Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/PSmJ9WeL3Toqh6PGPerrBZstwgk.roa
File: PSmJ9WeL3Toqh6PGPerrBZstwgk.roa (raw, json)
Hash identifier: L9jiajo3gLpkVoC6y0PenoAGqtjHQlO5ofbW+f5kZKs=
Subject key identifier: 3D:29:89:F5:67:8B:DD:3A:2A:87:A3:C6:3D:EA:EB:05:9B:2D:C2:09
Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial: 12A56E89
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/PSmJ9WeL3Toqh6PGPerrBZstwgk.roa
Signing time: Sun 09 Jan 2022 12:43:53 +0000
ROA not before: Sun 09 Jan 2022 12:43:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39364
IP address blocks: 5.202.44.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 312831625 (0x12a56e89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Validity
Not Before: Jan 9 12:43:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d2989f5678bdd3a2a87a3c63deaeb059b2dc209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:92:88:43:09:09:59:b6:56:c4:73:d2:f5:a0:
3f:3a:99:db:e6:6d:ee:10:8b:97:43:e1:4c:00:1b:
3a:d3:a6:3e:2e:58:9f:cb:37:75:c3:3b:5a:46:af:
89:7e:24:8b:37:21:2f:a9:06:63:57:56:15:22:97:
47:94:3c:1a:e6:57:90:23:eb:84:59:e3:1d:ed:cb:
2c:b9:bb:b3:20:0d:c6:03:ee:07:71:7a:25:22:53:
4c:df:80:3b:3e:30:19:fb:0b:9d:e0:33:6d:a5:7c:
de:00:2d:b0:04:92:6e:16:74:bc:9f:84:b1:2c:c5:
12:29:cb:32:25:b9:1f:28:2d:a1:41:14:33:e0:ff:
26:51:9d:10:96:29:9c:de:db:dc:b5:bf:a3:e8:e7:
65:cb:d6:e9:5e:b6:0d:0a:a1:50:48:20:fa:30:8c:
9c:4c:e8:c5:48:89:90:bd:10:1f:43:6a:87:07:0f:
ed:a0:4a:33:15:eb:2b:ca:c1:8a:a5:29:07:ec:c7:
ad:4f:9f:3e:be:d9:fa:74:6d:1b:e7:08:ac:7a:5b:
50:c3:fd:dc:9e:03:25:03:bd:1c:9f:d4:d9:e9:7f:
a0:40:68:fe:6e:57:77:b4:e1:3e:9c:75:e6:52:33:
c7:49:0e:47:31:79:22:06:dd:49:55:6b:05:e2:6f:
4b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:29:89:F5:67:8B:DD:3A:2A:87:A3:C6:3D:EA:EB:05:9B:2D:C2:09
X509v3 Authority Key Identifier:
keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/PSmJ9WeL3Toqh6PGPerrBZstwgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.202.44.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:68:d4:ed:eb:6b:e7:72:39:6f:23:77:bd:2a:f2:46:3a:f0:
cc:d1:e5:d2:12:1d:de:58:82:b4:f7:84:88:6d:57:7e:f7:88:
5e:a3:df:eb:41:c7:93:5c:23:a0:09:07:46:8d:d4:ec:d8:0c:
74:9f:92:08:a0:a0:36:0e:f6:bf:e9:9c:41:7e:09:d9:d7:25:
21:17:fe:8f:a5:37:03:ac:c9:60:92:dd:8a:fe:e7:8f:4d:08:
4e:e9:7f:82:e3:9d:ef:6b:87:58:fd:a4:ea:4c:78:cc:2e:33:
cd:01:12:93:28:af:1c:da:1e:b8:c5:9e:bc:1f:e7:04:a8:87:
20:40:4b:93:4d:22:08:ec:da:3b:9b:ba:ce:63:dc:bf:7b:22:
9d:6d:d3:f1:fd:91:69:61:10:3b:3f:a4:ba:cc:e9:21:64:25:
c8:67:48:a2:19:79:1b:a6:1a:d7:2b:f1:f4:fe:53:0e:fd:ee:
65:c8:62:15:71:81:71:c7:b1:6d:2b:34:c7:6c:b5:c7:e6:6c:
d1:cd:98:ab:d2:06:a1:5f:23:52:08:0c:f9:2b:f0:b8:e0:18:
83:7f:8f:b5:65:49:d7:f4:fa:aa:67:f2:ae:65:e4:8e:97:af:
dd:27:b8:50:e8:46:fc:64:7c:a4:bd:bb:d5:c1:01:ea:c8:87:
e3:89:b0:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:33 2024 by rpki-client on console-ams.rpki-client.org