Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/dh5L_nVooB__XZMXG5upKc6_Ksg.roa
File: dh5L_nVooB__XZMXG5upKc6_Ksg.roa (raw, json)
Hash identifier: ATmkj0bHx62IwCroScvu9f8/TR11YbvS1xqZ25VTw1o=
Subject key identifier: 76:1E:4B:FE:75:68:A0:1F:FF:5D:93:17:1B:9B:A9:29:CE:BF:2A:C8
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018558867498C48875C407D22ABAB42CC738
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/dh5L_nVooB__XZMXG5upKc6_Ksg.roa
Signing time: Wed 28 Dec 2022 11:38:04 +0000
ROA not before: Wed 28 Dec 2022 11:38:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203749
IP address blocks: 194.53.52.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:58:86:74:98:c4:88:75:c4:07:d2:2a:ba:b4:2c:c7:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Dec 28 11:38:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=761e4bfe7568a01fff5d93171b9ba929cebf2ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:db:38:dc:e3:99:06:49:04:66:c3:46:9c:d8:
a1:50:ec:77:2a:d0:30:7a:72:47:34:c9:52:15:82:
17:45:b8:5f:bf:5e:d9:fc:33:f9:3b:e2:ad:11:9a:
ba:fc:a1:b9:b8:bf:78:77:aa:45:09:97:ec:06:ec:
f1:da:13:c4:07:3c:f8:5d:26:0b:dc:aa:cd:b5:77:
72:62:b4:1c:e2:85:a9:e3:64:e0:95:2c:7b:82:b0:
b7:1b:ff:84:30:0b:1d:98:75:90:3f:c5:b3:85:19:
60:0c:99:2e:e7:44:3f:d5:fe:22:0b:98:ce:5b:76:
31:83:6e:75:2a:15:c7:e2:44:01:16:6e:4a:2a:38:
11:e4:e6:16:eb:49:fc:06:d3:5e:f3:73:20:4d:3b:
7f:07:68:41:dc:98:4a:7a:26:d7:58:22:f5:15:95:
bb:9e:4a:47:3a:c7:57:39:ef:9e:da:5a:a8:90:b7:
d7:9b:44:7f:46:a3:ec:bf:2c:f3:21:22:2f:c9:d9:
27:2b:9e:5c:d4:6f:43:37:43:d8:f2:54:fb:b0:39:
69:75:18:b7:02:00:4e:6f:73:98:c1:54:6f:b5:09:
b6:08:a4:50:e8:e3:2b:3f:81:cc:e8:09:94:77:96:
ba:9e:fc:81:77:5b:97:b9:3e:1e:9c:b3:04:6e:16:
e2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:1E:4B:FE:75:68:A0:1F:FF:5D:93:17:1B:9B:A9:29:CE:BF:2A:C8
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/dh5L_nVooB__XZMXG5upKc6_Ksg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.53.52.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:f9:7f:5c:d3:d3:0e:fc:28:e6:ab:d0:08:e8:fa:a7:8c:3a:
6b:94:68:b8:96:5f:46:0b:d6:e2:9d:11:55:37:61:44:69:b8:
04:e3:4b:6b:a2:f0:7f:57:a7:24:bb:73:a4:63:56:f7:58:d1:
2e:3b:86:18:d2:00:76:4e:df:55:65:29:41:a3:cc:f2:33:1a:
1a:a2:2a:7d:7e:fd:60:9e:1b:5e:bc:3f:a9:82:5e:11:ad:69:
a6:83:fa:f2:6c:73:48:d4:16:84:89:e3:d2:e2:92:a2:1a:3c:
49:30:4e:fc:29:e3:dc:cb:66:90:7a:47:97:2e:9b:ce:9b:ad:
e9:92:7b:fc:fe:54:27:92:d1:63:2d:c6:3f:ea:37:7a:5b:7f:
53:b9:c6:2f:28:2d:d4:8d:57:36:8a:a4:a2:a9:e7:c8:09:0c:
b2:f1:75:80:3b:07:9a:3d:3a:f4:70:c3:0c:7f:a8:35:2c:44:
9d:ed:8a:22:02:29:cd:a7:d2:53:83:49:93:56:44:6f:30:23:
48:b8:e8:26:30:5e:7c:35:d3:a7:15:27:3e:f4:4f:0d:b5:4b:
37:3e:40:29:7c:27:b2:4f:85:f1:81:5e:43:c5:5f:22:a3:0a:
27:d0:7a:b5:88:02:56:8a:3b:c7:64:20:a8:63:01:2b:82:34:
ec:3c:c7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:10 2024 by rpki-client on console-ams.rpki-client.org