Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/p6uROQM8GYVGxF0RUEJKDQIfQPg.roa
File: p6uROQM8GYVGxF0RUEJKDQIfQPg.roa (raw, json)
Hash identifier: V8ssxwPkiqU6JydeH/FSL2fPuvSpbF9Bw+MvrDrx/HU=
Subject key identifier: A7:AB:91:39:03:3C:19:85:46:C4:5D:11:50:42:4A:0D:02:1F:40:F8
Certificate issuer: /CN=219885ea020e65006314ee9480def3b3efc039e3
Certificate serial: 091B51A0
Authority key identifier: 21:98:85:EA:02:0E:65:00:63:14:EE:94:80:DE:F3:B3:EF:C0:39:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IZiF6gIOZQBjFO6UgN7zs-_AOeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/p6uROQM8GYVGxF0RUEJKDQIfQPg.roa
Signing time: Sat 01 Jan 2022 06:00:54 +0000
ROA not before: Sat 01 Jan 2022 06:00:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51540
IP address blocks: 5.180.184.0/24 maxlen: 24
5.180.185.0/24 maxlen: 24
5.180.186.0/24 maxlen: 24
5.180.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152785312 (0x91b51a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=219885ea020e65006314ee9480def3b3efc039e3
Validity
Not Before: Jan 1 06:00:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a7ab9139033c198546c45d1150424a0d021f40f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f2:4a:b8:c0:9f:75:61:71:39:f8:08:f0:8a:
f5:b7:46:cf:dd:92:e6:be:9a:92:18:0f:03:33:86:
07:22:d8:6d:36:13:0b:2f:d8:da:67:be:18:4a:4f:
ae:51:69:0b:3b:d6:27:65:35:e0:60:f9:47:80:60:
0f:e2:c3:0f:25:fc:19:50:41:4d:1c:d1:54:e5:f6:
ca:a6:d9:6f:6f:30:6f:0f:7d:0d:41:be:04:82:b9:
b4:14:19:c0:ea:6f:31:e2:d2:f8:3f:26:83:90:01:
22:c9:1d:5a:8d:0b:6c:e6:71:22:e5:7b:4d:83:a9:
db:99:76:70:38:2c:db:77:3b:87:a4:76:68:45:2b:
10:45:98:a9:da:27:15:21:57:74:fa:c1:57:a3:1b:
e6:eb:85:dd:e3:4c:4d:1b:a6:98:0e:99:4e:72:5d:
df:75:70:a8:d8:a9:0d:c7:83:e9:10:35:46:fd:63:
09:ee:6b:c6:19:44:1f:bd:d7:38:52:3d:2a:22:7d:
de:cb:a8:19:63:6e:cd:51:7c:39:9f:79:67:4a:f1:
53:f3:13:84:1f:c7:44:b0:4f:61:c9:20:05:76:b2:
0e:c2:00:0d:60:32:29:77:a6:bc:31:8e:f3:e2:f0:
5b:31:71:3b:51:54:65:67:d5:1f:92:0e:21:13:98:
3c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:AB:91:39:03:3C:19:85:46:C4:5D:11:50:42:4A:0D:02:1F:40:F8
X509v3 Authority Key Identifier:
keyid:21:98:85:EA:02:0E:65:00:63:14:EE:94:80:DE:F3:B3:EF:C0:39:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IZiF6gIOZQBjFO6UgN7zs-_AOeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/p6uROQM8GYVGxF0RUEJKDQIfQPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/IZiF6gIOZQBjFO6UgN7zs-_AOeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.184.0/22
Signature Algorithm: sha256WithRSAEncryption
02:40:e8:06:3c:64:89:aa:84:80:bf:ed:bb:90:17:4d:21:f3:
e9:df:84:8f:00:71:98:81:2d:bd:28:c4:cc:70:53:26:eb:3c:
c7:35:b5:5c:1d:7d:51:9b:14:56:61:9f:9f:c3:83:ff:4e:a6:
5a:e7:18:8d:b4:67:e1:cb:5d:96:26:b7:77:40:1b:46:14:73:
22:11:d2:0f:ad:a2:fa:1e:15:65:0c:1c:f6:be:a5:44:d5:ca:
75:ea:5e:d9:c2:10:05:02:31:6b:1e:48:53:41:ba:38:d9:6f:
71:81:5c:e2:8d:aa:2a:57:93:f1:da:e0:90:49:0d:7f:b5:0c:
e4:00:fd:0b:78:7a:ad:b1:7b:66:63:cf:4d:cd:a3:7c:88:33:
3c:97:0a:b3:fe:97:12:60:ef:74:90:e0:8a:b1:84:52:13:5c:
3f:22:8b:9e:32:0d:0e:f4:62:b2:c3:7e:61:fe:ad:b0:7f:39:
c0:90:f8:d8:c4:9c:d5:73:e3:98:7f:c6:33:59:18:6c:b6:63:
de:aa:83:68:c4:57:36:39:3e:b5:44:a8:5a:54:14:4a:e3:01:
d7:43:c3:be:dd:0e:49:af:d2:2c:9c:7e:8e:1b:5b:a6:04:5a:
37:6a:c1:0d:91:2d:55:b2:42:09:d2:c6:32:ad:4c:4d:88:41:
41:cd:1e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:37 2024 by rpki-client on console-fra.rpki-client.org