f5:29:10:1f:2e:d5:68:
03:37:51:e5:40:0a:31:87:36:b6:6a:fb:4e:eb:7b:
05:e0:0a:15:f7:ee:7f:b5:f3:1c:77:cf:46:78:6f:
aa:13:b8:e5:d8:98:56:b0:54:c3:19:ed:af:d3:cd:
0e:ae:69:da:3f:24:27:32:7f:da:00:99:46:56:4c:
ad:54:f2:f8:40:be:05:70:9f:4d:c4:4c:17:5e:78:
0f:c2:c1:18:8f:2a:39:41:78:d9:a8:cd:19:21:b7:
8c:83:80:ca:4a:6a:09:9b:90:5c:5f:fe:ca:24:db:
31:63:06:3a:8d:a9:d5:22:26:ae:69:5c:c7:dd:1e:
6e:b7:ca:30:a0:bd:5f:23:e2:b0:c8:4b:4d:f6:9d:
5c:3b:51:67:39:34:c1:7d:68:57:f6:b1:73:9b:c2:
0f:1c:04:9e:e1:d0:19:5f:09:87:ff:8a:5e:6d:e2:
5e:c3:17:1e:31:05:ad:ca:fb:76:4a:9d:6b:03:93:
04:f0:0f:ef:a0:9b:06:18:7a:4b:71:14:22:45:00:
4a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:78:F7:00:B6:ED:FC:CA:0A:67:1B:6E:1F:64:F1:6A:7A:FC:33:49
X509v3 Authority Key Identifier:
keyid:CD:5A:CA:29:9D:35:5A:AD:FE:1E:F9:39:54:62:80:E5:88:D2:49:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVrKKZ01Wq3-Hvk5VGKA5YjSSaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f7f8e9-a9ef-406d-a593-9cc4805e6777/1/S3j3ALbt_MoKZxtuH2Txanr8M0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f7f8e9-a9ef-406d-a593-9cc4805e6777/1/zVrKKZ01Wq3-Hvk5VGKA5YjSSaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.176.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:dd:4a:1c:36:9a:47:e1:6a:67:83:b3:14:35:c8:f6:f4:7b:
f7:9f:94:ef:f1:a9:ee:e6:1e:d2:9e:73:68:97:87:72:f7:38:
98:31:49:54:34:80:55:cb:06:20:56:7d:5a:ac:95:cd:18:29:
40:e4:9b:15:ee:16:8b:c0:7e:11:0b:3a:dc:36:47:99:3f:47:
26:31:89:fa:5f:54:62:94:2b:c9:44:20:42:07:b0:29:ef:6a:
e1:45:23:a1:37:df:a4:3e:b1:0f:2d:81:45:e4:d0:b1:80:f2:
d7:21:c8:16:e3:d3:e1:b7:6f:2d:ff:ae:91:6e:d2:32:47:b8:
0d:c3:bb:9e:64:8a:d8:2d:c8:40:5d:e3:28:45:ad:d5:da:74:
56:11:56:17:19:b6:32:7d:e3:4f:9a:65:14:b1:d6:19:87:97:
35:fa:07:0d:05:b5:d4:fa:04:ff:9a:c3:d6:23:6c:cd:57:0b:
7f:82:5a:11:7a:1b:79:b3:cb:4b:df:30:b6:2e:35:e8:d8:3a:
57:45:61:d7:10:60:ac:81:77:e0:23:d4:dd:8d:b6:39:1a:32:
9e:e7:d2:ef:99:91:9d:60:3f:fd:42:6c:b4:1f:57:06:2f:d1:
cc:8b:eb:07:ee:53:f3:2b:9c:37:db:10:28:f6:8e:6d:cf:c2:
b2:59:01:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:27 2023 by rpki-client on console-fra.rpki-client.org