Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/56158f-7d45-413e-a8e6-6050368b7e03/1/nY1o-af_UI3dF5iAeoVzXXLMOvw.roa
File: nY1o-af_UI3dF5iAeoVzXXLMOvw.roa (raw, json)
Hash identifier: FNx7g2mmcp+inl3jaqGD5jrnzAaldkCF/ePmpHNj59k=
Subject key identifier: 9D:8D:68:F9:A7:FF:50:8D:DD:17:98:80:7A:85:73:5D:72:CC:3A:FC
Certificate issuer: /CN=e5f83127d6512e13e88d4b951f1f039c6a3bac41
Certificate serial: 02316C
Authority key identifier: E5:F8:31:27:D6:51:2E:13:E8:8D:4B:95:1F:1F:03:9C:6A:3B:AC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5fgxJ9ZRLhPojUuVHx8DnGo7rEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/56158f-7d45-413e-a8e6-6050368b7e03/1/nY1o-af_UI3dF5iAeoVzXXLMOvw.roa
Signing time: Thu 26 May 2022 14:58:13 +0000
ROA not before: Thu 26 May 2022 14:58:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31019
IP address blocks: 5.42.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143724 (0x2316c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5f83127d6512e13e88d4b951f1f039c6a3bac41
Validity
Not Before: May 26 14:58:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9d8d68f9a7ff508ddd1798807a85735d72cc3afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fc:8f:3c:58:d7:87:52:89:34:2d:b7:ef:6a:
2c:a8:2c:c4:de:fd:e5:1e:63:b6:9b:39:62:23:99:
ef:8d:ad:0c:15:13:4d:11:b2:15:de:3d:ce:a1:64:
17:4c:f8:e8:8a:16:15:f5:00:cf:a7:60:6a:16:c3:
57:0d:6a:c8:11:11:02:00:b1:cc:c5:39:26:01:ff:
50:6f:90:db:3c:6e:8e:4d:bf:8f:f5:db:31:cc:f4:
bc:27:af:48:f6:40:62:23:9e:7e:a6:36:b8:56:18:
cc:4b:e2:ec:b0:52:64:af:37:f3:58:c0:ab:7e:88:
3e:de:6d:20:6b:45:e9:10:1e:e3:37:16:cf:97:21:
3a:9d:88:0e:57:8f:1e:8c:12:be:10:1a:f4:25:b5:
3e:50:c9:24:3d:c1:db:38:4e:d7:0f:1a:48:97:be:
4d:eb:fd:41:24:a1:54:7f:7c:20:28:ca:c9:b2:ab:
9c:d5:dc:df:fc:df:85:9a:e6:fe:a5:b3:c8:23:21:
8a:0b:68:10:01:6c:b7:a6:42:17:11:f0:c8:7d:8f:
25:44:96:d1:0d:7b:e7:71:e2:5a:a6:89:36:cb:0d:
24:95:2b:3c:e6:4f:66:ae:6f:ff:7b:0d:26:8a:85:
45:1f:34:78:ee:59:38:51:a1:45:db:16:77:86:dc:
4e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:8D:68:F9:A7:FF:50:8D:DD:17:98:80:7A:85:73:5D:72:CC:3A:FC
X509v3 Authority Key Identifier:
keyid:E5:F8:31:27:D6:51:2E:13:E8:8D:4B:95:1F:1F:03:9C:6A:3B:AC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fgxJ9ZRLhPojUuVHx8DnGo7rEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/56158f-7d45-413e-a8e6-6050368b7e03/1/nY1o-af_UI3dF5iAeoVzXXLMOvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/56158f-7d45-413e-a8e6-6050368b7e03/1/5fgxJ9ZRLhPojUuVHx8DnGo7rEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.207.0/24
Signature Algorithm: sha256WithRSAEncryption
33:c4:e4:5c:5f:9f:12:7d:18:fa:61:9d:34:48:6d:0d:be:c7:
62:a4:8b:2e:12:63:db:c6:03:51:b9:79:d8:63:cc:55:31:fd:
59:a6:8b:58:3e:af:01:2b:5e:81:33:c2:be:d8:d5:8a:e5:2f:
e1:5a:a3:fd:25:36:4b:75:0a:ed:2f:ef:53:3e:83:b3:1a:d2:
8d:0e:8c:cc:30:11:e2:28:f1:2a:6e:2d:8a:e2:89:3c:39:7d:
b2:52:65:bd:69:ba:c6:4e:ce:b1:8c:ce:8d:f4:3c:69:ed:0c:
30:a8:fc:22:1f:07:17:94:77:8e:77:19:c8:f4:f0:7f:f9:06:
fc:aa:90:e8:e4:be:1c:62:30:30:4c:bd:67:ec:05:23:c0:18:
0a:be:f7:61:7b:85:e7:bd:b4:d4:c1:c1:d8:8a:61:9b:a4:12:
35:70:0b:95:60:b0:8f:7e:7b:7a:b3:78:28:be:e8:03:0b:e3:
bb:a8:70:a1:98:62:21:08:5c:8e:1b:c6:41:c9:0e:50:79:cb:
ea:0b:49:5b:ed:2b:71:4d:2b:1b:10:de:a6:f1:91:30:48:41:
39:5c:7d:b6:7e:99:6c:9b:04:74:00:01:93:6a:ad:26:37:a0:
0f:49:bc:37:31:0f:96:e6:3c:68:a9:fc:64:80:04:4f:f6:47:
1b:72:c4:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:54 2023 by rpki-client on console.sobornost.net