Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/5Inj-NmwbtPLZ5BSABfZnzpUqGI.roa
File: 5Inj-NmwbtPLZ5BSABfZnzpUqGI.roa (raw, json)
Hash identifier: uKP4BzgIDLvCuUs9AuEzG5e1P2TQWqUFtJJHWeNWI3I=
Subject key identifier: E4:89:E3:F8:D9:B0:6E:D3:CB:67:90:52:00:17:D9:9F:3A:54:A8:62
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 393C5EEB
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/5Inj-NmwbtPLZ5BSABfZnzpUqGI.roa
Signing time: Sat 01 Jan 2022 08:05:28 +0000
ROA not before: Sat 01 Jan 2022 08:05:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5542
IP address blocks: 194.225.77.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 960257771 (0x393c5eeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Jan 1 08:05:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e489e3f8d9b06ed3cb6790520017d99f3a54a862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:11:ed:22:f7:e6:80:6a:72:f4:24:59:1b:e8:
6e:cf:5b:60:88:1f:cf:1e:a6:a0:d6:f2:c4:6c:0c:
d0:08:e5:2f:52:9d:69:1d:d3:97:c1:4c:0f:94:da:
2b:27:c2:78:e0:3d:1a:ae:ec:e1:bb:e9:91:cc:78:
2f:5c:3d:b7:59:e2:24:60:ac:4e:2c:64:8e:5e:3e:
4c:08:4f:47:1a:8a:08:60:44:00:9b:d2:c2:c7:1d:
9b:1b:06:94:19:84:d4:24:0d:75:04:75:e8:95:c8:
3a:5e:d7:69:7b:ad:f3:ff:e1:9b:ba:a1:c1:de:a2:
71:86:73:16:63:f6:7c:d1:b6:05:53:be:e2:f9:de:
e7:0d:29:56:81:7b:9f:83:ba:af:7f:66:d1:f9:62:
fd:cb:84:fa:6f:a7:2c:17:2f:74:e4:d7:03:3b:76:
2b:e7:83:45:5d:50:ea:85:a0:80:81:21:5d:8c:13:
30:0e:a1:d6:b5:5f:2c:3d:61:5b:4a:d5:95:cb:f3:
e9:73:b7:00:90:49:19:53:13:f3:b2:1e:3f:a6:8d:
62:50:a3:b8:14:df:a6:55:12:98:21:1e:ae:a9:18:
a7:df:4f:e9:2a:87:00:47:3e:d2:7d:a1:c6:0a:6d:
09:aa:06:28:d5:58:8e:25:12:73:17:4a:e1:54:03:
35:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:89:E3:F8:D9:B0:6E:D3:CB:67:90:52:00:17:D9:9F:3A:54:A8:62
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/5Inj-NmwbtPLZ5BSABfZnzpUqGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.225.77.0/24
Signature Algorithm: sha256WithRSAEncryption
57:f9:a0:29:46:94:db:a0:78:96:6d:a7:4e:4e:cf:b4:be:11:
60:fc:b0:76:c4:f5:1d:8b:8f:16:91:ba:43:44:14:6e:1b:fa:
31:44:2a:f1:a5:c4:8d:56:15:ff:47:87:82:88:a0:35:a9:7a:
46:ec:f1:87:c7:99:09:6a:74:3e:0c:a6:ba:44:37:26:80:86:
6d:1f:ec:ff:bc:f7:29:6c:ce:43:ff:62:8a:60:aa:6a:bf:1d:
9a:93:2d:68:ce:f0:c8:a9:4c:53:1d:32:58:aa:d5:49:f8:68:
d9:b1:17:83:9b:0d:ee:68:39:24:c2:7e:a0:cc:6b:7a:5b:f8:
cd:bc:46:ab:45:99:3c:fa:b8:cc:8b:23:e6:54:d9:de:00:c4:
5f:2b:7f:5d:c7:ea:35:6d:ec:5b:4d:45:f6:86:99:58:92:4b:
04:b9:b5:3a:8d:1e:15:be:49:40:00:d4:27:52:71:5d:e4:f1:
a8:14:9c:bf:64:2b:d1:0f:c5:c6:73:b4:3a:09:7f:e8:26:d1:
a6:e9:14:1c:a3:37:48:3e:46:10:7a:b9:58:84:d8:fe:18:e6:
b3:8a:63:db:53:8e:67:86:97:da:35:59:55:5c:c4:35:a0:7b:
c2:b3:b0:2f:09:9d:b9:50:93:de:da:30:fc:71:cd:67:f2:bf:
72:3a:93:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-ams.rpki-client.org