Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/ghTySbq5ooPSkUWIGf_4XKqmsec.roa
File: ghTySbq5ooPSkUWIGf_4XKqmsec.roa (raw, json)
Hash identifier: D3nk6Ng0/or7SMkqs9divRX2+TUIy/JaOOpKAdee94o=
Subject key identifier: 82:14:F2:49:BA:B9:A2:83:D2:91:45:88:19:FF:F8:5C:AA:A6:B1:E7
Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial: 35118D33
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/ghTySbq5ooPSkUWIGf_4XKqmsec.roa
Signing time: Sat 01 Jan 2022 05:58:41 +0000
ROA not before: Sat 01 Jan 2022 05:58:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50673
IP address blocks: 5.56.133.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 890342707 (0x35118d33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Validity
Not Before: Jan 1 05:58:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8214f249bab9a283d291458819fff85caaa6b1e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:47:08:1a:af:e0:40:2d:f5:e5:65:94:ed:d1:
ef:45:31:b6:e1:a4:c3:eb:9e:71:1b:c5:30:eb:13:
87:d4:3a:dc:09:85:41:f9:bc:45:1e:58:72:a5:e2:
30:61:89:c6:90:91:82:d6:6f:57:2a:74:6f:11:99:
a3:d0:1c:78:f3:af:ab:40:68:76:cc:fa:e2:b2:de:
ed:4d:52:94:b3:33:65:b7:c5:04:5a:75:55:43:6a:
be:0a:d4:26:c1:3d:11:f3:cc:a5:96:b5:84:76:58:
5c:43:52:6b:35:36:d4:ea:02:f5:b3:27:cb:d6:f2:
e3:19:fd:7d:91:db:a7:05:10:65:2f:cf:7f:fa:07:
36:0d:1a:85:67:81:6a:ce:2d:a4:e4:53:d7:ae:6a:
4c:81:ce:8a:4d:c3:92:7c:ce:9f:e8:3b:4e:20:9a:
fb:ee:8b:55:0e:e9:ea:e8:09:65:ca:76:04:3c:3d:
69:d0:a4:ca:d7:17:25:56:c5:fb:f7:ad:9d:03:71:
e7:eb:e8:06:ac:f6:8c:1a:9a:ad:af:eb:7c:ff:05:
5d:2c:c0:70:4d:bb:40:63:fe:17:4d:c8:2a:09:c1:
a0:86:26:64:c8:82:b9:01:dc:7e:68:39:4f:f0:4e:
21:7b:a6:4c:3c:e9:11:39:91:4d:b6:ac:94:56:37:
64:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:14:F2:49:BA:B9:A2:83:D2:91:45:88:19:FF:F8:5C:AA:A6:B1:E7
X509v3 Authority Key Identifier:
keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/ghTySbq5ooPSkUWIGf_4XKqmsec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.133.0/24
Signature Algorithm: sha256WithRSAEncryption
28:63:1f:8a:8b:6d:2b:34:e8:e7:ed:65:8c:d6:ea:a0:8d:27:
78:0f:cd:6a:d1:99:51:14:64:e4:ed:c8:33:f4:d1:58:b1:d1:
9e:a2:26:c4:0c:77:a2:ab:fc:2e:26:09:3d:45:4a:61:ac:70:
fe:c4:dc:9b:e7:ab:51:34:50:8f:fb:96:be:0c:ba:1f:97:aa:
65:58:6e:dd:b0:dd:ec:2d:b2:1d:32:3d:16:22:76:35:ca:e4:
c8:e8:de:44:57:01:7e:e0:20:ee:ff:c5:7f:6d:82:eb:01:6b:
3f:56:c6:c3:41:1b:3a:f0:0b:dc:cd:c7:eb:84:23:b1:f0:eb:
b8:50:c5:99:41:aa:61:fb:28:14:39:e9:09:88:3b:04:ce:63:
98:83:9b:ad:60:58:9a:bd:85:19:cc:8f:9a:3f:ba:7a:fc:c4:
c2:7d:91:eb:d2:2e:ee:27:ad:28:3f:af:71:7d:f6:c1:b1:e7:
30:d1:cb:84:9c:b2:3e:e9:34:c7:72:c3:9b:60:19:64:b1:2a:
ff:84:30:f0:c6:ec:14:c4:e9:98:73:99:b9:ea:50:1a:64:2c:
7c:47:70:8f:5d:1e:c7:51:0e:8f:c1:b2:0c:bc:57:0f:92:08:
97:58:61:9f:b8:5f:50:da:0a:11:ed:41:a9:ba:22:0f:e1:10:
0a:d2:98:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:34 2023 by rpki-client on console-ams.rpki-client.org