Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/jKVyVAcVdlg7ad9VsYPzjj-aH28.roa
File: jKVyVAcVdlg7ad9VsYPzjj-aH28.roa (raw, json)
Hash identifier: WLRRFh3wtCtor9qAvvSRH/4vOh+ygiuFOn58MPjoDyM=
Subject key identifier: 8C:A5:72:54:07:15:76:58:3B:69:DF:55:B1:83:F3:8E:3F:9A:1F:6F
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 1568ABA2
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/jKVyVAcVdlg7ad9VsYPzjj-aH28.roa
Signing time: Sat 01 Jan 2022 11:55:41 +0000
ROA not before: Sat 01 Jan 2022 11:55:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213365
IP address blocks: 5.133.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 359181218 (0x1568aba2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: Jan 1 11:55:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8ca57254071576583b69df55b183f38e3f9a1f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8d:f6:6b:fd:3a:97:fa:7d:24:15:d0:88:e7:
a3:a2:2b:85:85:24:9c:da:89:38:48:48:dd:0b:8e:
83:af:c9:2c:e9:3d:aa:7c:43:8a:f9:c5:1c:61:db:
e6:22:54:f4:d3:f2:1a:87:4c:15:ef:d9:c8:5c:2c:
0a:96:6e:85:78:d0:48:a1:53:13:30:48:99:aa:54:
bd:df:d8:56:f0:1a:3e:ce:bf:aa:36:77:7d:3b:74:
8a:48:77:22:05:35:57:4b:51:f7:94:53:07:44:c7:
98:d1:40:f1:1f:15:ee:b6:d5:bf:51:01:5c:b9:ff:
c1:2d:52:36:5a:16:33:42:60:56:0e:d0:9a:3a:40:
18:96:2d:aa:a6:96:c4:00:cd:c7:4a:fa:4f:9d:db:
69:3a:a5:02:5e:a3:ab:96:ee:ab:43:2b:34:e2:44:
71:0d:f3:e4:61:9e:33:f4:6b:a6:ad:78:cd:a8:d7:
eb:af:b7:c4:ce:c5:0d:9d:24:59:d6:a8:c9:b4:c9:
b5:2f:89:76:4f:7a:9c:fa:83:6b:14:88:39:18:b9:
ff:9a:2e:9a:87:7f:62:e2:71:24:56:4a:9c:5a:ee:
18:fa:44:12:91:08:6e:e7:c8:4f:56:af:1f:91:59:
c6:5a:cf:aa:b1:3d:ed:2b:ed:98:77:ae:37:fb:55:
4a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A5:72:54:07:15:76:58:3B:69:DF:55:B1:83:F3:8E:3F:9A:1F:6F
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/jKVyVAcVdlg7ad9VsYPzjj-aH28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.64.0/24
Signature Algorithm: sha256WithRSAEncryption
43:5f:76:10:d2:20:11:8d:5b:0d:45:07:42:e5:d2:e8:d5:27:
35:dd:fb:35:f3:78:04:94:4d:f7:aa:3d:4e:55:7d:40:35:7d:
61:c7:54:bd:f0:49:fa:01:18:ea:a4:2a:71:a4:79:1a:f5:d5:
f8:b8:2a:1f:ec:5c:f4:bc:3b:99:95:64:b6:bc:ed:b9:3f:4b:
ee:c2:67:c9:18:8e:46:f5:df:86:ed:fb:7c:ff:17:af:f7:ae:
57:ec:9e:d9:f7:60:dd:45:d2:b3:13:7a:0b:85:f3:05:18:19:
18:f7:9e:17:13:f0:fe:76:da:f5:e4:d0:3f:8b:7b:b5:05:64:
9f:a3:e2:0c:f7:1b:19:4c:de:05:7e:71:b1:cd:83:fe:ee:a2:
c2:29:b5:49:26:3b:3b:38:c6:6e:77:d0:ca:a6:bf:89:46:a3:
06:69:28:b0:fb:e3:6b:1b:55:91:db:33:53:a7:ef:e5:29:8d:
5a:08:dd:5a:e6:73:39:1d:5f:18:4a:cf:ab:63:9b:b4:15:ad:
1e:c0:65:2e:7f:f2:7a:f2:ec:cc:0c:32:84:3d:69:73:6d:68:
38:96:84:c7:49:78:9e:d6:a9:37:9d:bc:a5:61:ea:75:74:00:
3b:a9:f9:78:cf:30:e2:d0:3b:89:ab:fa:bd:97:50:d9:a4:2d:
79:2b:6e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:24 2023 by rpki-client on console-ams.rpki-client.org