Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/CXe2xK_pRoc1Ov3d1nSHkoa_n5Y.roa
File: CXe2xK_pRoc1Ov3d1nSHkoa_n5Y.roa (raw, json)
Hash identifier: uqU8tPEIl94SSAgdUd7NQdkqHItQ1dayjzYbuRaWTY0=
Subject key identifier: 09:77:B6:C4:AF:E9:46:87:35:3A:FD:DD:D6:74:87:92:86:BF:9F:96
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 0183390FF41138A85659A30D0843A06D4032
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/CXe2xK_pRoc1Ov3d1nSHkoa_n5Y.roa
Signing time: Tue 13 Sep 2022 22:54:50 +0000
ROA not before: Tue 13 Sep 2022 22:54:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 5.181.200.0/24 maxlen: 24
195.88.213.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:39:0f:f4:11:38:a8:56:59:a3:0d:08:43:a0:6d:40:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Sep 13 22:54:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0977b6c4afe94687353afdddd674879286bf9f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c5:bc:ae:60:e8:d7:8d:e8:16:11:18:eb:cf:
7a:51:1d:db:c2:16:fd:fa:53:85:66:87:cc:0e:8f:
82:1f:08:f4:2a:ec:a7:19:62:4c:50:08:01:fb:09:
e8:18:8d:1d:05:a5:f4:6b:4a:50:b2:57:06:dc:84:
02:74:27:8c:98:b6:d2:56:c8:9a:2b:7c:66:cb:71:
be:a7:26:35:d5:3d:77:cf:4b:1f:f5:57:f7:23:3f:
26:40:f3:b2:4a:32:c8:7f:e1:8b:f3:98:e0:3a:0c:
05:db:4f:38:6b:22:2b:89:1a:31:e7:53:b2:03:44:
12:5c:6e:82:00:79:3d:48:fa:0d:31:68:e7:08:0f:
5a:c5:02:f6:fe:3c:9b:95:46:3d:ff:db:7a:27:83:
92:63:97:36:f1:a4:ad:1d:09:03:74:e6:ce:7d:b2:
2e:15:06:49:6a:5d:8c:18:85:11:aa:3a:00:9c:04:
f0:7f:7f:23:37:17:66:58:b0:65:11:56:ec:5c:86:
fc:f4:ab:a0:dd:75:78:ec:32:26:a2:8c:4c:e7:99:
16:ee:7b:d4:21:d9:db:f5:ec:1a:ff:55:b8:76:f7:
18:6c:00:04:a1:17:f0:89:a3:9c:83:1a:8a:8b:62:
dc:04:f7:79:ec:c4:e3:78:48:35:a2:52:48:8b:8f:
5c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:77:B6:C4:AF:E9:46:87:35:3A:FD:DD:D6:74:87:92:86:BF:9F:96
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/CXe2xK_pRoc1Ov3d1nSHkoa_n5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.200.0/24
195.88.213.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:75:24:f7:3e:5f:9b:dd:09:42:41:70:64:d0:f4:b3:98:93:
cb:ec:8c:d9:9e:bb:f3:a9:4e:3d:52:aa:0a:be:6b:40:a8:77:
b5:ba:9b:c6:42:4f:e3:d9:a5:09:8b:d7:82:59:db:63:85:6d:
e9:5e:0a:27:11:82:31:b9:36:43:43:b7:f0:f2:56:97:bd:5e:
5d:41:9c:a0:5c:54:57:65:97:58:ea:ac:34:97:d9:e1:4f:a2:
af:65:d5:7e:b3:06:ab:9e:62:ba:9c:0b:ce:c3:d8:31:64:e2:
3c:be:db:0e:63:32:28:b6:e7:91:88:87:2e:c2:3c:f1:1e:f3:
7b:19:54:f0:74:74:aa:83:66:a1:a6:a1:d4:15:18:0c:41:a7:
af:45:ce:40:c7:89:17:6d:c9:aa:f5:c8:03:7a:41:17:62:d8:
02:bc:a8:28:19:bd:43:0f:32:3a:38:7c:7f:cf:ee:6d:76:0c:
ee:8d:09:8e:49:5b:d1:5a:87:c1:93:ce:6e:ac:58:56:07:f8:
0d:cc:9d:49:d5:18:59:31:85:55:2a:10:80:b1:7d:a4:66:58:
32:f1:4f:7a:cb:3d:87:82:15:c7:6f:ac:aa:ae:fd:c0:c5:f9:
f7:9e:fa:95:0e:57:5c:eb:5c:77:4b:5d:0b:c5:b8:43:0d:9d:
ac:7a:dd:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:45 2023 by rpki-client on console-fra.rpki-client.org