Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/8ciHJPlA3Q68HJo1zFMkr9bpwEQ.roa
File: 8ciHJPlA3Q68HJo1zFMkr9bpwEQ.roa (raw, json)
Hash identifier: d7xQB+kK580RpDhJyBzapgGj8o5fAC1n3T4PiEFnWLg=
Subject key identifier: F1:C8:87:24:F9:40:DD:0E:BC:1C:9A:35:CC:53:24:AF:D6:E9:C0:44
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 11CDA0EA
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/8ciHJPlA3Q68HJo1zFMkr9bpwEQ.roa
Signing time: Sat 01 Jan 2022 15:05:44 +0000
ROA not before: Sat 01 Jan 2022 15:05:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211489
IP address blocks: 5.104.175.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 298688746 (0x11cda0ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 1 15:05:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f1c88724f940dd0ebc1c9a35cc5324afd6e9c044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9d:07:65:58:6d:26:88:93:98:bc:cf:a4:2f:
cb:0b:89:36:05:7f:f1:96:4d:6e:65:1e:df:23:fd:
63:a2:1a:a2:c9:b6:7c:1a:78:47:89:a0:5b:61:bf:
8b:9a:23:f5:bc:56:1d:75:2f:62:23:88:0e:39:31:
93:dc:11:d1:db:43:36:20:21:1a:3d:37:06:00:8e:
4b:be:8e:be:bb:f9:17:3c:39:3d:75:67:d4:3e:ae:
a1:fb:1e:c7:7c:d6:06:18:dc:79:a7:08:73:5a:64:
fb:65:19:ca:4e:96:04:5b:c3:b2:16:d2:58:97:14:
3b:8e:41:d7:42:eb:b8:4b:f7:34:57:a0:fa:af:92:
69:ea:57:1e:73:ac:16:1d:46:be:87:57:f8:46:57:
b1:83:2b:41:4e:df:9a:33:e1:65:0c:f8:f4:af:39:
7a:0c:8f:d1:a7:d9:eb:7b:50:cb:ce:71:4e:8e:32:
db:69:cb:3b:8d:67:dd:3e:38:3d:91:8d:ae:89:8f:
b3:42:5d:1c:c9:56:c5:32:1a:b6:6a:c7:80:e8:3b:
7b:2b:12:7e:e0:6e:43:d6:e7:78:68:d6:5d:2e:ef:
dd:c4:d9:3b:7d:26:d3:1e:3c:f8:ef:6f:76:72:a5:
de:99:f0:a6:af:03:79:69:71:47:56:b0:b7:f5:a6:
20:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C8:87:24:F9:40:DD:0E:BC:1C:9A:35:CC:53:24:AF:D6:E9:C0:44
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/8ciHJPlA3Q68HJo1zFMkr9bpwEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.175.0/24
Signature Algorithm: sha256WithRSAEncryption
68:5f:7b:93:9c:ff:61:29:73:12:1c:34:88:0a:98:d6:17:28:
00:5c:aa:c9:ed:d5:6f:70:ba:08:2c:a0:be:3d:08:12:75:f4:
0d:05:57:d9:36:f8:b8:84:e9:56:be:a1:0c:da:9e:d9:cb:b7:
a3:86:d8:13:df:3a:da:f6:32:48:42:0d:e0:d3:2f:ee:a1:e2:
6e:77:85:fc:0f:5e:96:96:37:ff:da:6e:38:d1:92:f0:d6:db:
1c:39:e6:14:4d:cc:32:1b:b8:32:b4:1e:ef:c9:c8:5a:48:67:
84:46:30:35:a0:49:4a:2a:f7:7a:8d:1e:ea:23:53:00:5a:67:
0c:df:22:56:cf:87:58:87:a1:ae:7c:88:f2:b3:ac:e2:d9:94:
f6:00:f2:02:3a:41:98:01:2e:c3:35:84:16:15:d0:2f:1f:5d:
a6:ee:a3:be:21:88:65:2c:a1:38:a3:e6:8e:e9:e2:4a:65:44:
7d:10:74:d8:a2:40:99:aa:99:dd:b9:51:ad:e2:13:f2:f7:41:
15:99:a6:72:89:a4:8b:b8:58:33:ca:78:57:af:03:34:95:60:
d9:b6:ef:cc:97:7a:a3:aa:3b:72:9c:36:c7:7b:a9:b5:9a:51:
4c:bc:cd:c7:f9:02:3a:d3:87:15:1c:c8:8e:6f:0f:45:05:b7:
0e:c6:2d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:14 2024 by rpki-client on console-fra.rpki-client.org