Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/iwAfEdhcZBpwmhPmXsoKjMEjbig.roa
File: iwAfEdhcZBpwmhPmXsoKjMEjbig.roa (raw, json)
Hash identifier: wZmtGO35+tqh+7NLGmXQSlJ8GJLfZy8NGvuq8nqCzW4=
Subject key identifier: 8B:00:1F:11:D8:5C:64:1A:70:9A:13:E6:5E:CA:0A:8C:C1:23:6E:28
Certificate issuer: /CN=b02f0c2a2a51275bee2493a5656ecf1b612f1226
Certificate serial: 096A088D
Authority key identifier: B0:2F:0C:2A:2A:51:27:5B:EE:24:93:A5:65:6E:CF:1B:61:2F:12:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/iwAfEdhcZBpwmhPmXsoKjMEjbig.roa
Signing time: Sat 01 Jan 2022 02:00:51 +0000
ROA not before: Sat 01 Jan 2022 02:00:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47123
IP address blocks: 5.253.251.0/24 maxlen: 24
5.253.248.0/24 maxlen: 24
5.253.249.0/24 maxlen: 24
5.253.250.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157943949 (0x96a088d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b02f0c2a2a51275bee2493a5656ecf1b612f1226
Validity
Not Before: Jan 1 02:00:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b001f11d85c641a709a13e65eca0a8cc1236e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9d:bb:3d:36:fb:90:aa:28:d3:9f:c2:cb:c2:
57:99:e5:2d:c0:fe:85:87:23:f3:75:1c:d0:4e:d0:
a8:44:da:f5:d4:7b:9c:27:0a:17:4b:55:a9:8d:c1:
38:4e:35:57:a9:9b:b2:a8:c0:29:32:23:37:47:97:
f3:f4:b9:02:7e:b8:60:06:6d:5e:08:b3:72:4e:eb:
6c:9a:47:56:56:f6:d2:da:4f:20:85:96:fa:3c:d3:
b0:44:fe:44:32:63:ee:1c:c4:1c:38:81:7a:37:c3:
74:a3:7b:92:b9:86:98:fe:a8:4b:55:0f:02:22:f3:
f5:ef:ce:95:3f:1a:89:0c:30:f0:c3:42:cc:78:02:
d5:69:3d:71:0d:65:e3:b4:17:d0:95:53:50:85:f7:
e0:09:d1:cc:71:c4:67:c4:42:91:4c:1c:d7:70:cf:
76:93:cd:eb:8e:f1:27:be:88:59:9a:24:6c:3a:70:
a6:af:9d:5a:86:71:e0:3a:e8:43:dd:c8:e8:c4:af:
2f:c3:6f:82:72:71:e1:b8:36:67:ff:25:36:27:de:
bc:a0:e4:ed:dd:35:86:33:27:f6:79:a5:14:54:61:
f3:52:91:cc:7b:ad:04:f2:2a:b9:cd:68:bf:9b:9b:
77:e3:6a:0d:45:96:c6:ec:24:2b:2d:f7:25:8d:0d:
30:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:00:1F:11:D8:5C:64:1A:70:9A:13:E6:5E:CA:0A:8C:C1:23:6E:28
X509v3 Authority Key Identifier:
keyid:B0:2F:0C:2A:2A:51:27:5B:EE:24:93:A5:65:6E:CF:1B:61:2F:12:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/iwAfEdhcZBpwmhPmXsoKjMEjbig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.248.0/22
Signature Algorithm: sha256WithRSAEncryption
10:35:67:e1:1f:38:0e:d4:6d:b2:8e:58:62:ac:33:54:5d:38:
7d:bf:cb:7f:bc:92:8c:55:e1:cc:b2:56:f6:77:c1:25:dc:d8:
9f:13:eb:28:73:30:9f:d0:33:2a:76:d5:5a:45:a4:2a:1c:30:
1e:2e:a7:3a:1e:4b:9f:d0:2d:be:fb:40:91:e1:69:f2:08:ab:
77:48:b3:e6:7d:07:f7:4b:e0:c9:0f:59:3f:b9:00:b2:24:a6:
7c:7b:9e:7e:0f:f7:07:93:c4:b0:bb:57:f1:58:59:e5:5d:69:
78:db:bd:65:f9:c0:86:83:f0:a0:78:7d:3a:8e:9f:2e:70:eb:
63:b3:3f:8c:5c:b3:0e:76:4f:13:0c:b7:a5:a2:0d:35:a1:90:
09:bd:b6:3e:53:0b:ce:d5:51:53:69:ff:86:57:d7:b6:13:99:
0c:a2:62:02:3d:76:d3:5d:63:fb:a7:49:a5:54:9c:5f:b1:ec:
81:5e:f1:8e:b1:cf:19:60:16:a5:86:ca:53:07:c4:10:a7:1a:
a5:93:da:b0:3f:80:a9:e9:e1:39:9f:8e:ef:bb:20:bf:a5:2e:
21:09:4c:fa:49:02:63:00:03:37:f4:d0:b4:70:ff:5d:d5:f5:
a6:86:9c:04:95:e4:1f:12:f6:7b:85:b4:62:be:b2:b1:ea:8d:
93:04:9d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:25 2024 by rpki-client on console-ams.rpki-client.org