Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/aWniOTjixa4v3jEr0KUNWfZ9FYY.roa
File: aWniOTjixa4v3jEr0KUNWfZ9FYY.roa (raw, json)
Hash identifier: kHYxOGq9b5Wpc8Hdvzs2EH4/LPlEhA9tROMbqyYBFHc=
Subject key identifier: 69:69:E2:39:38:E2:C5:AE:2F:DE:31:2B:D0:A5:0D:59:F6:7D:15:86
Certificate issuer: /CN=2c7c0a771b30d274285080ddc42e36798396f22c
Certificate serial: 0184D1822EAE1BEB97842AE1900F9F11E013
Authority key identifier: 2C:7C:0A:77:1B:30:D2:74:28:50:80:DD:C4:2E:36:79:83:96:F2:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHwKdxsw0nQoUIDdxC42eYOW8iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/aWniOTjixa4v3jEr0KUNWfZ9FYY.roa
Signing time: Fri 02 Dec 2022 06:24:40 +0000
ROA not before: Fri 02 Dec 2022 06:24:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 5.182.232.0/22 maxlen: 22
45.92.212.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d1:82:2e:ae:1b:eb:97:84:2a:e1:90:0f:9f:11:e0:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c7c0a771b30d274285080ddc42e36798396f22c
Validity
Not Before: Dec 2 06:24:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6969e23938e2c5ae2fde312bd0a50d59f67d1586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:7d:86:04:20:42:d5:b3:0f:cc:5c:33:e0:7a:
8a:1c:49:92:75:0e:02:59:6a:ab:98:27:41:12:cc:
c6:68:c5:39:b9:94:77:fa:d1:0b:e5:a7:f4:81:a3:
c5:a0:9d:2e:5e:eb:e9:a4:d7:be:38:79:f4:30:9b:
22:f9:c4:77:a2:96:e9:a9:aa:73:85:7a:28:e2:f2:
d2:e4:34:94:c7:54:37:fc:02:ec:9d:90:27:86:5e:
2e:72:a6:6b:78:53:b8:3c:6a:69:43:98:fa:13:3c:
bc:fb:e8:28:b2:d6:1f:85:ec:6c:e6:68:21:5f:6c:
e5:9b:6d:ef:7e:f7:39:fb:3b:f3:89:fd:43:58:67:
f8:ab:8f:6c:d7:93:ca:17:42:d9:ec:bd:0b:74:7d:
75:08:98:13:3f:a5:75:c8:84:52:c3:99:3b:08:c8:
3a:46:47:e0:46:14:fc:af:51:db:b6:1e:be:eb:90:
c6:26:97:f1:24:10:6d:7b:93:2c:4d:67:5b:cd:48:
37:82:f3:62:76:1e:35:30:fa:c6:7e:64:ba:b3:a9:
61:30:0c:41:7a:59:18:e6:ed:50:c8:68:2d:45:55:
94:b0:dc:b3:5b:bb:cd:66:0e:12:7a:bc:8b:69:be:
87:da:0c:bf:92:80:54:8b:61:59:48:c1:6d:cb:a9:
b3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:69:E2:39:38:E2:C5:AE:2F:DE:31:2B:D0:A5:0D:59:F6:7D:15:86
X509v3 Authority Key Identifier:
keyid:2C:7C:0A:77:1B:30:D2:74:28:50:80:DD:C4:2E:36:79:83:96:F2:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHwKdxsw0nQoUIDdxC42eYOW8iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/aWniOTjixa4v3jEr0KUNWfZ9FYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.232.0/22
45.92.212.0/22
Signature Algorithm: sha256WithRSAEncryption
44:e9:87:e8:ec:56:4b:5c:07:9b:39:37:a6:a3:de:4d:92:1d:
ef:bd:98:e6:79:5b:14:7b:21:e6:a1:0e:fa:36:d9:5b:56:f8:
4a:7b:2e:a5:90:b0:52:19:34:5e:f0:1b:af:a8:a0:80:14:40:
e8:4b:b5:be:a0:d8:0e:bd:34:b9:90:17:a6:0f:b4:4a:34:76:
f7:01:50:dc:e6:cd:d1:45:4c:0e:48:7a:a8:36:d6:8a:f6:85:
5a:35:ac:7b:b2:f7:bc:f2:cc:3d:cb:eb:7e:82:2b:d0:73:3f:
4b:65:0c:2c:4a:cd:e2:d0:cc:7d:70:b5:b2:04:a8:e1:ac:cc:
9c:cd:e8:2f:aa:11:e9:49:cd:96:9a:65:db:e4:3a:c4:55:8e:
c6:0d:55:9e:f7:51:54:70:c6:f7:c9:7b:c0:81:aa:4a:e0:3a:
02:b3:86:40:e3:1a:ce:4a:90:b4:29:a8:d8:8b:c3:b4:ec:b5:
7c:e8:bc:86:a3:83:89:5a:a0:d0:da:04:12:e0:c7:4f:eb:5e:
02:09:9b:a3:14:20:10:fd:84:b5:eb:07:db:e0:35:31:b2:55:
ef:d0:e1:cb:76:bd:58:6c:0f:c0:6b:67:72:93:00:cc:a7:e1:
93:68:8d:7b:25:3e:e2:8d:c4:de:5a:f8:e2:78:f9:77:11:96:
f3:9a:71:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:00 2023 by rpki-client on console-fra.rpki-client.org