Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/QSquKHpD26gJ0P--LlMFwse7Bcw.roa
File: QSquKHpD26gJ0P--LlMFwse7Bcw.roa (raw, json)
Hash identifier: H9kcvGL0abtmwdwNG4ls5TlN7lNX3nsqZR6/KmgxUxU=
Subject key identifier: 41:2A:AE:28:7A:43:DB:A8:09:D0:FF:BE:2E:53:05:C2:C7:BB:05:CC
Certificate issuer: /CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Certificate serial: 018A4CCE52D83F8F0BA7414CF2104ACB3D07
Authority key identifier: B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/QSquKHpD26gJ0P--LlMFwse7Bcw.roa
Signing time: Thu 31 Aug 2023 18:15:04 +0000
ROA not before: Thu 31 Aug 2023 18:15:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209046
IP address blocks: 5.59.56.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4c:ce:52:d8:3f:8f:0b:a7:41:4c:f2:10:4a:cb:3d:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Validity
Not Before: Aug 31 18:15:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=412aae287a43dba809d0ffbe2e5305c2c7bb05cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b6:c8:65:ef:28:9d:0a:86:bb:67:0a:2d:51:
15:31:67:87:5c:ce:30:5e:2a:da:52:71:12:43:3e:
7d:9a:4a:43:75:94:62:a5:c3:e3:00:cf:ef:cb:5d:
06:70:3c:9d:2c:37:e5:32:db:52:cd:e1:7e:5b:f5:
ae:4f:06:c6:1a:8e:ae:8f:aa:4f:42:21:08:ef:a5:
1e:61:da:a5:8d:b7:3c:37:4e:24:6f:b8:57:e5:48:
04:63:92:4b:03:97:56:dd:2d:25:5d:12:9a:b1:e7:
9e:da:7f:97:75:80:45:c7:8f:9a:dc:96:81:e0:4e:
52:6d:ee:c9:94:f7:ec:de:fd:cc:b5:24:3e:35:2e:
d5:96:4a:a9:b3:25:24:ee:e9:de:18:21:f5:7e:f8:
f3:b9:63:ef:58:72:de:01:06:bf:6a:54:ef:50:f1:
5c:b8:ab:35:c8:6a:cb:97:20:25:8d:83:71:fc:9e:
d8:bd:fc:2f:24:9e:5a:76:3a:67:53:06:16:87:33:
93:c3:d6:90:e5:66:dd:1e:f7:b0:96:64:49:78:59:
ff:1c:31:ba:29:05:2f:b0:dd:b0:3d:d4:82:d3:df:
30:ab:b5:91:bb:7f:4e:87:45:f8:cf:60:b9:66:e0:
10:49:51:c9:3c:fb:f5:8b:9b:09:77:e0:ee:1a:bc:
5d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:2A:AE:28:7A:43:DB:A8:09:D0:FF:BE:2E:53:05:C2:C7:BB:05:CC
X509v3 Authority Key Identifier:
keyid:B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/QSquKHpD26gJ0P--LlMFwse7Bcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.59.56.0/24
Signature Algorithm: sha256WithRSAEncryption
58:33:54:6f:2e:ff:77:e0:11:ec:8b:a8:91:d7:29:c7:ce:74:
9b:21:f0:53:81:10:c7:07:e0:b5:a5:95:31:cb:df:ff:2f:3f:
d6:75:0b:cb:36:48:6b:45:4b:92:0d:f3:38:6b:0c:ad:bd:b3:
0d:e0:b6:28:4c:40:8b:be:e5:47:1e:39:8f:e9:8d:eb:5c:ef:
2a:11:26:e2:ea:ac:ef:29:48:62:81:5b:97:db:05:ab:e3:5b:
f8:a7:28:69:d9:c0:89:17:a3:70:34:93:92:b0:1d:6c:f4:94:
48:ab:39:e4:0c:d4:d3:38:b2:4b:5d:af:31:7f:e0:79:e1:58:
1f:96:16:dd:e8:78:40:6a:4e:ac:d3:8e:aa:f6:c8:01:b6:27:
bb:76:29:d3:aa:c5:71:65:a3:dc:07:a7:eb:e9:e5:73:76:ea:
95:9f:c0:ec:7a:80:d9:53:3d:80:68:e8:b9:d0:02:f7:e6:44:
a1:d5:7e:ff:88:29:d3:a3:8f:25:03:c8:d2:80:92:b6:d9:92:
08:8a:f0:50:0c:e6:02:c2:40:b7:c9:4f:d0:0e:3a:13:c8:b2:
fc:e8:8f:6c:1d:58:35:f7:ce:5e:8f:cf:fe:64:34:76:a0:69:
bb:01:de:03:db:e7:f4:41:0a:cd:db:b8:01:cf:a9:12:a8:d3:
80:5b:2a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:22:53 2025 by rpki-client