Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/mOgr_aJVmYqJL-dGFWkCAc88MTs.roa
File: mOgr_aJVmYqJL-dGFWkCAc88MTs.roa (raw, json)
Hash identifier: qf9wzKmRMcCNnA0oPZkxzy47IwwYaoFj2xBYLE7B0BY=
Subject key identifier: 98:E8:2B:FD:A2:55:99:8A:89:2F:E7:46:15:69:02:01:CF:3C:31:3B
Certificate issuer: /CN=7e26b1ef7410072ce96e82d7581be436e639a7c4
Certificate serial: 05BEA9C8
Authority key identifier: 7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/mOgr_aJVmYqJL-dGFWkCAc88MTs.roa
Signing time: Sat 01 Jan 2022 12:03:46 +0000
ROA not before: Sat 01 Jan 2022 12:03:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59796
IP address blocks: 5.252.32.0/24 maxlen: 24
5.252.35.0/24 maxlen: 24
5.252.33.0/24 maxlen: 24
5.252.34.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96381384 (0x5bea9c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e26b1ef7410072ce96e82d7581be436e639a7c4
Validity
Not Before: Jan 1 12:03:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=98e82bfda255998a892fe74615690201cf3c313b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9c:86:69:b5:de:9d:d7:06:25:78:ad:ab:c0:
21:3c:2a:30:a2:92:6b:e6:cd:42:61:33:6f:30:e3:
85:40:0d:35:09:c3:13:cd:9b:a9:a0:e7:3c:d8:22:
aa:f6:b2:60:66:0a:91:f3:22:7b:22:e8:22:db:32:
89:08:20:54:b7:7c:6f:26:81:25:f6:1d:e0:1f:fd:
53:41:ff:f4:e1:fd:2a:cb:6d:f4:ac:23:4c:81:57:
77:47:9d:a3:1d:8b:90:50:31:9a:c1:59:ab:ba:92:
14:3b:0b:e5:6e:f1:0d:64:f9:aa:46:ef:4c:7e:7f:
90:65:18:55:fd:94:8a:5d:68:74:3a:c4:5b:4d:78:
b0:28:02:3e:b2:25:31:e2:b0:f9:4d:ad:0e:96:63:
4e:66:9b:df:3f:28:79:8f:5e:dc:10:f9:56:2c:1d:
8f:09:5d:25:a1:6d:b5:1e:44:f9:a1:a4:b9:aa:72:
54:3c:5e:24:e0:48:98:d9:23:46:db:83:b5:e5:5c:
4a:52:f5:99:a1:42:c6:05:56:68:72:42:b9:9a:f7:
29:f7:33:85:72:78:96:3b:74:7d:89:15:ff:bc:ef:
0e:c5:6d:81:4b:fa:db:94:14:d1:49:6e:d3:f5:cb:
33:7a:1d:f8:0b:8a:dc:e5:a2:65:26:f9:f4:86:d4:
f2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E8:2B:FD:A2:55:99:8A:89:2F:E7:46:15:69:02:01:CF:3C:31:3B
X509v3 Authority Key Identifier:
keyid:7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/mOgr_aJVmYqJL-dGFWkCAc88MTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.32.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:74:87:60:5e:8d:4f:b3:6a:73:d0:05:07:09:24:0a:cd:f4:
0d:dd:34:43:e1:ae:ab:f7:4e:28:82:64:10:5a:96:37:1e:e7:
9f:db:52:54:f9:9b:46:4c:aa:e3:bd:64:c8:4c:3a:4f:0f:87:
3d:fa:02:28:35:ed:53:e8:25:94:4f:3c:60:92:99:7f:3d:a7:
04:f7:a0:05:b8:20:d3:2a:3f:3d:5d:9d:3d:18:52:bd:fb:f8:
a5:09:ac:a5:c1:18:7e:66:70:06:61:ff:52:d4:75:6d:17:4a:
fc:16:25:81:57:32:52:41:63:75:50:1d:ad:b9:3d:4c:4a:90:
8d:94:9b:ad:18:27:62:1c:bd:d4:8a:38:8c:c4:cb:c0:ff:54:
0c:e2:51:12:1e:f0:34:d5:4d:a9:00:9f:66:e2:e5:6b:c9:82:
97:64:4a:f6:99:a2:ff:64:5e:14:0e:d2:c9:10:a6:8a:3b:83:
3d:1e:6c:f2:77:62:ae:6c:43:7b:87:19:50:c6:68:dc:80:23:
a4:8f:c8:58:6d:4d:18:26:c4:2d:4b:5b:64:2f:5a:2a:c3:fb:
a3:4a:42:e5:57:22:37:40:17:fb:66:21:92:76:17:28:24:6c:
35:3c:f6:b8:6d:af:a8:e6:20:07:c2:af:b9:21:9a:74:ff:e8:
73:56:c2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:47 2024 by rpki-client on console-fra.rpki-client.org