Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/BLkBBrfMdxeiuuBH-BFQDFVoKtU.roa
File: BLkBBrfMdxeiuuBH-BFQDFVoKtU.roa (raw, json)
Hash identifier: 5aKTx95pVZhUZPmr6fo5XC/K1enqy9TR5NS0wHNN/ck=
Subject key identifier: 04:B9:01:06:B7:CC:77:17:A2:BA:E0:47:F8:11:50:0C:55:68:2A:D5
Certificate issuer: /CN=d40620ea5daf8a54aaea17f2cb9ecdf35d785306
Certificate serial: 029D539F
Authority key identifier: D4:06:20:EA:5D:AF:8A:54:AA:EA:17:F2:CB:9E:CD:F3:5D:78:53:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1AYg6l2vilSq6hfyy57N8114UwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/BLkBBrfMdxeiuuBH-BFQDFVoKtU.roa
Signing time: Mon 07 Mar 2022 23:42:13 +0000
ROA not before: Mon 07 Mar 2022 23:42:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211289
IP address blocks: 5.181.52.0/24 maxlen: 24
2a05:3440::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43864991 (0x29d539f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d40620ea5daf8a54aaea17f2cb9ecdf35d785306
Validity
Not Before: Mar 7 23:42:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=04b90106b7cc7717a2bae047f811500c55682ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ab:09:c9:0f:96:86:0e:ab:46:2d:32:4d:fa:
b9:c9:b6:2e:dd:e5:a2:d9:a2:e7:92:17:9c:e6:81:
77:88:04:22:1a:f2:34:86:3c:e5:9d:d6:d4:e6:91:
89:c6:9f:e9:84:46:02:cd:3c:ab:db:ba:72:28:30:
82:0f:3e:46:a4:c2:ba:bb:68:93:0a:fc:a9:aa:16:
ce:8b:c0:04:69:eb:89:c3:8f:c1:eb:8e:f0:06:eb:
ec:c9:b5:fa:05:0e:2d:e1:b0:92:50:43:ab:c4:06:
69:38:fd:9a:54:8e:51:8d:b8:1b:35:6a:71:83:aa:
e9:f7:6f:fc:67:90:d0:77:f5:ac:3d:95:a6:b0:47:
4e:f6:a7:24:d6:20:20:96:b1:26:45:83:37:e8:23:
4b:ef:2e:39:aa:ad:8d:7d:c6:31:b3:e1:a8:93:48:
02:64:23:24:31:7e:47:99:1f:1d:9d:a2:b5:23:a4:
66:e5:38:7d:3f:2d:d6:d2:5f:82:08:38:39:58:3f:
03:6b:5a:0d:96:cc:02:fe:4c:f7:9b:14:8d:ba:58:
5f:a2:dc:7d:5c:5f:da:bc:9b:4b:30:a5:f2:97:c5:
f9:37:84:2f:d8:23:4e:a8:e7:c0:5c:ee:0b:c5:b0:
be:34:f8:db:58:06:88:50:fa:11:d4:a4:8d:d8:ae:
66:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B9:01:06:B7:CC:77:17:A2:BA:E0:47:F8:11:50:0C:55:68:2A:D5
X509v3 Authority Key Identifier:
keyid:D4:06:20:EA:5D:AF:8A:54:AA:EA:17:F2:CB:9E:CD:F3:5D:78:53:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AYg6l2vilSq6hfyy57N8114UwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/BLkBBrfMdxeiuuBH-BFQDFVoKtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.52.0/24
IPv6:
2a05:3440::/29
Signature Algorithm: sha256WithRSAEncryption
83:e0:a2:c0:c4:2e:2d:b0:e6:e7:dc:46:bf:3a:9b:c1:c9:aa:
29:d2:51:d9:0d:ee:b5:8a:be:6c:7f:90:df:c8:5c:9a:9c:fb:
74:d0:6c:0a:b3:d0:3b:fa:86:b9:51:e6:71:4d:30:09:df:4a:
73:d7:99:79:b7:ef:88:08:14:1d:c5:bf:ab:e1:30:79:61:8e:
33:61:07:57:1b:15:3c:f8:31:37:3a:51:48:15:31:dd:fb:06:
e1:5b:e1:30:86:84:45:d3:a0:c7:5c:bd:ed:23:08:be:b8:bc:
83:85:f3:8b:84:9b:f1:86:c7:0f:97:0b:87:26:e7:42:e5:9e:
e5:3d:e6:59:35:df:18:77:f5:8c:fe:6b:5f:4a:99:01:d3:3b:
6c:91:75:0a:46:96:cc:ff:a7:69:41:a6:18:e9:cb:12:50:81:
bb:a0:8b:80:24:25:88:48:a6:3d:8f:44:76:c8:76:35:bb:1a:
35:45:14:fa:44:e0:52:c5:52:2c:8e:9c:4d:05:0d:3b:a0:33:
b2:8a:f6:0f:ed:84:65:63:aa:6d:c7:89:20:1e:e4:1f:a7:53:
6c:ec:97:d8:8e:2e:0c:29:7d:99:4c:43:14:cf:53:32:44:d4:
2c:b7:b6:1e:0e:8d:db:5d:c9:e1:3e:38:93:20:91:b9:e9:ce:
e9:82:4e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:57 2024 by rpki-client on console-ams.rpki-client.org