Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/4e95d7-7f76-454d-aa47-8389f43ed6f6/1/wVejWSOKTnWNmZMYOxKPe2_Mb8g.roa
File: wVejWSOKTnWNmZMYOxKPe2_Mb8g.roa (raw, json)
Hash identifier: URzHdrofVi0VGhssufN0qm9OSUPTLBIlmWFF+3NO7w4=
Subject key identifier: C1:57:A3:59:23:8A:4E:75:8D:99:93:18:3B:12:8F:7B:6F:CC:6F:C8
Certificate issuer: /CN=8c89553041b0d35bf82ffb4a7ba7dea486193e4e
Certificate serial: 06006963
Authority key identifier: 8C:89:55:30:41:B0:D3:5B:F8:2F:FB:4A:7B:A7:DE:A4:86:19:3E:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jIlVMEGw01v4L_tKe6fepIYZPk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/4e95d7-7f76-454d-aa47-8389f43ed6f6/1/wVejWSOKTnWNmZMYOxKPe2_Mb8g.roa
Signing time: Sat 01 Jan 2022 05:01:06 +0000
ROA not before: Sat 01 Jan 2022 05:01:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43915
IP address blocks: 5.181.104.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100690275 (0x6006963)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c89553041b0d35bf82ffb4a7ba7dea486193e4e
Validity
Not Before: Jan 1 05:01:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c157a359238a4e758d9993183b128f7b6fcc6fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:fc:2b:9e:3d:78:6d:6c:82:d4:20:8b:fe:20:
64:e8:e8:99:61:2c:68:ba:eb:11:b9:ea:94:48:14:
ae:bf:a5:3b:ab:35:cb:08:c0:ab:d1:ef:76:3d:c5:
fb:83:5c:04:2c:15:67:de:40:87:e6:4d:f8:96:30:
41:bf:0b:9a:e3:ce:c6:95:a8:27:d2:5d:1c:a1:b5:
d6:b4:dc:38:a4:96:f2:eb:f7:8a:69:0f:69:c0:b4:
fb:ee:ba:bf:1d:49:48:a9:3c:81:eb:e8:da:69:f2:
d0:3a:90:10:92:47:79:a8:8a:b2:29:b1:46:73:47:
4f:d2:b7:31:c2:ff:74:73:03:8f:d1:c5:00:c7:4f:
ef:23:aa:41:22:37:2e:53:68:6b:21:61:d9:14:f1:
f9:9e:ac:4a:fe:46:fc:21:14:fc:5e:9f:e0:0c:ef:
04:8a:c2:1b:0e:dd:df:27:5e:bb:92:f2:11:32:89:
15:f5:a5:aa:ad:37:0c:9f:f3:d4:bb:3a:bd:17:89:
e4:7c:62:fe:f9:72:c7:99:9f:0f:70:67:b2:88:cc:
23:58:ec:b8:35:92:2f:ed:7c:f0:44:76:4c:96:86:
c5:0e:dd:15:8b:27:08:68:25:b4:7e:78:a3:d9:7a:
c6:f2:03:ed:64:c7:8a:94:47:10:2d:50:73:cc:44:
5b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:57:A3:59:23:8A:4E:75:8D:99:93:18:3B:12:8F:7B:6F:CC:6F:C8
X509v3 Authority Key Identifier:
keyid:8C:89:55:30:41:B0:D3:5B:F8:2F:FB:4A:7B:A7:DE:A4:86:19:3E:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIlVMEGw01v4L_tKe6fepIYZPk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/4e95d7-7f76-454d-aa47-8389f43ed6f6/1/wVejWSOKTnWNmZMYOxKPe2_Mb8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/4e95d7-7f76-454d-aa47-8389f43ed6f6/1/jIlVMEGw01v4L_tKe6fepIYZPk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.104.0/22
Signature Algorithm: sha256WithRSAEncryption
63:86:6d:63:71:8d:c6:16:29:d6:02:e8:92:91:1e:d8:11:81:
c2:b4:88:a9:c7:40:38:05:0f:a4:b5:2b:32:7b:51:78:d1:00:
e0:f2:04:b3:71:3d:f7:6b:b1:f0:39:8c:b2:c1:c4:29:17:ac:
63:fc:83:75:8c:50:8f:45:2a:fc:74:d8:93:47:28:06:73:b7:
7f:73:5a:59:55:9d:03:ec:97:17:a8:0e:70:ce:c2:ae:65:a8:
f7:61:55:ea:d3:5f:10:ec:10:96:03:42:79:b1:99:82:94:29:
e0:47:b9:ff:a8:66:71:d3:a8:88:d1:d2:61:2c:6d:30:6f:2b:
ac:77:1c:2e:d5:c8:2f:1a:eb:70:0b:1e:d2:5b:d7:de:a7:96:
61:c2:1b:25:d9:18:85:35:08:dc:83:2c:a7:89:d2:7f:fd:ae:
0b:26:9d:2e:3b:8d:8b:d7:4b:66:a8:cb:40:92:0a:e0:8f:b6:
51:13:f7:99:68:bd:76:85:9f:fc:58:7f:43:2b:16:79:d1:4c:
c9:95:2a:be:fb:fa:cb:84:9a:b7:80:cf:db:22:21:1a:87:05:
9f:3d:29:97:30:11:29:2f:26:ee:0a:62:9d:1c:1b:a6:2a:47:
c0:a2:e5:39:b4:32:f9:53:e9:2a:f8:9a:7b:1f:06:59:22:1e:
63:09:fc:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:27 2024 by rpki-client on console-ams.rpki-client.org