Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/B1PxdBhUfIGO0AULBqeUl0Xgm9k.roa
File: B1PxdBhUfIGO0AULBqeUl0Xgm9k.roa (raw, json)
Hash identifier: 5U0Ey1oZRO+3KR7+hrbrOrw011rLi6OlueT/WsLWV5Q=
Subject key identifier: 07:53:F1:74:18:54:7C:81:8E:D0:05:0B:06:A7:94:97:45:E0:9B:D9
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 0183390E1E99221E31AA4454A751144B1121
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/B1PxdBhUfIGO0AULBqeUl0Xgm9k.roa
Signing time: Tue 13 Sep 2022 22:52:50 +0000
ROA not before: Tue 13 Sep 2022 22:52:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 5.181.200.0/24 maxlen: 24
195.88.213.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:39:0e:1e:99:22:1e:31:aa:44:54:a7:51:14:4b:11:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Sep 13 22:52:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0753f17418547c818ed0050b06a7949745e09bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:27:93:5d:b3:8e:06:32:1f:1e:99:c2:b3:56:
f0:3e:89:6c:97:27:4b:b5:f6:4d:79:b7:74:49:f6:
bb:7b:e5:52:e3:04:41:a8:4d:64:81:d3:4d:bc:9b:
d1:65:e0:1e:ef:c5:a9:48:40:56:6e:e8:33:20:ce:
f1:6e:7b:91:fa:2d:15:e0:bb:9e:d9:6c:33:c0:e9:
2f:81:a3:4e:16:82:20:ed:1b:3c:d3:6b:17:b8:57:
de:be:fd:f0:e3:00:a6:6e:8d:e3:b0:7c:b3:59:ea:
21:19:d4:cc:d7:6c:51:cc:cc:f1:61:d2:4d:30:c0:
31:ed:24:47:0f:29:15:7e:e9:80:83:e5:37:e3:45:
ee:98:0f:44:15:d5:3f:52:1e:62:78:a9:7a:49:d3:
ee:dc:64:07:0d:48:b7:d8:79:59:fe:11:24:07:a1:
c2:bb:ea:9c:4e:a4:ff:11:ab:e6:d5:45:7d:2e:b1:
8b:e9:92:df:13:57:31:58:f3:7a:91:a2:3c:b3:c1:
30:c3:49:56:43:8d:cb:0a:8c:7a:d7:2e:06:a5:a0:
46:a4:a4:38:8f:fa:53:47:a9:e9:9a:29:e8:d0:3e:
96:6a:37:ff:06:0e:23:16:04:f7:f5:fe:ac:46:8b:
62:33:fb:a8:2d:81:12:34:e5:c3:30:5f:48:ef:d8:
f2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:53:F1:74:18:54:7C:81:8E:D0:05:0B:06:A7:94:97:45:E0:9B:D9
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/B1PxdBhUfIGO0AULBqeUl0Xgm9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.200.0/24
195.88.213.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:79:ad:bf:04:73:5f:4a:82:9d:0f:7a:d8:98:69:55:76:ae:
8e:62:00:90:f2:6f:46:7f:ee:9b:5b:77:95:b3:16:14:d1:ba:
97:82:2e:1e:b0:d5:0e:b1:86:a1:7d:5e:3f:99:69:36:9e:48:
e0:bb:2d:df:b3:a1:34:e8:89:7d:fc:30:56:0b:90:ca:7f:61:
80:93:9d:01:76:03:57:43:ed:57:df:ac:d1:6a:a7:82:38:87:
56:3a:09:7a:70:e3:56:e7:6e:84:2d:23:85:2d:a4:e7:10:45:
b2:a9:00:fe:eb:3d:c4:25:f5:49:fa:0f:9b:49:10:59:b2:92:
b1:b1:15:c4:f6:66:13:06:f3:29:be:28:0f:cb:9a:09:5c:86:
55:57:7d:7e:2d:6f:d6:fe:b8:21:f7:cc:d1:47:23:6e:7e:2d:
f0:96:c9:4d:0a:30:af:00:84:a1:a9:c3:df:0c:96:1d:a6:2a:
91:57:ff:f4:87:0b:65:ca:07:d0:7b:ee:49:90:16:bb:2c:41:
0d:ec:aa:d9:5c:3b:ea:88:cb:1d:ec:24:83:77:e1:4a:9b:f7:
36:aa:8d:54:2e:62:96:43:e6:1e:14:fa:b1:2e:77:c1:d7:45:
b5:a8:30:fe:d2:fe:8b:0d:b2:4d:28:b6:c2:b0:23:7a:b7:b2:
3b:a8:70:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:45 2023 by rpki-client on console-fra.rpki-client.org