Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/uDcKYrLOdiF8Hl7SzcWFo07aEoY.roa
File: uDcKYrLOdiF8Hl7SzcWFo07aEoY.roa (raw, json)
Hash identifier: wY6vqnHZ3cuMcQ+4s6gCOe0SQJif51axzJsD7d/tpkw=
Subject key identifier: B8:37:0A:62:B2:CE:76:21:7C:1E:5E:D2:CD:C5:85:A3:4E:DA:12:86
Certificate issuer: /CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498
Certificate serial: 01856C1C9835714206513ED3D61AB613D2F0
Authority key identifier: 60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/uDcKYrLOdiF8Hl7SzcWFo07aEoY.roa
Signing time: Sun 01 Jan 2023 06:54:51 +0000
ROA not before: Sun 01 Jan 2023 06:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48815
IP address blocks: 5.104.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:98:35:71:42:06:51:3e:d3:d6:1a:b6:13:d2:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498
Validity
Not Before: Jan 1 06:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8370a62b2ce76217c1e5ed2cdc585a34eda1286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7c:e3:76:70:19:10:e5:7b:35:1b:16:aa:20:
b6:e5:b2:75:05:f9:14:ba:8b:f8:8c:1f:0a:9d:11:
44:76:b0:28:25:ec:e4:80:cb:9b:a0:f0:36:8a:51:
fa:11:2e:7c:5a:f6:35:95:fc:ca:5b:57:d9:89:e6:
98:0e:d5:63:b7:5a:52:6b:5e:d2:63:d3:bd:a5:d9:
e1:3e:42:d4:64:b9:88:31:2d:62:47:48:02:12:0e:
79:f0:a7:ed:92:29:a4:41:30:f3:23:2a:e9:d4:9c:
75:b0:5b:37:09:2d:72:a5:66:7b:c6:73:80:84:f2:
e1:1a:bb:f4:e8:0c:a1:d8:9f:f3:d7:9b:11:c3:fa:
70:ab:8d:34:3a:a7:b0:7d:51:18:4f:f0:cb:d1:9d:
4c:c5:ad:ad:eb:b6:f5:ca:56:ad:ea:17:46:6c:12:
5d:53:23:ac:99:99:68:90:33:85:2f:80:52:29:1a:
6d:f0:b0:6a:26:54:01:da:77:21:15:d2:f7:c5:dc:
86:4d:a8:2b:ec:5c:b9:a5:74:4f:1f:33:6c:92:9e:
fc:dc:6d:5c:28:7c:dc:49:68:32:ab:3a:67:fa:de:
47:74:f0:91:02:56:89:37:51:76:9f:61:31:9b:2e:
1f:54:25:25:93:cd:2c:d4:1e:03:78:4e:18:66:e4:
20:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:37:0A:62:B2:CE:76:21:7C:1E:5E:D2:CD:C5:85:A3:4E:DA:12:86
X509v3 Authority Key Identifier:
keyid:60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/uDcKYrLOdiF8Hl7SzcWFo07aEoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.24.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:b7:44:b6:a0:1d:a1:cd:cf:4c:fb:6c:1e:18:e3:ae:fe:cc:
ad:2a:94:84:0c:cd:29:95:14:85:f4:35:5b:38:9a:ab:02:1c:
64:15:52:26:57:02:8f:36:35:fa:a1:24:a8:dd:c8:8d:fb:ea:
71:46:b0:e1:da:16:b0:11:71:b2:94:48:54:d9:16:7b:b4:3d:
85:f3:39:82:8f:d7:63:9b:9a:8a:96:61:87:0d:7b:e1:9e:42:
28:e4:1e:a4:75:c9:15:81:03:59:5b:91:10:f1:ce:57:4f:6c:
5c:aa:fa:c5:f0:8a:16:ab:e1:d8:fe:44:09:f6:3f:e6:7d:f7:
ea:eb:b8:a9:b8:ea:35:72:28:6a:02:e0:6d:b0:0d:31:93:86:
cc:9f:33:14:ae:27:56:70:c2:e8:16:d5:d6:b3:3f:4b:0f:4d:
42:a3:a9:8b:83:e2:a6:df:4e:b1:9b:c8:10:bd:9a:02:bd:95:
f5:cc:06:bf:f6:9d:1f:42:7f:fe:71:93:09:ba:61:eb:ab:e4:
c3:2f:97:db:2c:c7:7a:cd:eb:ca:b6:46:c8:a3:81:90:1b:7c:
17:20:a9:31:57:33:5f:84:b3:b7:4f:46:31:77:48:d9:1b:62:
08:69:3e:4f:b5:3d:7b:b0:45:79:b7:aa:20:e9:7f:34:7b:02:
e5:76:49:f6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsHJg1cUIGUT7T1hq2E9LwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwOGU2YTZhNTQwMTdkZDNiOWIyY2NlMzVmZDVhOWE3ZjJh
NDU0OTgwHhcNMjMwMTAxMDY1NDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODM3MGE2MmIyY2U3NjIxN2MxZTVlZDJjZGM1ODVhMzRlZGExMjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXzjdnAZEOV7NRsWqiC25bJ1BfkU
uov4jB8KnRFEdrAoJezkgMuboPA2ilH6ES58WvY1lfzKW1fZieaYDtVjt1pSa17S
Y9O9pdnhPkLUZLmIMS1iR0gCEg558KftkimkQTDzIyrp1Jx1sFs3CS1ypWZ7xnOA
hPLhGrv06Ayh2J/z15sRw/pwq400OqewfVEYT/DL0Z1Mxa2t67b1ylat6hdGbBJd
UyOsmZlokDOFL4BSKRpt8LBqJlQB2nchFdL3xdyGTagr7Fy5pXRPHzNskp783G1c
KHzcSWgyqzpn+t5HdPCRAlaJN1F2n2Exmy4fVCUlk80s1B4DeE4YZuQgsQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLg3CmKyznYhfB5e0s3FhaNO2hKGMB8GA1UdIwQY
MBaAFGCOampUAX3TubLM41/VqafypFSYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUk1cWFsUUJmZE81c3N6alg5V3BwX0trVkpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9jMzMyOGUtMWNlOS00ZTM4LTllY2Et
MjMyNDk3N2M5MzkzLzEvdURjS1lyTE9kaUY4SGw3U3pjV0ZvMDdhRW9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9jMzMyOGUtMWNlOS00ZTM4LTllY2EtMjMyNDk3N2M5Mzkz
LzEvWUk1cWFsUUJmZE81c3N6alg5V3BwX0trVkpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABWgYMA0G
CSqGSIb3DQEBCwUAA4IBAQC5t0S2oB2hzc9M+2weGOOu/sytKpSEDM0plRSF9DVb
OJqrAhxkFVImVwKPNjX6oSSo3ciN++pxRrDh2hawEXGylEhU2RZ7tD2F8zmCj9dj
m5qKlmGHDXvhnkIo5B6kdckVgQNZW5EQ8c5XT2xcqvrF8IoWq+HY/kQJ9j/mfffq
67ipuOo1cihqAuBtsA0xk4bMnzMUridWcMLoFtXWsz9LD01Co6mLg+Km306xm8gQ
vZoCvZX1zAa/9p0fQn/+cZMJumHrq+TDL5fbLMd6zevKtkbIo4GQG3wXIKkxVzNf
hLO3T0Yxd0jZG2IIaT5PtT17sEV5t6og6X80ewLldkn2
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:15 2025 by rpki-client