Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/VhH3fFUaZDZUj4A7UfyK-dHJEUw.roa
File: VhH3fFUaZDZUj4A7UfyK-dHJEUw.roa (raw, json)
Hash identifier: MTyUc87WO8qdWl8bKly7LI4fwyQmr3spNK7yKw7j1lQ=
Subject key identifier: 56:11:F7:7C:55:1A:64:36:54:8F:80:3B:51:FC:8A:F9:D1:C9:11:4C
Certificate issuer: /CN=4384f6fa6decced5578a85a51e0bd65701ea34ec
Certificate serial: 089EDE48
Authority key identifier: 43:84:F6:FA:6D:EC:CE:D5:57:8A:85:A5:1E:0B:D6:57:01:EA:34:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/VhH3fFUaZDZUj4A7UfyK-dHJEUw.roa
Signing time: Sat 01 Jan 2022 14:55:27 +0000
ROA not before: Sat 01 Jan 2022 14:55:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41327
IP address blocks: 5.183.110.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144629320 (0x89ede48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4384f6fa6decced5578a85a51e0bd65701ea34ec
Validity
Not Before: Jan 1 14:55:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5611f77c551a6436548f803b51fc8af9d1c9114c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6d:70:93:a9:9e:47:28:90:50:fe:66:e9:5d:
7d:9c:2b:99:46:07:3a:f2:ca:83:23:44:52:dc:51:
3e:9e:f7:bd:68:de:53:61:fb:d4:0d:eb:34:2d:c2:
64:ec:d4:69:3d:e9:6b:4e:2a:90:97:55:6e:a1:33:
05:ae:c5:75:7b:af:af:b4:0b:25:34:3f:fa:f8:ac:
e9:29:f9:52:e3:9d:b1:d1:bb:d3:8c:ce:63:1c:b7:
3f:8e:66:b2:e3:3e:62:9e:ae:1f:26:2e:ec:7e:66:
6f:41:91:6f:e7:d4:83:29:fd:40:06:2e:fd:a1:61:
72:89:f1:48:60:99:10:af:8f:48:00:22:20:1e:ed:
68:0d:75:93:78:bc:8d:50:41:2d:5c:3a:ff:80:d0:
fa:35:23:7f:df:90:50:9d:cb:d9:50:77:5c:21:5f:
3c:a8:8e:64:38:bf:0d:e2:44:21:ea:87:b8:1f:9b:
24:c2:bd:3f:15:7a:dc:a2:43:4d:39:95:03:de:df:
a8:c5:a7:63:2f:7a:12:1b:52:20:a6:d9:af:a1:0d:
ec:9a:10:da:b5:14:7d:7a:f6:01:02:f1:b5:34:cc:
15:58:c3:75:29:ef:24:55:c9:30:4d:30:0e:c8:dc:
a4:0d:2e:26:15:12:d3:86:85:91:a5:9b:b6:5f:e0:
5d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:11:F7:7C:55:1A:64:36:54:8F:80:3B:51:FC:8A:F9:D1:C9:11:4C
X509v3 Authority Key Identifier:
keyid:43:84:F6:FA:6D:EC:CE:D5:57:8A:85:A5:1E:0B:D6:57:01:EA:34:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/VhH3fFUaZDZUj4A7UfyK-dHJEUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.110.0/24
Signature Algorithm: sha256WithRSAEncryption
11:8a:88:1c:fb:f7:8c:34:45:29:43:56:36:63:fc:7a:91:95:
bf:4f:07:ca:98:f4:0d:13:f1:53:f6:c6:01:03:50:0c:79:7c:
87:7b:61:73:59:04:24:95:7f:79:cc:7e:67:f8:e3:46:3a:03:
fc:40:64:43:7e:dc:f0:73:95:25:28:79:b8:55:ac:e9:09:4a:
10:7f:23:66:53:aa:53:04:ec:7f:e9:63:b3:05:91:b7:b2:c7:
fd:54:f2:b9:9f:48:bc:5b:ff:0c:26:68:25:a0:29:73:59:f9:
97:03:80:12:35:e9:01:c8:42:30:d5:27:77:74:5c:72:d4:4c:
65:3f:1d:0e:20:cf:51:17:3c:38:b4:de:35:ff:3d:3c:e6:33:
05:2b:2c:f4:0c:c8:1e:43:02:d4:2e:6a:c5:0a:2a:ce:b7:5d:
eb:01:93:db:40:5c:79:43:5f:34:10:16:b6:00:57:11:8a:76:
ad:a8:2a:73:b2:21:40:17:b5:7f:fb:cb:ad:a5:4f:2e:00:63:
5a:f4:94:10:3d:7a:d1:b5:ab:ab:cb:67:91:2d:a2:7d:2f:13:
ed:8d:7d:0c:cd:c9:b7:4f:fe:ad:e6:fc:41:3d:54:e0:4b:62:
5e:e7:72:ca:53:df:7a:2d:28:15:d8:54:af:45:04:c5:de:a6:
68:8a:43:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:35 2025 by rpki-client