Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/wtGud4Aj0EG3baYrrWqkhhO08HI.roa
File: wtGud4Aj0EG3baYrrWqkhhO08HI.roa (raw, json)
Hash identifier: G/c8ByQYjljRMkL67HIKKxTs/jcwVf3tpgFfHlUjXAU=
Subject key identifier: C2:D1:AE:77:80:23:D0:41:B7:6D:A6:2B:AD:6A:A4:86:13:B4:F0:72
Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial: 03C44FC3
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/wtGud4Aj0EG3baYrrWqkhhO08HI.roa
Signing time: Sat 01 Jan 2022 09:02:40 +0000
ROA not before: Sat 01 Jan 2022 09:02:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42831
IP address blocks: 5.157.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63197123 (0x3c44fc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Validity
Not Before: Jan 1 09:02:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2d1ae778023d041b76da62bad6aa48613b4f072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e3:67:ef:55:03:ee:0c:3a:30:1e:73:6e:e3:
86:8c:37:0d:60:0a:ac:44:dc:4f:f6:b7:1e:83:16:
7f:1b:df:16:df:a0:17:e9:e4:8e:31:5d:53:67:92:
5a:66:76:bf:ba:fb:ad:fe:a4:0a:56:57:97:c3:bd:
6a:b1:c0:1a:02:54:de:ed:f5:76:68:74:b1:8a:3d:
23:2d:d5:d0:bb:3c:f4:10:ef:7d:2b:b3:45:ef:b4:
ef:c8:1f:22:3d:b8:c2:a6:f0:e5:ee:59:82:99:55:
fa:2e:21:f9:8d:99:1a:3b:02:97:6a:b6:7a:ca:d4:
6d:f1:33:d9:94:88:1f:5d:cd:3f:c7:23:aa:31:be:
ff:e4:52:8a:d3:94:85:b9:4b:e1:2c:fe:52:cb:9f:
1c:3f:48:6f:6b:93:08:ae:91:0b:a0:d3:3f:32:c9:
e7:a2:21:e7:e9:34:3d:23:f2:7f:87:a5:cf:d8:06:
bd:86:de:d3:27:25:c0:be:5a:1d:bf:4d:24:ca:1d:
b9:11:b1:69:2b:3e:a2:fb:4e:fd:72:6d:3a:bc:8a:
76:10:e2:ce:b7:45:3b:95:e7:8d:72:7e:ae:3b:68:
5b:8b:b8:29:ef:7e:50:5c:e0:05:a4:20:ab:10:0f:
6e:fa:f9:fd:09:42:82:f1:b1:81:0d:3e:95:eb:bf:
15:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D1:AE:77:80:23:D0:41:B7:6D:A6:2B:AD:6A:A4:86:13:B4:F0:72
X509v3 Authority Key Identifier:
keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/wtGud4Aj0EG3baYrrWqkhhO08HI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.157.128.0/24
Signature Algorithm: sha256WithRSAEncryption
44:cd:46:b9:38:fa:ca:64:49:40:7c:70:60:ff:bb:8b:85:bc:
a1:21:88:e8:8a:7e:ab:05:10:ba:25:7b:22:db:b5:67:d2:0d:
47:5c:c5:40:29:58:d5:b8:66:8b:33:66:10:92:20:15:23:b1:
56:e8:4c:a6:ef:07:d0:49:56:85:d7:4f:e5:d5:a3:68:27:6a:
9c:2d:7c:6d:b1:0e:01:ab:d7:3d:1b:dd:ee:b2:98:d9:1e:f2:
92:73:fd:fb:98:c7:9e:6d:fb:87:9e:c2:fd:16:f2:0d:8c:f0:
79:02:21:e8:a3:78:a6:30:e6:bb:84:e4:64:ee:a9:94:fd:96:
96:ed:9f:3d:5d:a8:5f:33:3f:70:cd:b1:10:b9:ec:90:a3:48:
c0:28:f0:e0:7c:a3:03:09:bd:f4:cc:c4:f9:ec:5a:f9:2a:99:
58:0e:ff:07:30:bb:e9:cb:9e:a3:d5:a0:91:09:ca:44:9f:46:
77:10:bd:40:d9:60:c2:a1:8e:b9:d2:41:4b:c6:58:30:07:70:
b1:a7:1f:07:e6:6c:07:bc:43:be:07:fd:f5:48:5d:c6:5c:86:
61:71:2e:56:bd:91:15:8a:9d:f1:22:b2:9c:94:a6:47:7b:15:
5a:14:4b:6d:01:d7:f2:7f:f5:d5:5c:67:74:ae:45:cd:f9:c4:
c2:51:6b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:50 2024 by rpki-client on console-ams.rpki-client.org