Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/CvcyWBJYR2N51pH4X2I-ctlrM1Q.roa
File: CvcyWBJYR2N51pH4X2I-ctlrM1Q.roa (raw, json)
Hash identifier: aAgQocQDS7RmANOGxCcUVRRIx/V4YxO+BweWP//qz3c=
Subject key identifier: 0A:F7:32:58:12:58:47:63:79:D6:91:F8:5F:62:3E:72:D9:6B:33:54
Certificate issuer: /CN=02bbd4f865a12d79a09a034486ce61ba023882c7
Certificate serial: 08AA9D36
Authority key identifier: 02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/CvcyWBJYR2N51pH4X2I-ctlrM1Q.roa
Signing time: Sat 16 Apr 2022 10:08:18 +0000
ROA not before: Sat 16 Apr 2022 10:08:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 10
IP address blocks: 5.62.151.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145399094 (0x8aa9d36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02bbd4f865a12d79a09a034486ce61ba023882c7
Validity
Not Before: Apr 16 10:08:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0af732581258476379d691f85f623e72d96b3354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0a:a9:54:86:d8:26:d2:db:55:13:0f:11:b0:
7f:20:65:14:04:8f:91:cb:29:6f:68:df:bb:48:a7:
6f:11:e2:33:6d:f7:fc:c3:e3:dc:87:00:72:db:6f:
33:ff:97:f5:97:25:d0:cd:8e:3d:5d:97:ab:f7:9e:
62:93:39:f3:37:27:ef:13:da:d7:7c:37:b6:48:37:
a8:d1:d6:42:f0:3f:b9:2f:ab:45:95:aa:02:86:8d:
13:bb:70:ae:22:61:64:01:0c:63:fe:fa:86:73:1a:
13:ed:08:d1:bf:01:df:67:30:63:b5:57:42:29:a6:
f8:00:85:4d:14:92:73:b8:57:32:c7:2a:a8:46:87:
7a:f9:9c:15:18:ae:43:de:83:d3:65:6c:fa:fc:d6:
58:33:5b:24:7c:40:ce:f7:01:0c:47:45:a3:ff:d4:
e7:db:e3:2f:0a:d8:58:7c:b2:44:29:97:6b:72:86:
c4:40:72:9f:04:05:ef:68:06:b6:87:38:d7:27:fa:
fd:68:fc:25:7a:5b:c4:81:eb:2c:c5:e7:e2:a6:20:
99:4c:59:3f:b5:80:0f:83:b0:a1:d5:24:6c:95:2b:
3b:0c:7d:87:56:f4:12:08:eb:cc:eb:39:d2:f0:98:
c2:ef:6f:97:d4:3f:7e:d2:c6:15:ff:b3:3a:6f:78:
f0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F7:32:58:12:58:47:63:79:D6:91:F8:5F:62:3E:72:D9:6B:33:54
X509v3 Authority Key Identifier:
keyid:02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/CvcyWBJYR2N51pH4X2I-ctlrM1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.62.151.0/24
Signature Algorithm: sha256WithRSAEncryption
30:be:2b:98:eb:08:37:47:cb:19:0e:6a:f2:44:61:f5:ce:f0:
95:3c:5d:8b:e0:de:ad:26:0e:42:93:c3:ee:2b:04:4a:7b:b6:
46:54:18:48:84:7f:05:c4:3c:b0:a6:10:d4:8e:f3:7b:72:20:
3a:21:95:ae:6d:dd:c3:5b:c2:1b:a4:c9:18:7a:3f:b2:8b:8c:
46:b0:9a:b2:19:91:7e:77:6a:df:2a:b0:0c:e5:63:be:c4:d6:
45:6e:e3:c3:81:66:42:e4:d2:e8:ac:45:56:cb:15:3d:7c:be:
cf:9e:1e:ba:22:c3:46:54:55:50:d9:8b:9b:55:cb:07:d0:dd:
42:24:92:05:84:5f:c9:9f:7b:e0:a8:fd:6d:e6:9c:fe:cd:01:
c4:fb:99:5d:96:5b:0b:1b:ec:76:d1:73:ba:74:1b:b0:71:3d:
0e:a5:b8:7a:82:ba:77:96:3c:f5:c4:2e:d3:5d:88:c6:4e:bc:
29:0b:5e:2c:29:c0:d1:97:05:bd:da:04:3c:af:4e:99:83:68:
a9:9f:58:98:1b:dd:59:42:fd:03:85:d8:b3:77:bb:fb:ae:6f:
1e:ec:8e:64:c2:46:4c:60:21:1a:71:79:4d:fe:38:3e:c9:5c:
d6:ba:7b:49:49:99:91:66:a9:4c:dc:58:90:b0:f8:f0:04:8e:
d4:2a:ae:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:19 2023 by rpki-client on console-fra.rpki-client.org