Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/XnvG6FRhTXJBsWXbZrqWGPbFbrI.roa
File: XnvG6FRhTXJBsWXbZrqWGPbFbrI.roa (raw, json)
Hash identifier: lVwpsZoAtDYLpeFPpMejTDgIRWwreD17b46j2wX2Igk=
Subject key identifier: 5E:7B:C6:E8:54:61:4D:72:41:B1:65:DB:66:BA:96:18:F6:C5:6E:B2
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0183128CDA5A8129E4A5F54B716AEB06B6C0
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/XnvG6FRhTXJBsWXbZrqWGPbFbrI.roa
Signing time: Tue 06 Sep 2022 11:26:04 +0000
ROA not before: Tue 06 Sep 2022 11:26:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 5.180.35.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:12:8c:da:5a:81:29:e4:a5:f5:4b:71:6a:eb:06:b6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Sep 6 11:26:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5e7bc6e854614d7241b165db66ba9618f6c56eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:9d:a4:6a:68:ea:84:0d:99:60:95:ea:e6:74:
5d:9f:b9:7d:84:7a:23:95:e9:61:84:fe:36:68:bd:
0c:b0:33:99:c6:71:65:01:39:15:3a:77:a0:c7:0f:
4d:a3:34:90:0f:f7:1e:6b:54:bc:18:a9:ed:cc:59:
04:5d:4c:d6:78:a0:60:d7:8e:a6:21:ac:92:5c:0e:
c6:c4:aa:bb:10:d8:63:27:12:e3:d2:45:32:e1:e4:
f5:13:f7:43:b0:5d:47:c6:45:f7:73:71:b2:ec:a3:
e6:ef:98:b5:c6:41:39:2e:8c:79:8c:87:78:15:06:
49:4a:79:f9:bb:ac:3c:44:82:73:22:0c:18:d1:57:
c6:8a:8e:e5:87:c9:26:47:d3:69:bc:60:88:49:06:
6f:4e:1a:a1:9a:a8:74:d2:26:3b:b4:39:d1:61:48:
89:47:2d:24:5e:43:e5:be:61:79:37:48:92:0a:76:
12:a5:6b:88:dc:78:e7:67:61:d3:35:f5:90:73:cf:
fa:e9:f2:e0:2c:b7:c9:9d:36:ca:d7:87:f1:45:5b:
39:08:68:60:af:01:63:1e:7f:b0:c2:ff:49:f6:a7:
5f:ef:59:be:c5:be:33:08:91:4b:bc:7e:ba:77:a0:
71:e7:11:08:6f:98:2f:82:b1:23:a8:38:17:6a:34:
1d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:7B:C6:E8:54:61:4D:72:41:B1:65:DB:66:BA:96:18:F6:C5:6E:B2
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/XnvG6FRhTXJBsWXbZrqWGPbFbrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.35.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:1e:12:9e:5b:ee:5d:fd:63:62:81:d6:af:77:bd:a7:e4:6e:
eb:11:41:d6:9e:10:62:d2:12:b9:fc:88:4c:5d:ee:93:50:de:
80:b7:eb:66:30:e4:44:09:a2:35:34:44:3c:c7:8c:4a:03:41:
f9:26:90:f5:de:68:79:3a:46:27:37:89:61:5c:11:4e:61:ab:
69:bd:93:6a:a2:ab:b1:0f:1f:db:19:e8:5e:83:65:6f:15:b5:
58:e1:87:15:7f:60:4d:62:bc:d7:8d:92:d6:3d:b7:7f:38:a2:
3a:d2:cf:fb:7e:88:74:99:1f:bb:37:39:4b:16:79:9e:b9:4f:
12:80:a2:41:3b:17:a8:af:05:4f:91:14:03:57:68:9a:fb:04:
b5:e8:af:9b:c6:3b:df:71:58:2c:eb:8c:6f:0d:62:38:67:ae:
8b:d8:24:2e:44:ff:ba:f7:73:9f:f5:5e:9e:e1:c4:e3:30:df:
f7:8b:55:03:41:c1:38:21:5b:e7:bc:97:9e:ba:dc:81:0a:ad:
67:e8:bf:8b:c3:08:ed:5b:e1:a7:f4:41:a5:78:9b:4f:8c:fd:
c2:37:73:22:33:ba:f6:56:c5:72:62:9c:f9:b3:c4:a5:7a:88:
0b:7b:bd:8a:c9:a7:d6:98:3c:12:0a:5c:4d:ab:42:47:4c:58:
3b:cb:44:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:22 2023 by rpki-client on console-ams.rpki-client.org