Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/AF5jxLC67DucBj2nTBWXxw3o5Tg.roa
File: AF5jxLC67DucBj2nTBWXxw3o5Tg.roa (raw, json)
Hash identifier: wRCLHtemGDc+DbmqVFQZUVvUgCTTug+o6IEn4Hv+Hiw=
Subject key identifier: 00:5E:63:C4:B0:BA:EC:3B:9C:06:3D:A7:4C:15:97:C7:0D:E8:E5:38
Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Certificate serial: 010DCF2A
Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/AF5jxLC67DucBj2nTBWXxw3o5Tg.roa
Signing time: Wed 13 Apr 2022 07:22:43 +0000
ROA not before: Wed 13 Apr 2022 07:22:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 136744
IP address blocks: 5.249.176.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17682218 (0x10dcf2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Validity
Not Before: Apr 13 07:22:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=005e63c4b0baec3b9c063da74c1597c70de8e538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c8:d2:a9:87:60:08:dc:f6:71:58:36:6a:db:
0d:67:ff:7e:9b:4f:25:57:5b:d6:9f:0d:2a:8e:ab:
1b:4f:0d:45:4a:8f:03:e9:43:35:d3:e9:1b:67:71:
05:96:91:57:69:00:6d:a2:40:95:c9:e3:4f:dd:e2:
32:61:10:0b:08:e3:f0:2e:e1:e7:09:2f:14:3c:b6:
a5:5b:74:22:cf:aa:08:51:36:30:87:54:e2:2c:f5:
0c:8a:29:70:53:45:1b:9a:48:b6:a2:74:17:0c:32:
ea:db:14:71:e5:48:24:9b:b1:b7:df:0c:0c:0a:d7:
33:b8:5c:7b:d2:2d:b4:65:d9:2e:d9:46:11:7f:7b:
59:66:6c:f3:1b:81:1a:2e:1b:b6:18:cd:54:79:fa:
8f:3f:2b:d0:8e:65:8b:40:bb:8a:be:b7:54:75:9c:
0c:b8:b7:31:60:a9:9f:66:81:c8:47:4f:d6:5b:d9:
d7:38:7c:86:54:10:6a:d4:b7:35:c3:94:f2:b8:f6:
2e:a9:3d:52:49:99:ca:a4:a5:39:d9:c5:2e:a9:21:
b0:12:6d:c9:4c:60:1d:9f:f7:d4:66:b2:65:1e:b1:
b7:5f:51:e8:6e:6d:62:89:0d:c5:4f:5d:d8:fe:d5:
aa:8e:0c:23:bc:e3:a2:57:98:16:e2:cf:21:23:c5:
3c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5E:63:C4:B0:BA:EC:3B:9C:06:3D:A7:4C:15:97:C7:0D:E8:E5:38
X509v3 Authority Key Identifier:
keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/AF5jxLC67DucBj2nTBWXxw3o5Tg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.249.176.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:49:67:79:95:c7:df:67:74:28:ab:3a:5d:ef:d7:aa:77:6d:
ea:7b:0c:34:88:7c:5f:d0:36:e6:ff:70:4a:fe:d6:c2:39:d6:
51:d4:67:21:57:64:31:66:46:04:44:02:1b:1c:29:d6:09:ba:
1c:b4:f1:b2:2a:0f:e1:3b:2b:0b:5f:7d:4a:89:fa:16:45:0d:
44:76:b2:44:57:e9:7e:a4:93:c2:5f:53:97:e0:f9:cc:b0:f4:
8e:25:de:1f:b2:21:95:1d:ad:85:0e:35:98:87:8e:7c:11:71:
73:e9:04:c8:04:c8:7f:5b:ac:fd:4f:f3:b2:61:66:b4:f1:b2:
bc:5a:31:aa:cb:61:01:b2:0a:7f:75:f0:8a:2e:92:24:df:08:
e0:a3:6a:1a:dc:fa:3f:00:a5:bb:ed:56:40:71:40:3f:93:ee:
d0:b2:24:75:d8:99:45:16:58:2e:35:47:77:61:bb:11:20:a0:
13:05:3d:16:94:19:8b:51:ae:11:ce:31:41:77:e8:82:31:90:
28:47:d6:f9:d7:7a:a3:85:b3:19:56:cf:2b:cd:84:a9:99:3e:
fe:06:fb:26:cc:e0:81:a3:47:16:38:87:40:eb:27:b3:7b:7b:
c5:dc:28:6d:15:1c:93:a8:78:f7:5b:4e:fa:7f:53:1b:54:c0:
f8:6f:f6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:09 2024 by rpki-client on console-ams.rpki-client.org