Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/RGqhJ2Gm0i_3Q9vXOkicv3S5Oug.roa
File: RGqhJ2Gm0i_3Q9vXOkicv3S5Oug.roa (raw, json)
Hash identifier: VtSFDkMs3Hb99L1PEokRTs5/L3x2DdaiNsnSae6oAMg=
Subject key identifier: 44:6A:A1:27:61:A6:D2:2F:F7:43:DB:D7:3A:48:9C:BF:74:B9:3A:E8
Certificate issuer: /CN=72f47539f19f0f5a13b0b69bc796278f0bf4aea4
Certificate serial: 11350FBD
Authority key identifier: 72:F4:75:39:F1:9F:0F:5A:13:B0:B6:9B:C7:96:27:8F:0B:F4:AE:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/RGqhJ2Gm0i_3Q9vXOkicv3S5Oug.roa
Signing time: Sat 01 Jan 2022 05:01:07 +0000
ROA not before: Sat 01 Jan 2022 05:01:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44381
IP address blocks: 5.145.152.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 288690109 (0x11350fbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f47539f19f0f5a13b0b69bc796278f0bf4aea4
Validity
Not Before: Jan 1 05:01:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=446aa12761a6d22ff743dbd73a489cbf74b93ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0d:fa:d3:45:1b:5b:56:47:2f:53:18:3f:72:
f0:6f:64:ce:a8:f4:de:bf:ec:79:49:20:a2:1a:66:
ec:f2:b0:e0:e1:58:fa:86:64:5e:28:16:77:ba:68:
6f:af:78:be:41:f7:da:42:30:af:2f:40:9e:01:7d:
80:a3:15:34:bb:35:3b:fd:85:b6:b8:35:f6:be:17:
6e:51:23:bd:9a:a1:ce:6a:84:b9:d0:cb:77:64:53:
bd:c8:bb:44:2e:1a:a2:cd:1c:7e:ac:b2:74:a9:68:
ea:ef:07:fb:7a:90:a8:5e:4b:30:48:7f:3d:e0:65:
50:c5:b3:13:35:c6:55:e9:88:3c:a9:50:4d:44:cb:
57:02:35:04:1f:4b:19:0f:c9:a7:89:1f:01:80:20:
ca:93:ac:9c:8f:02:f1:89:4c:8c:e9:4b:60:41:7b:
25:54:14:b9:0c:95:7b:c2:9b:2b:04:67:fd:93:75:
92:3f:33:f3:dd:5d:46:af:73:8f:44:57:11:c2:71:
d8:f0:58:4e:c5:7d:15:a6:81:ca:03:78:d5:69:dd:
f6:62:27:67:a2:a6:25:72:2f:8d:50:61:eb:9b:b2:
0c:0b:34:a1:4b:fc:55:54:32:f1:a1:ff:01:87:19:
df:5f:6e:75:3a:62:83:cd:42:05:82:e2:b5:d3:f4:
a8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:6A:A1:27:61:A6:D2:2F:F7:43:DB:D7:3A:48:9C:BF:74:B9:3A:E8
X509v3 Authority Key Identifier:
keyid:72:F4:75:39:F1:9F:0F:5A:13:B0:B6:9B:C7:96:27:8F:0B:F4:AE:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/RGqhJ2Gm0i_3Q9vXOkicv3S5Oug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.145.152.0/21
Signature Algorithm: sha256WithRSAEncryption
64:63:7e:28:a1:1c:ae:23:f5:ef:a0:79:1d:a6:9f:96:26:e5:
e3:09:9c:e7:f7:3f:68:a7:67:22:05:92:59:ae:25:3c:2c:2c:
f9:d4:3f:54:1b:fd:21:d3:b3:fd:93:8b:b3:d6:38:bd:43:dc:
e8:a7:34:71:e3:54:de:ef:c7:c1:28:20:f6:89:87:a1:6c:00:
b8:d9:df:65:cb:a2:6e:3a:0d:32:48:c8:78:c0:02:37:89:5a:
33:2c:e2:9d:24:65:9c:1c:ba:b8:f9:b9:5d:e0:77:ec:59:fb:
5a:c2:b8:98:fd:9f:13:1a:03:f0:16:db:d6:96:22:9e:dc:50:
51:c8:10:c2:f5:28:84:5f:41:95:d3:0c:5d:c9:ea:01:95:c5:
5a:b3:5d:0b:42:73:a6:67:4a:c6:f7:cc:ff:61:64:b1:1d:fe:
2d:b3:9b:2c:37:20:be:24:65:d5:3e:0f:cb:a7:39:30:cd:a6:
3c:a0:fc:f4:56:ac:4c:9d:8d:5b:3b:2a:a5:ff:e0:c1:7f:35:
5d:f1:9e:47:8e:1a:83:97:d4:e8:15:c7:f5:bb:1c:36:56:bd:
71:65:28:35:69:99:98:09:fa:98:15:4e:1b:99:f7:cd:fd:a6:
1e:51:73:d3:d2:7c:47:24:c6:13:2d:ab:29:ca:2e:d0:52:1a:
19:dc:9b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:28 2024 by rpki-client on console-fra.rpki-client.org