Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/e5y-sKLpoIbJPU9awPmyjLQT6GI.roa
File: e5y-sKLpoIbJPU9awPmyjLQT6GI.roa (raw, json)
Hash identifier: XES4c0wJuWn1ErvAS35b4nilf1DfHM29j0LuRYsnHFI=
Subject key identifier: 7B:9C:BE:B0:A2:E9:A0:86:C9:3D:4F:5A:C0:F9:B2:8C:B4:13:E8:62
Certificate issuer: /CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593
Certificate serial: 183F274D
Authority key identifier: 4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/e5y-sKLpoIbJPU9awPmyjLQT6GI.roa
Signing time: Sat 01 Jan 2022 06:02:20 +0000
ROA not before: Sat 01 Jan 2022 06:02:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206817
IP address blocks: 5.129.180.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 406792013 (0x183f274d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593
Validity
Not Before: Jan 1 06:02:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7b9cbeb0a2e9a086c93d4f5ac0f9b28cb413e862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:aa:c7:5f:38:e2:e1:67:87:23:ea:15:47:b8:
35:0e:85:44:e1:a7:b1:a9:2a:cb:c5:d0:bc:84:39:
d5:e0:2b:92:b1:d5:85:ab:2c:8c:95:83:03:51:11:
8f:af:bc:87:0f:fb:e1:f5:58:b9:19:68:c8:d7:44:
8a:bc:ae:a2:60:39:7c:8f:47:dc:cb:5a:69:5c:d7:
5e:99:50:e7:78:be:86:11:50:eb:38:1c:1e:86:84:
e0:dc:0f:c0:99:85:d2:c3:b9:50:d8:3d:8e:bc:0b:
b2:e0:3d:1c:bf:52:30:cf:ed:8b:49:25:32:c7:3a:
34:45:ed:ee:d5:94:cb:ac:c0:a7:c4:8d:b4:6c:14:
7d:6a:bc:18:28:2c:da:79:90:72:d2:11:00:26:28:
11:92:45:6b:40:75:f9:65:c4:43:20:0b:ec:0e:fd:
ff:6a:41:09:97:18:79:fa:18:86:fe:aa:52:27:68:
a1:b6:7a:5f:67:3f:85:69:90:94:0c:af:68:00:3b:
b1:39:0a:3b:a5:ad:46:af:c9:72:80:9e:33:56:1f:
fd:5b:62:a0:d1:f9:a2:4c:95:61:69:82:c2:54:15:
cc:60:56:7b:96:2d:96:5a:11:68:2d:63:f4:bb:a1:
99:19:57:ac:60:8e:f9:0a:55:f9:f5:5a:34:4f:b6:
8c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:9C:BE:B0:A2:E9:A0:86:C9:3D:4F:5A:C0:F9:B2:8C:B4:13:E8:62
X509v3 Authority Key Identifier:
keyid:4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/e5y-sKLpoIbJPU9awPmyjLQT6GI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.129.180.0/24
Signature Algorithm: sha256WithRSAEncryption
47:95:39:9c:d7:30:17:c2:b2:d7:a6:f5:18:fe:e2:be:18:49:
ef:a3:68:6d:8e:22:ad:52:03:87:81:8b:95:6e:98:31:bb:03:
ce:09:d0:ce:47:d5:50:b8:b3:34:46:1c:33:fa:18:60:0f:a4:
6e:9d:8f:d8:2b:bb:c6:5e:0b:4a:f5:90:31:71:87:66:f8:de:
25:af:18:54:a2:59:0f:cc:a8:24:81:a9:14:06:e4:72:7b:83:
2c:d8:d7:c6:a7:91:32:1a:82:21:55:c4:88:bd:46:50:ec:37:
f3:86:81:6d:a4:ef:45:c6:f5:7f:d6:8a:6e:c4:d5:e6:c8:b0:
fa:30:6f:a0:fb:a8:8f:ac:89:92:66:9c:df:c0:aa:d6:ea:76:
1d:b5:a1:5f:d2:bf:4f:de:5a:e6:f8:47:30:65:82:44:b1:60:
5f:45:ee:8f:ef:bd:31:13:82:ba:6e:ad:4d:a8:a0:f3:a0:13:
b5:10:30:52:b6:b9:46:99:44:ce:db:d8:62:63:81:46:16:51:
dd:1f:a1:0e:e5:04:ae:39:04:97:a8:7c:97:51:d3:35:27:44:
39:4e:d0:1b:19:0d:25:b4:67:1b:ed:34:01:4e:79:1e:ec:49:
57:a9:f5:1e:cf:c5:28:e4:38:76:64:17:25:f7:2e:e7:2f:33:
b1:25:85:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:37 2024 by rpki-client on console-fra.rpki-client.org