Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/6HAFK3OE1OIn8SjQFgE_bFmnEMw.roa
File: 6HAFK3OE1OIn8SjQFgE_bFmnEMw.roa (raw, json)
Hash identifier: Y/Q1gDn26ATueQ6aajD+z6jL5rRIzmuqGHExAuyzu8Y=
Subject key identifier: E8:70:05:2B:73:84:D4:E2:27:F1:28:D0:16:01:3F:6C:59:A7:10:CC
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 05F81880
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/6HAFK3OE1OIn8SjQFgE_bFmnEMw.roa
Signing time: Sat 01 Jan 2022 16:01:14 +0000
ROA not before: Sat 01 Jan 2022 16:01:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 5.181.200.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100145280 (0x5f81880)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Jan 1 16:01:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e870052b7384d4e227f128d016013f6c59a710cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9d:e8:bd:61:e5:60:9e:f4:81:96:bf:0c:6e:
f8:b9:e4:51:11:4d:85:80:ce:e6:b3:30:90:34:db:
81:d7:be:f7:89:28:b9:3c:63:29:b8:36:d2:80:11:
c7:96:fc:f9:b8:07:4d:43:6b:b3:6a:f7:09:ff:21:
cb:d4:e0:91:cc:c6:10:a2:38:06:52:a0:d3:11:7c:
76:cd:a5:c8:22:5d:b7:d2:8d:d4:12:c2:93:7b:ad:
f8:e5:b1:14:f6:b5:41:bc:61:9e:c7:c5:4b:67:aa:
d1:bc:b5:45:bc:14:e5:b4:16:53:d5:01:bf:9b:6b:
bb:f5:e3:d3:50:89:71:f3:9c:d2:17:b4:b5:4f:63:
f0:41:87:6f:f5:21:c6:fc:70:97:8f:b8:69:e4:a2:
0c:fe:50:03:e3:f2:35:20:81:ca:7b:95:27:85:76:
55:fa:1f:3e:63:9b:99:31:c8:5a:bd:34:5d:89:a0:
3c:83:90:ce:2f:d8:33:2a:63:e3:c5:94:35:8f:79:
42:e0:8c:ae:69:4e:40:7b:4f:57:6c:34:c3:17:83:
e2:d8:b8:b7:2e:d1:92:af:d2:64:58:54:a8:0c:67:
1d:3c:bd:27:07:6d:c0:f0:84:6a:3f:c0:a0:5d:58:
17:e0:24:89:f2:d3:52:a0:90:6d:95:16:e6:a6:55:
bd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:70:05:2B:73:84:D4:E2:27:F1:28:D0:16:01:3F:6C:59:A7:10:CC
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/6HAFK3OE1OIn8SjQFgE_bFmnEMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.200.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:db:67:c1:7f:4f:67:b5:86:30:83:ad:e6:91:55:7b:43:d2:
50:61:c1:02:ce:24:06:6c:0a:31:d6:16:38:ae:9c:f4:87:f1:
4d:7e:72:af:85:2c:83:2b:29:44:46:5e:f8:83:e8:8e:d2:e3:
46:d8:3a:d5:0b:cd:c7:f6:58:3e:f7:1c:c4:4d:fe:20:7e:1e:
a2:42:2e:b7:85:7f:d1:c6:f0:51:7f:57:7f:6f:6f:5f:43:5d:
8e:ad:62:f0:ec:54:77:55:71:de:45:25:76:1b:f7:20:f3:89:
4d:9b:bc:b0:8b:2c:37:67:4a:3d:3b:1a:cc:cd:7e:02:6f:96:
2e:ca:dd:1a:50:59:d0:25:60:b0:7c:5d:e3:5a:b5:7f:d7:e9:
5f:be:27:9a:f3:83:00:c8:54:e8:e8:99:8f:22:64:79:14:13:
55:a7:db:7d:9d:65:63:12:78:9d:ff:d3:c3:9a:9e:0b:cf:de:
81:18:5b:ff:ca:5e:9a:89:b8:d4:dc:94:52:75:46:a9:40:bc:
d7:be:3e:29:c3:93:96:f4:1d:72:60:49:15:36:4f:ce:f2:75:
b6:30:06:bd:43:e1:50:1a:ee:35:3d:00:d6:85:9d:f6:60:6c:
2f:bb:ca:86:5e:61:37:aa:99:45:c3:dc:3b:43:a2:c4:dc:da:
17:b0:35:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:37 2023 by rpki-client on console-ams.rpki-client.org