Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Zr5ycHwLdWO-tiH8_f3luif0kTE.roa
File: Zr5ycHwLdWO-tiH8_f3luif0kTE.roa (raw, json)
Hash identifier: 0l1FkTm58+URYdfRrgYKrbHnHfy02D0Rp1HrSBAbP0g=
Subject key identifier: 66:BE:72:70:7C:0B:75:63:BE:B6:21:FC:FD:FD:E5:BA:27:F4:91:31
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0182A5AC17BBA2F3E78ACC67A727A8743C4D
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Zr5ycHwLdWO-tiH8_f3luif0kTE.roa
Signing time: Tue 16 Aug 2022 08:01:35 +0000
ROA not before: Tue 16 Aug 2022 08:01:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6939
IP address blocks: 5.180.83.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a5:ac:17:bb:a2:f3:e7:8a:cc:67:a7:27:a8:74:3c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Aug 16 08:01:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=66be72707c0b7563beb621fcfdfde5ba27f49131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f1:b2:4a:90:2f:17:c8:90:70:27:2f:5e:e4:
c4:c5:20:eb:86:0b:11:cd:4d:27:6a:5b:39:b3:bb:
86:e5:9c:d1:30:22:13:cc:24:6e:63:6d:f9:40:3d:
bc:78:68:73:5d:44:b7:2b:ef:e2:d0:31:9c:3b:d4:
64:a1:d7:ae:a9:2a:27:a4:fd:a7:04:fd:38:c8:cb:
64:22:0b:28:c7:2b:ed:8d:9f:b5:6c:b1:a4:6c:95:
71:d9:dd:23:c2:06:e4:6e:3d:b3:38:bd:7f:dc:96:
2e:3a:d3:0c:3a:a8:15:5c:49:02:3a:bf:1d:4c:60:
b7:a5:4e:05:54:7b:95:6b:e5:be:ed:2e:98:76:70:
00:ea:1a:f4:e6:65:79:18:e2:53:3a:1c:04:cf:2a:
88:bf:3e:0c:d4:75:b1:50:07:cb:5a:6d:d0:0b:e1:
1d:e3:c3:df:25:6b:4f:cf:c2:85:49:f2:fe:4f:96:
61:cd:a1:51:4f:19:cb:a6:b6:3b:4d:aa:e0:60:91:
a6:e7:ed:0c:5a:36:8c:ee:42:07:65:8e:3b:f1:9f:
15:7a:78:1f:63:a7:96:1d:df:7a:4c:11:15:63:6a:
ab:22:9d:8a:33:d9:1a:e5:54:71:cf:13:82:b1:23:
34:12:40:cc:1c:3c:4b:6b:67:09:2e:bf:96:65:46:
d0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:BE:72:70:7C:0B:75:63:BE:B6:21:FC:FD:FD:E5:BA:27:F4:91:31
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Zr5ycHwLdWO-tiH8_f3luif0kTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.83.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:3b:de:e5:6b:60:32:f4:96:29:18:c3:0d:65:8f:7f:e1:2f:
9b:6b:39:5f:30:27:36:f7:fb:80:78:26:3c:c2:1a:03:43:76:
4d:79:81:c3:4d:bc:20:ff:cf:18:b2:70:27:a4:c1:01:0a:70:
90:0d:f2:da:fc:ec:45:e3:bd:46:92:9e:43:aa:27:a9:b1:17:
f3:d0:bc:5a:88:00:21:06:af:2a:74:39:c3:f7:f6:39:66:7f:
66:ad:fb:77:1c:41:bd:6e:04:13:16:39:33:b7:6e:6e:ad:71:
60:bb:2a:a3:58:78:72:7d:b4:11:3a:ba:ad:f7:fe:27:93:13:
33:10:12:54:13:dd:00:6d:1d:21:07:d1:7a:b0:2e:86:65:f7:
41:b2:54:49:58:f4:f2:d7:4b:65:7a:da:25:5a:b9:c7:52:c6:
78:98:7c:31:d6:e3:81:e3:9d:fe:dd:ec:b9:65:8a:3b:f4:4f:
79:b3:a3:61:13:37:29:a1:2e:9d:ce:d9:17:74:ee:da:9a:5d:
88:fb:cd:fc:7a:42:61:ad:ee:87:b6:b1:01:3f:4e:58:4e:94:
a6:99:04:f0:70:51:77:44:09:d1:52:b8:33:4a:c3:22:4b:e9:
59:6a:90:a7:ea:07:a8:ba:38:46:42:e9:ab:37:a6:e9:e9:77:
79:10:29:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:22 2023 by rpki-client on console-ams.rpki-client.org