Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/FWsUBRkHgNSv5QnOF_r8ux456u4.roa
File: FWsUBRkHgNSv5QnOF_r8ux456u4.roa (raw, json)
Hash identifier: jv3G2Awfe/L1c6gKgHcZYzWIQUIhWYv3tq0ew1pB+L0=
Subject key identifier: 15:6B:14:05:19:07:80:D4:AF:E5:09:CE:17:FA:FC:BB:1E:39:EA:EE
Certificate issuer: /CN=99ce77f7d916513b84914849950fe43f55694fda
Certificate serial: 03B5E3B9
Authority key identifier: 99:CE:77:F7:D9:16:51:3B:84:91:48:49:95:0F:E4:3F:55:69:4F:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/FWsUBRkHgNSv5QnOF_r8ux456u4.roa
Signing time: Sat 01 Jan 2022 14:07:27 +0000
ROA not before: Sat 01 Jan 2022 14:07:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208423
IP address blocks: 5.102.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62251961 (0x3b5e3b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ce77f7d916513b84914849950fe43f55694fda
Validity
Not Before: Jan 1 14:07:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=156b1405190780d4afe509ce17fafcbb1e39eaee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8d:b9:62:11:d8:5a:cd:54:c1:2a:67:07:fe:
55:03:4b:de:db:3a:b0:b3:ea:8a:f9:87:d9:1b:69:
a3:43:8f:5a:fd:1b:4c:a3:c7:3b:be:1a:ce:f6:6a:
c9:1a:bb:af:b9:39:55:1b:fd:ac:ac:a4:7c:f5:99:
dc:5d:36:8c:16:e2:40:8b:a2:97:4a:35:a6:8d:5d:
3c:9f:93:f6:7b:dc:27:df:f4:80:35:31:90:73:16:
30:ce:f8:79:3d:ce:0d:3b:97:e9:f8:5a:45:63:64:
1e:1f:4e:05:89:f1:a8:e3:ad:90:92:55:e0:f7:f4:
24:ff:8b:6c:23:7d:e5:fc:68:67:a6:4f:fa:91:eb:
c2:6f:21:07:1b:62:c4:ce:ad:4f:48:53:4e:45:44:
33:6b:18:24:c0:ad:a4:ae:e9:8a:30:23:bc:45:54:
66:7f:50:5e:23:18:b9:41:9a:da:f4:ed:33:15:61:
0c:8a:de:31:bf:f6:a6:ed:f4:ad:0f:eb:a3:9f:81:
38:28:b8:1b:aa:04:20:b9:0b:9f:09:d9:7b:8f:4d:
86:4b:70:d6:ea:4f:c3:5e:f2:a2:29:06:e4:96:72:
e6:5b:68:1e:8c:c0:01:1b:ba:61:67:ec:dd:43:66:
99:87:16:41:77:59:da:c1:e5:00:54:16:cd:a0:67:
80:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:6B:14:05:19:07:80:D4:AF:E5:09:CE:17:FA:FC:BB:1E:39:EA:EE
X509v3 Authority Key Identifier:
keyid:99:CE:77:F7:D9:16:51:3B:84:91:48:49:95:0F:E4:3F:55:69:4F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/FWsUBRkHgNSv5QnOF_r8ux456u4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.46.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:b2:94:63:5b:f2:1a:b4:b1:76:53:9a:7f:e1:b5:bf:0f:a1:
2a:58:07:70:a7:af:56:27:d0:75:02:4e:95:a5:7d:be:07:b2:
60:af:8e:9a:ec:88:de:b6:27:4a:c1:cd:4f:a1:57:78:8f:78:
3e:bb:20:ac:48:83:82:92:91:c6:6c:d9:dc:08:8f:e7:5d:8e:
e8:30:e9:5e:2d:20:59:c7:65:80:8e:79:6c:5b:e0:47:3a:34:
cb:f6:f8:3c:bb:c9:63:19:c0:d5:30:f9:d4:97:16:2e:a2:e8:
12:80:b9:f6:7e:f6:f9:e8:5e:80:c4:23:63:45:d1:d9:4c:1f:
ae:88:57:6e:76:1c:5f:4d:84:f4:6a:dc:61:dc:ff:04:6e:69:
5e:aa:b5:d8:7e:d6:ab:fc:4d:17:00:df:3b:4a:58:56:ed:c9:
1f:ab:e4:0f:45:04:27:d3:a8:42:40:b7:a5:ba:bf:55:00:09:
01:ca:63:20:17:30:fa:8b:88:00:0c:4c:8a:25:01:ce:bd:23:
2b:7c:96:9b:4a:98:80:f5:c6:94:cb:28:d4:4c:08:c0:2e:3d:
91:69:f9:ca:b7:1a:85:42:1c:ae:0f:07:78:b4:54:7d:cb:91:
31:6f:19:57:c0:c2:22:23:a4:4d:bf:5f:8b:e3:41:e8:06:1f:
25:91:d0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:04 2024 by rpki-client on console-ams.rpki-client.org