Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yvbNl12mQLsPrk5hxMUTZRZSBOQ.roa
File: yvbNl12mQLsPrk5hxMUTZRZSBOQ.roa (raw, json)
Hash identifier: NI/jeZcldbNv/OUd3bj4IObOM2JVy/Q2eX1a9m3Iv3M=
Subject key identifier: CA:F6:CD:97:5D:A6:40:BB:0F:AE:4E:61:C4:C5:13:65:16:52:04:E4
Certificate issuer: /CN=c933481d3fa48710dcb973fdcd29340dedb6229a
Certificate serial: 096F35BF
Authority key identifier: C9:33:48:1D:3F:A4:87:10:DC:B9:73:FD:CD:29:34:0D:ED:B6:22:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yvbNl12mQLsPrk5hxMUTZRZSBOQ.roa
Signing time: Sat 01 Jan 2022 10:04:05 +0000
ROA not before: Sat 01 Jan 2022 10:04:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33182
IP address blocks: 5.226.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158283199 (0x96f35bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c933481d3fa48710dcb973fdcd29340dedb6229a
Validity
Not Before: Jan 1 10:04:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=caf6cd975da640bb0fae4e61c4c51365165204e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:62:ff:61:c3:6d:76:17:dc:71:e7:e7:91:54:
2b:e7:1b:6c:fb:7e:0b:f1:24:56:9e:42:f0:fa:28:
20:e1:d2:c4:eb:8c:d3:fa:09:db:a2:74:e6:51:21:
33:8d:ec:0b:00:7b:14:09:24:eb:ee:b0:72:0b:69:
3d:c9:f5:56:41:4a:5a:b3:8d:cd:04:14:aa:38:73:
7d:b5:1a:98:64:f3:fa:20:67:90:9c:72:40:78:0b:
48:d4:cf:71:4a:3d:3e:6e:a1:8e:60:ef:fc:44:10:
44:c8:ba:14:e4:98:97:eb:54:89:56:e5:c8:04:a2:
bc:74:cd:f2:f6:ac:12:b6:86:40:08:fb:61:61:10:
b7:53:fd:6f:71:16:84:52:0a:49:d6:6c:bf:9b:ac:
49:6b:7d:1c:4e:ed:a6:46:62:47:06:d3:62:f0:c9:
a9:47:66:4a:e8:91:ec:eb:fd:f9:9a:5a:ef:b6:bb:
1b:72:6a:62:ab:91:2a:c4:5a:75:d5:a0:c6:8a:d4:
21:80:01:cd:46:8f:8e:cd:08:e2:ca:a6:9a:b1:1a:
96:49:0d:be:7d:04:65:fc:8c:eb:87:b0:ad:51:05:
24:c3:1c:ce:b3:9a:17:d7:e6:fc:87:a2:27:32:60:
d6:86:49:eb:5e:0d:46:31:1e:0a:4a:67:93:ca:e8:
a4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F6:CD:97:5D:A6:40:BB:0F:AE:4E:61:C4:C5:13:65:16:52:04:E4
X509v3 Authority Key Identifier:
keyid:C9:33:48:1D:3F:A4:87:10:DC:B9:73:FD:CD:29:34:0D:ED:B6:22:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yvbNl12mQLsPrk5hxMUTZRZSBOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.173.0/24
Signature Algorithm: sha256WithRSAEncryption
15:cb:e8:f7:a3:46:c3:6e:eb:6b:ca:da:70:66:c7:ac:3c:17:
1e:c8:fe:5b:0f:12:d7:9d:da:dd:e6:78:29:73:a3:3e:36:8b:
5f:5e:37:41:ea:73:2a:78:f6:5a:7a:f9:39:45:38:a3:15:94:
81:3f:65:90:09:da:8f:7e:06:a5:e3:88:0e:df:bc:f4:be:61:
b8:da:00:06:43:2f:bc:30:b4:71:c3:ae:cb:a8:1f:3a:1d:78:
a2:36:5a:95:9e:35:3b:6c:e1:44:27:1e:18:97:c7:c7:65:c3:
9e:04:a4:1a:9b:0f:01:85:9d:d4:30:09:01:33:6d:0a:06:58:
07:46:df:77:e0:aa:02:03:ee:5d:a7:56:c2:a0:5e:b1:6d:22:
1f:21:0d:b6:48:6b:e8:28:c5:4a:40:f3:0e:c8:7a:c3:72:7a:
a9:a1:6f:c5:92:70:bf:bd:00:d1:31:2a:9a:8d:a0:92:4b:58:
69:14:c9:2f:59:b8:35:0e:88:de:4f:6c:6c:27:a7:4f:58:78:
e2:da:ee:98:b0:45:c5:6b:23:00:04:d2:63:89:b8:1e:99:bc:
0c:be:4b:96:f4:83:8b:2b:2e:aa:eb:1c:d3:24:2c:43:14:b8:
a0:89:41:14:f5:4f:c9:d8:aa:41:e6:74:93:09:93:84:27:66:
a3:55:10:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:00 2024 by rpki-client on console-ams.rpki-client.org