Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/Mez3jRuTLaBaihiKRIYieN0dvEw.roa
File: Mez3jRuTLaBaihiKRIYieN0dvEw.roa (raw, json)
Hash identifier: fsZt48WpAV7yVvEqXIRHQ5M+SeC32Z7k6GzcdVPVH8w=
Subject key identifier: 31:EC:F7:8D:1B:93:2D:A0:5A:8A:18:8A:44:86:22:78:DD:1D:BC:4C
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 01853AADA09C97BA288456B84628CA99A0B8
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/Mez3jRuTLaBaihiKRIYieN0dvEw.roa
Signing time: Thu 22 Dec 2022 16:32:15 +0000
ROA not before: Thu 22 Dec 2022 16:32:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200482
IP address blocks: 5.180.194.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:3a:ad:a0:9c:97:ba:28:84:56:b8:46:28:ca:99:a0:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Dec 22 16:32:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=31ecf78d1b932da05a8a188a44862278dd1dbc4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:39:a6:d2:15:80:53:c6:df:de:47:26:9b:5a:
7e:52:cd:43:7c:11:d3:a5:cc:c5:32:52:c0:8f:f1:
01:1c:82:20:63:08:be:1f:8f:49:b0:e0:1c:da:a6:
9e:e0:fb:6d:08:a5:04:68:c9:04:d4:64:b6:11:36:
47:0e:96:ff:ae:08:56:36:2d:d9:5e:02:dc:a5:de:
bb:3c:3c:d2:6b:a1:03:8c:a8:a3:44:68:af:5f:f1:
0d:e9:27:8d:b3:44:19:68:80:07:75:f7:e2:ba:fc:
78:d6:14:ee:af:6f:19:fe:af:e8:a9:34:de:44:42:
b6:7d:7e:ae:07:9d:36:d0:81:ac:25:8d:1f:df:4c:
f1:9d:d0:64:e9:0d:43:f7:38:4c:31:e6:db:5c:4f:
82:91:8c:f5:78:6f:3f:ac:0d:ca:af:41:ce:41:78:
8d:91:73:b3:d4:4d:54:f7:d9:53:03:75:0b:80:86:
66:ab:d5:a5:9d:77:e6:f3:82:70:94:a1:d6:45:f9:
35:e7:ef:b3:5d:06:b4:d4:6d:e9:54:45:60:65:a7:
f1:97:01:7a:3f:e4:81:8d:c4:0a:72:95:04:e1:f5:
e0:2d:67:50:16:42:ab:70:a1:53:47:51:29:7d:0f:
a8:3d:0c:9c:e8:ce:89:c2:2c:aa:c5:e1:f2:2c:60:
a5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:EC:F7:8D:1B:93:2D:A0:5A:8A:18:8A:44:86:22:78:DD:1D:BC:4C
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/Mez3jRuTLaBaihiKRIYieN0dvEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.194.0/23
Signature Algorithm: sha256WithRSAEncryption
81:3d:25:02:2c:95:f4:a5:23:7d:fa:95:37:f8:8a:ce:3a:54:
e2:d5:58:f8:51:ec:b4:11:7c:7d:de:57:5a:8c:89:b3:17:8d:
1d:11:97:be:9b:f2:5d:8f:8e:4e:78:37:15:9d:8c:6a:94:02:
c0:83:a6:fe:0a:ee:80:0b:1e:9f:80:da:b5:10:38:8c:10:84:
e8:ed:14:cd:cf:5f:8f:21:0c:5a:4f:43:7b:79:b0:f9:a7:96:
ce:c1:29:93:54:9d:31:63:2c:71:25:2b:29:0b:9d:1c:24:34:
b7:a3:5b:b1:d5:d0:93:77:b9:1d:4b:cc:68:11:88:b3:09:ed:
6f:32:51:c4:23:62:a4:9e:c9:f2:40:e9:da:db:a6:1d:cf:49:
2a:a7:9b:bd:d7:e0:17:86:83:ff:cb:28:d7:99:d4:b9:ea:ab:
88:b5:d1:52:04:08:fb:cc:8f:e8:6c:78:74:13:8b:aa:2e:05:
62:fe:70:1a:65:f0:3c:ed:fe:92:95:33:60:f4:a5:c7:c1:94:
17:36:cf:fb:fb:a4:89:1f:68:55:fb:dc:d8:b8:50:a3:4a:92:
d7:09:f7:fb:87:3a:6d:de:0b:2d:51:13:dc:97:b8:6b:5d:bc:
44:22:3d:aa:a9:3a:8b:bc:32:65:c6:c5:8f:fd:0f:3d:60:75:
ba:98:e5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:31 2024 by rpki-client on console-ams.rpki-client.org