Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/7Z4LPUlBf0ODSwincPGEqnfmvkI.roa
File: 7Z4LPUlBf0ODSwincPGEqnfmvkI.roa (raw, json)
Hash identifier: 5shU79WcVfbGJUXJiAluoP0Rr9Rk4YhuZf2SWvq348o=
Subject key identifier: ED:9E:0B:3D:49:41:7F:43:83:4B:08:A7:70:F1:84:AA:77:E6:BE:42
Certificate issuer: /CN=9ca90e7daf15c17c1b9abc572157bc7d917b3991
Certificate serial: 02719203
Authority key identifier: 9C:A9:0E:7D:AF:15:C1:7C:1B:9A:BC:57:21:57:BC:7D:91:7B:39:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/7Z4LPUlBf0ODSwincPGEqnfmvkI.roa
Signing time: Sat 01 Jan 2022 00:52:37 +0000
ROA not before: Sat 01 Jan 2022 00:52:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206610
IP address blocks: 5.180.164.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40997379 (0x2719203)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ca90e7daf15c17c1b9abc572157bc7d917b3991
Validity
Not Before: Jan 1 00:52:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ed9e0b3d49417f43834b08a770f184aa77e6be42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d4:e6:35:9b:14:fc:fe:6b:db:1d:be:b7:05:
7a:9a:6c:e9:93:25:be:58:cc:32:36:a5:ee:74:ed:
81:0c:86:94:3e:2c:e4:47:49:1d:8d:2a:ae:08:bc:
e3:b4:0c:bb:6e:fb:7d:ca:ff:6a:2e:7d:e3:6a:00:
19:e4:1d:8e:d8:24:b1:25:a5:a9:b1:b3:03:90:a6:
7b:b9:ab:18:b6:8d:f6:93:e2:5d:84:70:94:6f:b2:
1f:ad:b3:d9:10:d2:2c:7a:ac:ce:ae:16:75:ff:b9:
60:bc:64:d3:50:24:a4:89:f1:15:2a:5c:ef:64:62:
31:52:7c:5d:0c:03:9f:58:59:89:a4:71:e2:62:14:
96:02:f2:e7:cd:a0:5d:94:3b:e3:53:9a:00:90:81:
d3:93:7f:95:af:bc:ce:fa:cc:9b:11:6a:6f:2c:33:
64:4c:dc:50:71:8b:56:44:26:e5:bc:1a:62:f0:cc:
94:c2:cf:87:e7:d2:a3:56:89:7e:8c:a2:db:04:03:
f5:23:8f:f2:7d:8d:d4:ac:da:72:2c:ff:ce:01:b6:
f7:93:4b:d0:df:32:8c:db:2c:2a:c2:28:68:a1:54:
a0:c6:6c:11:eb:ea:30:f2:90:b5:eb:33:64:26:b0:
3c:b9:39:9e:36:db:cc:6c:cd:b0:5c:a6:72:8a:fe:
24:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:9E:0B:3D:49:41:7F:43:83:4B:08:A7:70:F1:84:AA:77:E6:BE:42
X509v3 Authority Key Identifier:
keyid:9C:A9:0E:7D:AF:15:C1:7C:1B:9A:BC:57:21:57:BC:7D:91:7B:39:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/7Z4LPUlBf0ODSwincPGEqnfmvkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.164.0/22
Signature Algorithm: sha256WithRSAEncryption
41:42:d0:c6:43:ec:fa:45:b0:dc:fc:fd:0a:f6:15:b1:fe:0a:
3d:43:a6:d0:fe:3b:0a:3f:3f:0c:b8:8d:d9:a6:2d:8c:5e:58:
96:fc:b9:77:84:eb:9f:17:d2:91:67:a8:82:a2:fd:9f:80:e6:
28:d3:a7:14:7f:63:75:85:fb:b6:25:db:37:57:3f:b8:2b:5b:
6f:57:c8:74:a4:99:92:a2:67:6b:2d:cd:77:14:7d:85:7b:56:
6b:95:88:c9:2b:ce:a3:83:5f:36:09:23:14:38:5a:b3:88:38:
44:f9:82:2f:af:04:39:8a:b6:18:23:fd:b9:a7:87:7a:e7:75:
65:dd:1b:89:55:f9:69:0a:e7:a1:e5:12:a3:9c:d3:0f:1c:26:
cf:23:e0:2d:24:c9:ff:49:f8:e2:f3:b8:4d:01:12:f2:52:c6:
93:02:99:2f:62:a9:f1:1b:dc:ba:1f:f7:f7:ac:7c:3b:c8:89:
17:51:d1:2f:24:af:df:ac:75:03:b3:3f:95:a7:c8:9b:32:61:
be:24:a9:13:13:1d:f0:44:90:d1:7d:86:5b:a9:d0:c9:e4:c7:
81:da:98:38:84:f7:35:7b:ef:5b:e9:a3:7f:0c:51:fa:06:5d:
8e:b4:f8:7b:e4:c9:e5:36:5c:d2:28:91:6b:ed:44:9b:69:eb:
7b:c7:95:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:23 2024 by rpki-client on console-ams.rpki-client.org