Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/3O0t_Z1LxfLK7D0KltdJ_3ah7HI.roa
File: 3O0t_Z1LxfLK7D0KltdJ_3ah7HI.roa (raw, json)
Hash identifier: m/Zpu0MNcFv8eCwTbpZJVVYkam1g4MAKV2N2UJ2TDo8=
Subject key identifier: DC:ED:2D:FD:9D:4B:C5:F2:CA:EC:3D:0A:96:D7:49:FF:76:A1:EC:72
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01849E7DCFD29B93B1ED703E8BAC72C0A8C0
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/3O0t_Z1LxfLK7D0KltdJ_3ah7HI.roa
Signing time: Tue 22 Nov 2022 08:39:16 +0000
ROA not before: Tue 22 Nov 2022 08:39:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 5.182.113.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9e:7d:cf:d2:9b:93:b1:ed:70:3e:8b:ac:72:c0:a8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Nov 22 08:39:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dced2dfd9d4bc5f2caec3d0a96d749ff76a1ec72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d9:57:eb:29:39:36:20:b6:f0:69:a3:da:10:
13:85:49:8b:65:66:bb:d1:34:6d:64:7f:c3:8f:7d:
db:f6:a9:c9:56:73:78:fa:f9:9e:30:95:28:8c:1c:
01:21:cf:37:9f:a1:89:e1:be:a4:19:97:2d:a5:2f:
13:ab:a2:36:9b:ff:fb:fa:8a:0c:01:1f:cf:ff:5f:
4d:ab:bb:00:63:e2:c6:62:dd:f7:8b:8c:19:83:58:
31:8b:2d:86:9f:93:9c:5c:00:a2:06:23:aa:a8:03:
19:57:05:c0:fb:bc:54:0a:8c:8f:45:6a:06:aa:02:
25:d3:0f:d6:ef:96:71:cf:65:b3:30:a8:49:d2:4e:
45:f2:4d:65:50:bb:0d:ee:f6:2c:9e:2c:35:d0:f1:
17:ea:ac:58:b6:01:a7:98:53:27:f2:7a:54:2e:be:
e7:82:14:a2:0f:0a:9e:4a:25:57:8c:af:41:41:a9:
ab:6e:ba:34:5e:51:8d:6e:a5:11:72:2f:c1:b2:1f:
9f:96:4d:c4:a7:08:13:96:26:c8:a5:aa:ea:af:38:
00:b9:de:31:a4:55:3a:c9:69:fb:97:d2:71:df:01:
c0:da:db:86:e5:6a:12:9f:a0:62:40:48:c1:8b:5f:
41:6e:e4:a1:f2:95:9c:01:a6:14:54:a5:63:36:93:
8b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:ED:2D:FD:9D:4B:C5:F2:CA:EC:3D:0A:96:D7:49:FF:76:A1:EC:72
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/3O0t_Z1LxfLK7D0KltdJ_3ah7HI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.113.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:c9:ee:fc:6e:dc:ff:c5:19:53:c1:41:a6:d9:ae:25:46:c7:
a1:7b:80:6f:82:73:59:88:4b:05:f6:3d:39:96:13:ff:8c:72:
ba:86:da:19:41:b8:6a:1b:a9:8f:41:b2:11:27:c8:ab:52:2b:
1e:77:ea:70:a3:84:c0:75:0a:ee:55:56:c1:e1:eb:74:8e:ea:
d4:47:71:fc:96:a7:f3:eb:42:61:44:7c:c3:77:3a:9e:e4:50:
93:e5:d4:f2:96:a0:ea:45:5d:c1:a2:a4:58:d5:ba:71:f3:dd:
cb:9c:73:2c:05:05:e8:a7:43:3d:4c:ae:ea:03:e0:02:71:ad:
50:52:2b:49:16:96:4f:7c:22:61:fb:89:20:26:7c:70:77:80:
19:5e:8d:06:c9:08:0c:5e:e5:9c:19:f6:8d:9c:d6:2b:ef:26:
c1:62:21:99:b2:91:5c:be:63:a3:08:a8:cc:43:13:ff:b5:cd:
46:0f:f0:32:b6:62:b0:1f:46:fe:4c:8e:e5:2b:f0:63:ec:44:
d4:04:a3:ea:bc:b6:f5:ed:bc:4e:26:87:1a:56:40:a4:ca:a1:
4f:02:5e:c8:b3:a8:83:09:45:36:7e:94:9e:b0:15:1d:2c:f0:
f6:e0:3f:56:4d:aa:c7:69:96:52:fe:fb:a6:90:16:47:de:b5:
94:07:cc:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:54 2024 by rpki-client on console-ams.rpki-client.org