Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/9rsr1q9yCkNigh0pVB92o0MHpWU.roa
File: 9rsr1q9yCkNigh0pVB92o0MHpWU.roa (raw, json)
Hash identifier: LhiBI+JrCQNC9IFu2YqgG/iKWkTMRhr6RhGj0f08vLw=
Subject key identifier: F6:BB:2B:D6:AF:72:0A:43:62:82:1D:29:54:1F:76:A3:43:07:A5:65
Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Certificate serial: 018202A739B8EAC305F194365063858BF738
Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/9rsr1q9yCkNigh0pVB92o0MHpWU.roa
Signing time: Fri 15 Jul 2022 16:18:09 +0000
ROA not before: Fri 15 Jul 2022 16:18:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207326
IP address blocks: 5.249.188.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:02:a7:39:b8:ea:c3:05:f1:94:36:50:63:85:8b:f7:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Validity
Not Before: Jul 15 16:18:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f6bb2bd6af720a4362821d29541f76a34307a565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:91:d2:2b:84:fe:18:3f:b7:15:58:c8:bf:06:
5e:69:33:97:b6:10:e8:fb:53:82:f1:b7:02:0f:fb:
73:9e:aa:83:36:0b:77:49:d5:08:13:c4:e6:f7:4d:
77:9d:02:9d:8c:e4:73:96:3f:c9:20:a1:8f:61:f0:
06:ed:57:f1:e9:c1:a6:04:e4:d9:33:4a:43:bb:97:
52:aa:1c:e5:c1:4a:35:53:d4:a4:4b:d1:87:28:83:
12:b6:e7:0b:05:62:0b:ff:c2:b9:30:42:1f:88:2a:
f8:e3:97:0b:5c:94:06:7f:4b:da:ca:6d:50:4c:9d:
d6:a0:e8:fc:31:66:63:fa:0c:17:1e:b2:a5:97:5a:
d2:b0:ff:8e:c5:76:71:41:09:e2:07:2d:e3:0e:8a:
58:2c:56:1a:9f:43:88:ca:f7:fd:9b:e2:85:65:6e:
7c:7f:b6:54:2f:86:eb:9d:b4:7d:8d:c9:ed:b6:a9:
a6:0c:96:f9:16:8b:59:25:7f:1c:cb:ba:1b:5b:08:
34:79:bc:1b:3c:e4:d3:1e:e8:2d:8a:e9:dd:65:9e:
3e:5d:d1:b0:f6:bd:cb:e8:cc:bc:28:0f:0f:9c:f9:
75:f1:5d:fa:4f:53:cd:24:5e:58:53:d8:67:7b:2f:
28:65:8e:1c:b0:e8:a4:d0:cc:f6:81:16:46:f2:72:
5e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:BB:2B:D6:AF:72:0A:43:62:82:1D:29:54:1F:76:A3:43:07:A5:65
X509v3 Authority Key Identifier:
keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/9rsr1q9yCkNigh0pVB92o0MHpWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.249.188.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:fa:df:74:45:ae:69:52:d0:10:00:64:1f:c1:7d:e5:b1:df:
ad:3d:34:8b:d0:58:e9:6c:c4:b6:ad:59:9f:36:4c:4a:78:d3:
af:2e:26:bd:f0:fc:0f:7e:11:3d:b5:7d:89:fc:34:34:c1:01:
c0:06:4b:90:eb:1a:fc:4b:ae:fc:ce:78:90:1e:a3:1a:48:05:
5d:fd:f4:49:ee:77:fe:c9:87:82:26:19:39:eb:2e:74:ca:99:
fd:5a:39:8c:9e:a7:82:eb:9a:72:5f:b0:3b:5b:e2:7b:73:81:
54:fb:37:1e:23:ce:c5:89:59:f2:c4:a6:dc:0a:9d:46:94:d1:
51:db:9d:e2:13:16:9f:ce:bb:da:16:64:fa:bc:46:f5:70:4b:
6a:fe:76:09:50:1b:43:17:d6:86:68:81:42:2f:5a:50:50:80:
c3:1a:4e:6b:69:86:e8:b0:d4:a5:75:e9:d4:91:8b:14:1c:95:
bc:04:c0:3d:8a:4b:87:bd:74:65:f4:e3:59:7c:c0:3d:88:c7:
b8:0c:71:c0:a1:89:da:3a:38:87:4b:66:02:fe:02:f7:29:1c:
a6:d2:44:5f:4d:6d:23:fe:ef:c4:89:55:9f:ac:94:16:c4:f2:
a9:e1:4b:f1:f8:ad:0c:7e:4e:da:27:29:15:f1:46:10:0b:dc:
8b:2a:8b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:38 2023 by rpki-client on console-fra.rpki-client.org