Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/zZi5LpMrgsgSnYBV1EXwPG7mqME.roa
File: zZi5LpMrgsgSnYBV1EXwPG7mqME.roa (raw, json)
Hash identifier: /O4vopr0Iq7QSwLvXg54qIRPfHRMBNThVeYqGzm0YjA=
Subject key identifier: CD:98:B9:2E:93:2B:82:C8:12:9D:80:55:D4:45:F0:3C:6E:E6:A8:C1
Certificate issuer: /CN=14435c7fdc48289ec559f01ea51dac1723f091ed
Certificate serial: 1848566C
Authority key identifier: 14:43:5C:7F:DC:48:28:9E:C5:59:F0:1E:A5:1D:AC:17:23:F0:91:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FENcf9xIKJ7FWfAepR2sFyPwke0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/zZi5LpMrgsgSnYBV1EXwPG7mqME.roa
Signing time: Sat 01 Jan 2022 09:58:55 +0000
ROA not before: Sat 01 Jan 2022 09:58:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59518
IP address blocks: 5.158.201.0/24 maxlen: 24
5.158.205.0/24 maxlen: 24
5.158.200.0/21 maxlen: 24
5.158.200.0/24 maxlen: 24
5.158.204.0/24 maxlen: 24
5.158.206.0/24 maxlen: 24
5.158.203.0/24 maxlen: 24
5.158.202.0/24 maxlen: 24
5.158.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 407393900 (0x1848566c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14435c7fdc48289ec559f01ea51dac1723f091ed
Validity
Not Before: Jan 1 09:58:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cd98b92e932b82c8129d8055d445f03c6ee6a8c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1c:80:61:54:54:33:8c:e3:97:7f:06:c2:9c:
55:54:2e:ef:ca:db:76:0e:6b:53:99:39:2b:98:99:
21:9f:f8:f5:e3:9b:f0:da:e6:68:8a:88:f8:01:6b:
7c:a7:60:de:4a:61:46:ab:35:f7:97:76:b8:f3:15:
31:d6:63:93:2a:a9:03:c4:c8:f3:1c:05:22:2b:27:
8e:d1:b1:86:ba:2a:04:c9:d8:cf:29:8d:0f:83:2f:
21:83:b6:11:ee:0d:e2:38:db:7b:f9:4f:7e:29:29:
24:f7:27:90:fb:a5:80:1f:94:40:44:47:5f:24:d4:
b2:65:da:3a:db:64:eb:25:ca:ee:d0:5b:b9:d3:d5:
37:66:86:28:00:0d:5f:b4:6a:50:77:3d:87:02:97:
a9:2c:fe:69:63:5b:f3:98:fd:4c:c5:04:b5:1d:dd:
f7:4e:78:b6:e7:93:e3:22:d5:2c:a4:05:1b:38:98:
88:8b:4a:da:df:7c:a2:41:ff:de:8e:ae:90:28:70:
cf:85:3b:62:36:09:77:21:01:3c:60:72:21:98:3d:
ec:7e:97:ca:37:f4:79:61:57:39:08:22:49:db:2c:
ad:39:8b:60:63:78:0b:62:53:25:4f:75:70:86:69:
e1:62:b6:d9:23:51:b2:55:43:7f:9a:2e:f4:f0:a5:
7c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:98:B9:2E:93:2B:82:C8:12:9D:80:55:D4:45:F0:3C:6E:E6:A8:C1
X509v3 Authority Key Identifier:
keyid:14:43:5C:7F:DC:48:28:9E:C5:59:F0:1E:A5:1D:AC:17:23:F0:91:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FENcf9xIKJ7FWfAepR2sFyPwke0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/zZi5LpMrgsgSnYBV1EXwPG7mqME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.158.200.0/21
Signature Algorithm: sha256WithRSAEncryption
3e:08:39:84:22:56:d3:7c:00:3c:ee:e4:f9:0c:6b:45:e7:06:
65:56:48:d4:1a:a5:79:d9:dd:26:88:e1:36:e0:de:8e:43:4e:
9e:b0:b7:bb:e2:e7:26:fe:b1:db:d6:b3:fd:3b:fa:ef:a4:a3:
f8:1a:16:21:5e:37:5b:ce:9a:88:18:03:02:17:ec:3a:8c:7d:
7f:58:2a:c2:a5:2f:cd:dc:0d:ad:d5:32:1d:86:04:5f:ee:b8:
16:c4:58:7d:4d:49:99:2b:65:e3:37:88:cc:06:ff:42:07:af:
b0:5e:64:05:1b:9c:67:a9:e4:be:1e:bb:51:bb:da:b5:7f:7f:
1d:6d:f2:31:e5:7d:10:ee:e3:d7:f3:26:58:78:86:02:72:96:
48:d8:c2:3d:73:3f:ee:19:0c:dd:ff:d0:bf:ff:16:25:79:aa:
fa:cb:48:dd:97:da:cb:0e:a0:31:f3:3b:9a:8f:c2:9d:9c:89:
20:62:27:7b:fc:27:29:27:34:b0:2e:e0:28:da:19:fc:be:8e:
c4:5a:e5:0f:74:ec:ff:ad:dc:e6:65:5a:d2:95:2a:fa:50:f3:
94:7f:f5:a1:c2:54:8e:8f:37:f1:2b:36:e2:1d:79:00:05:d4:
d6:a6:92:76:28:d4:79:85:78:fb:62:00:42:11:4e:cd:53:f6:
f5:fd:24:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:23 2023 by rpki-client on console-ams.rpki-client.org