Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/sAUhozJyWvfnQwffERzFQupzw3c.roa
File: sAUhozJyWvfnQwffERzFQupzw3c.roa (raw, json)
Hash identifier: 4xWpLP8FzOgD5yCI5OJ8Ur0b0Llzl8pSdBBoVZmLI1I=
Subject key identifier: B0:05:21:A3:32:72:5A:F7:E7:43:07:DF:11:1C:C5:42:EA:73:C3:77
Certificate issuer: /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial: 0184F7F1A8DB301C96724FE46A0E9DA91F5B
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/sAUhozJyWvfnQwffERzFQupzw3c.roa
Signing time: Fri 09 Dec 2022 17:32:00 +0000
ROA not before: Fri 09 Dec 2022 17:32:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 397630
IP address blocks: 5.180.152.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f7:f1:a8:db:30:1c:96:72:4f:e4:6a:0e:9d:a9:1f:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Validity
Not Before: Dec 9 17:32:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b00521a332725af7e74307df111cc542ea73c377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:81:7e:0d:54:b8:fc:3f:b7:54:95:65:61:8a:
2d:59:94:a0:09:c9:cf:c2:19:23:64:21:60:92:d6:
7c:30:3f:d1:02:04:db:a7:81:d4:1a:0f:76:b4:42:
87:57:3a:24:22:51:f2:2d:7d:e7:73:38:14:c2:62:
07:37:8f:b1:0b:3a:8b:fa:a5:47:27:43:a9:a2:64:
38:87:5f:c0:b5:ea:46:c9:87:d8:42:8c:d4:79:bd:
b6:b7:2b:02:2b:63:16:25:d2:21:6d:09:ff:24:cb:
68:bd:4b:ac:53:9c:98:c8:a9:3c:ee:5a:80:7e:9e:
6e:7c:4a:d1:7f:5f:c2:d6:41:da:f5:51:6b:a2:13:
e9:a5:0c:80:11:46:20:78:ef:a6:85:b6:7a:c4:8c:
ba:cb:d8:7d:17:fa:20:99:12:c1:db:2c:7f:e9:75:
42:87:d8:e9:d5:82:33:d3:df:f2:49:58:9a:85:26:
8f:74:67:3b:08:0d:1a:4f:56:d6:a1:63:f7:24:42:
bd:2e:75:6f:88:0d:b3:52:71:d7:bd:64:bd:8b:47:
a1:89:37:17:5a:14:8e:cd:af:f0:dc:11:fa:23:b1:
a6:22:77:ad:12:33:b5:7c:bb:47:c0:96:9f:16:d6:
8c:cc:fb:9d:a4:5d:b8:e4:64:a3:d3:fb:f3:a3:5d:
dc:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:05:21:A3:32:72:5A:F7:E7:43:07:DF:11:1C:C5:42:EA:73:C3:77
X509v3 Authority Key Identifier:
keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/sAUhozJyWvfnQwffERzFQupzw3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.152.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:5e:a7:cb:a1:33:8a:06:b5:07:fc:9b:dc:f7:95:c2:2e:55:
ad:36:a6:12:e5:9e:aa:64:c4:66:75:bd:fd:63:17:b0:82:b1:
00:b5:1b:d9:5d:f5:92:ac:5b:1c:5f:e5:68:cb:ed:0e:7b:02:
0b:06:2c:63:94:e9:de:af:4a:78:43:e6:4f:1c:09:70:9f:43:
a1:69:76:65:e1:54:1d:13:4d:3b:29:97:1f:46:03:0e:6a:e8:
65:be:3c:9d:45:55:bf:47:ee:91:08:dc:30:20:00:36:9a:b9:
1f:c6:cf:1b:80:89:c8:31:a5:8a:05:25:27:4d:10:78:7c:68:
2d:5e:c6:91:65:cf:08:cb:77:28:78:c8:b1:ff:31:99:e7:ff:
66:6d:ae:3e:91:d3:28:d5:63:ff:13:f4:70:44:11:f4:30:58:
eb:eb:0d:58:cd:f6:e8:d8:f7:e5:50:43:d0:ed:54:2c:b2:79:
86:19:01:4f:91:a4:63:af:cc:6e:9a:c5:fd:ea:8f:57:0e:d7:
fc:85:01:f4:86:b3:3a:c6:3b:cf:1f:95:55:bc:90:c6:7d:5f:
73:42:c0:2e:74:51:27:68:e4:9a:08:59:91:17:51:04:97:bf:
a7:a7:de:38:dc:c7:ff:44:56:a2:e5:8c:13:34:6d:9f:b1:5c:
fe:f2:35:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:15 2024 by rpki-client on console-fra.rpki-client.org