Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/G1YLcMWtE8gDTujNOpwK5iZ24LE.roa
File: G1YLcMWtE8gDTujNOpwK5iZ24LE.roa (raw, json)
Hash identifier: kiw0QnJddsLFtwUU4Pe1IwgDI9LdK7hHg0GMzHYpMoM=
Subject key identifier: 1B:56:0B:70:C5:AD:13:C8:03:4E:E8:CD:3A:9C:0A:E6:26:76:E0:B1
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 060960A9
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/G1YLcMWtE8gDTujNOpwK5iZ24LE.roa
Signing time: Sat 01 Jan 2022 16:01:27 +0000
ROA not before: Sat 01 Jan 2022 16:01:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212042
IP address blocks: 5.181.201.0/24 maxlen: 24
45.155.123.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101277865 (0x60960a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Jan 1 16:01:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1b560b70c5ad13c8034ee8cd3a9c0ae62676e0b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d6:8f:89:43:1d:7c:31:38:fc:38:dd:dc:5f:
b3:00:57:55:3f:44:61:20:8d:de:56:27:7c:dc:9d:
a1:c4:b9:a9:0f:b5:09:17:42:27:8f:7a:35:61:fc:
41:89:5f:67:9d:b8:48:d8:9d:0e:ee:5c:4f:17:10:
c0:22:2f:b0:1b:c3:58:04:46:03:79:70:bb:99:2b:
57:44:f6:12:cb:c5:f1:58:ca:3d:f4:ae:e0:b1:2f:
e9:91:cf:65:d7:ef:06:76:78:12:97:af:ff:7a:d7:
98:26:9e:af:11:6c:1b:ba:c0:2f:48:86:17:85:b0:
39:e3:da:29:cc:e9:c5:79:6b:b1:80:9c:a6:0f:f7:
56:f1:b9:d3:3f:11:be:2b:14:a2:3b:38:e0:4b:49:
d0:d5:22:0f:a1:ca:25:b7:42:e2:71:37:08:65:9b:
bc:e6:b5:05:cc:d2:42:76:8a:37:ed:e7:5e:fb:2d:
3f:ba:a4:a2:67:1b:85:ab:fd:85:07:40:f5:95:e7:
38:b9:1d:c0:4c:1e:78:7a:d7:e4:8a:9e:75:3a:7a:
f0:a9:c5:f8:08:71:d0:92:38:16:12:ba:a1:36:50:
d5:80:16:04:61:17:5f:3c:a9:21:e8:ee:3d:27:6b:
ca:9c:6b:53:d6:2c:74:f5:70:18:21:e8:f7:4b:c8:
a8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:56:0B:70:C5:AD:13:C8:03:4E:E8:CD:3A:9C:0A:E6:26:76:E0:B1
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/G1YLcMWtE8gDTujNOpwK5iZ24LE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.201.0/24
45.155.123.0/24
Signature Algorithm: sha256WithRSAEncryption
80:83:40:b8:c7:62:b9:f7:53:57:87:06:0f:d0:29:71:4b:2e:
20:ad:ff:2e:bb:7e:e7:1c:62:ff:a6:f1:e9:b7:1c:97:f7:40:
30:74:19:88:48:d0:1e:d7:bc:92:1f:a0:76:74:9f:c1:c8:f1:
65:ce:73:88:b6:4b:31:ef:ec:cc:ac:4f:a7:e8:f5:65:44:8f:
ad:15:ee:6d:d3:84:a8:76:93:00:6c:28:0b:5e:2c:ec:d3:23:
7e:e6:85:be:b4:4e:64:08:29:1d:fa:bf:65:ed:30:62:36:bb:
dc:a7:42:41:ac:d4:15:ca:3c:3d:e4:01:26:aa:ca:73:f2:82:
12:af:2b:6b:1a:50:ae:d5:05:66:91:ea:8d:3d:b3:9c:75:4e:
35:fb:57:15:ab:52:68:0b:f9:67:ab:06:b7:3d:22:fa:d5:84:
55:d7:57:3b:99:8c:a8:0e:d4:3b:04:86:8a:dc:36:e6:4d:68:
b1:be:92:43:bb:d9:cc:8f:26:88:da:2f:14:2b:a9:53:0d:c3:
f4:e0:20:c1:84:3a:5d:20:40:62:12:ff:1f:6c:74:e4:e9:72:
bf:7b:39:ab:f2:29:b3:88:f4:a4:19:da:d8:28:34:58:14:e6:
2a:a4:f7:f1:0a:ae:a3:08:fc:0d:1f:02:c5:5a:09:5d:90:39:
c3:ec:1d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:36 2024 by rpki-client on console-ams.rpki-client.org