Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/nyHr4ZeO5mVHNA7GAbgqkMDt8vM.roa
File: nyHr4ZeO5mVHNA7GAbgqkMDt8vM.roa (raw, json)
Hash identifier: wprRPZwN4NgKMu+4x8+wSw14sO7pNK1TkirkGfMceuM=
Subject key identifier: 9F:21:EB:E1:97:8E:E6:65:47:34:0E:C6:01:B8:2A:90:C0:ED:F2:F3
Certificate issuer: /CN=d6e2694652aa298511edafbe18d2b1cdbc792638
Certificate serial: 1C07584B
Authority key identifier: D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/nyHr4ZeO5mVHNA7GAbgqkMDt8vM.roa
Signing time: Thu 14 Apr 2022 14:21:04 +0000
ROA not before: Thu 14 Apr 2022 14:21:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60423
IP address blocks: 5.145.119.0/24 maxlen: 24
5.145.117.0/24 maxlen: 24
5.145.118.0/24 maxlen: 24
2a04:2f00::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 470243403 (0x1c07584b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6e2694652aa298511edafbe18d2b1cdbc792638
Validity
Not Before: Apr 14 14:21:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9f21ebe1978ee66547340ec601b82a90c0edf2f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:81:21:4f:f9:23:47:21:f8:09:17:da:b0:70:
ba:12:50:55:e2:82:5f:13:b3:df:8d:81:ce:48:d1:
4a:b5:fb:b1:e9:63:33:64:55:c9:bf:8b:9a:94:e9:
e8:9a:24:45:61:37:a5:bb:74:fe:14:b9:2a:9f:20:
8c:e1:74:83:31:0c:31:34:b7:63:94:22:16:bf:6f:
00:c5:d2:b9:b2:a6:93:a1:9c:71:8b:06:e3:7f:ea:
f1:83:e1:71:84:66:af:65:c1:1d:f9:e5:bf:25:78:
eb:6a:7a:32:cc:2b:1c:1c:8f:d8:e9:a0:49:5a:00:
b0:b9:c9:9f:bf:37:9a:4b:a3:ff:0b:04:a2:33:87:
53:84:d4:91:ac:53:57:83:78:2c:e6:c8:b0:6a:28:
51:c7:9b:7c:49:ea:48:3a:ba:f2:2f:ad:23:06:2b:
00:37:f8:a8:30:7a:aa:b9:30:37:1d:cc:0d:13:cb:
5f:4f:25:3c:c4:88:a0:bb:5c:20:1b:28:3a:31:3b:
79:6b:d3:36:3a:81:41:61:27:6a:8e:2e:f7:f8:aa:
7c:16:13:cc:a5:0a:77:7a:d6:dc:24:5c:35:89:fe:
b7:3e:a1:bd:4d:7b:7f:ec:ea:46:f2:73:ac:b1:36:
61:90:09:ed:2c:0c:6a:4b:00:e6:3e:c1:d4:19:c3:
e0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:21:EB:E1:97:8E:E6:65:47:34:0E:C6:01:B8:2A:90:C0:ED:F2:F3
X509v3 Authority Key Identifier:
keyid:D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/nyHr4ZeO5mVHNA7GAbgqkMDt8vM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.145.117.0-5.145.119.255
IPv6:
2a04:2f00::/48
Signature Algorithm: sha256WithRSAEncryption
5d:8b:b0:76:18:8d:09:35:b0:5d:48:f6:4d:29:14:cc:43:a8:
2c:e1:62:45:26:cf:90:cc:7a:f1:df:a5:12:e9:b2:0c:17:7d:
8e:5b:fa:77:2b:aa:cc:8c:2c:8e:9b:e3:f9:de:4c:e4:65:a0:
84:ad:d1:bc:47:df:15:49:39:13:99:24:25:ab:a2:90:a3:7a:
04:31:95:8b:2e:d0:dd:9f:71:e8:64:62:43:43:c1:22:83:9c:
da:30:82:89:28:f2:a2:3d:fc:5d:c1:48:62:07:97:91:52:ef:
69:8b:09:3f:f3:47:40:ea:be:f7:f7:e0:91:7a:dc:ee:12:de:
1a:f8:25:94:4f:c0:1e:82:d3:31:e0:f3:49:02:74:0e:25:a2:
9f:29:61:96:dd:ba:8c:f2:e0:11:9a:78:ff:c2:a8:00:59:07:
fb:d1:bd:19:9a:f4:5f:00:12:05:7a:ed:b5:ff:53:aa:6f:fa:
ce:ab:70:8d:19:c9:39:8d:34:d3:ae:0b:97:5d:d2:f0:f1:66:
3b:9d:f3:50:79:50:b5:4a:5d:c3:3f:fa:64:e9:c7:f4:80:99:
54:10:0c:5d:69:22:e2:4a:c7:f0:62:cf:25:67:b9:9e:1a:d6:
a6:40:cc:f0:4e:ec:49:7e:44:8a:dc:21:9d:14:84:f4:2f:24:
cb:b1:d4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:13 2023 by rpki-client on console-ams.rpki-client.org