Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/SB5489p-FDJVUoJuERaYuwz3jdU.roa
File: SB5489p-FDJVUoJuERaYuwz3jdU.roa (raw, json)
Hash identifier: ppkdE6v2v4S2KUf+p6UDxFwfg6XMXO8GnU0+EE4o8ro=
Subject key identifier: 48:1E:78:F3:DA:7E:14:32:55:52:82:6E:11:16:98:BB:0C:F7:8D:D5
Certificate issuer: /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Certificate serial: 04D79744
Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/SB5489p-FDJVUoJuERaYuwz3jdU.roa
Signing time: Wed 04 May 2022 08:51:16 +0000
ROA not before: Wed 04 May 2022 08:51:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44854
IP address blocks: 103.229.81.0/24 maxlen: 24
185.219.6.0/24 maxlen: 24
93.114.180.0/23 maxlen: 24
2a10:e300:35::/48 maxlen: 48
2a10:e300::/32 maxlen: 48
2a10:e300:26::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81237828 (0x4d79744)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Validity
Not Before: May 4 08:51:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=481e78f3da7e14325552826e111698bb0cf78dd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:82:00:dd:f4:c2:2a:eb:a0:f9:ca:96:e1:0a:
9b:51:1a:14:6b:3f:e2:7f:a8:ca:0e:23:ab:bd:8a:
81:d6:e5:d4:bb:f6:01:ca:01:04:5e:19:60:6c:5e:
b6:ce:b2:31:6f:ad:c7:c5:cc:e5:51:41:89:e4:a6:
77:11:03:9e:0f:3f:08:c7:50:11:8b:b8:70:80:11:
d3:ee:04:c3:c0:ff:c2:54:48:61:a5:b2:2c:a7:5f:
7c:4e:ed:0a:77:3f:c3:fa:eb:af:55:32:0a:7c:13:
a6:12:05:5f:dc:25:2d:8b:85:25:21:c5:d0:14:f1:
ea:2d:73:64:c2:5c:82:ed:b9:42:9c:19:c5:67:8a:
ab:1b:07:df:e0:4a:42:3d:4b:78:9e:3b:98:46:cf:
b8:e5:8b:c1:c0:d1:bb:60:46:3a:63:44:77:0b:ef:
6e:ef:b3:cc:a2:82:ea:33:9a:83:04:7b:1d:04:62:
0f:fb:a5:13:cc:6a:66:c5:9c:6d:83:28:68:bb:a6:
92:b0:0e:b4:f7:c5:d8:6b:7b:c6:2a:58:fa:5a:75:
08:30:70:6c:87:96:2b:ca:f3:f9:dc:df:64:da:d8:
f6:05:02:3c:07:0f:fc:39:49:83:aa:ce:26:d8:2c:
63:0e:80:b3:97:60:0f:ae:c4:43:de:85:62:15:fe:
73:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:1E:78:F3:DA:7E:14:32:55:52:82:6E:11:16:98:BB:0C:F7:8D:D5
X509v3 Authority Key Identifier:
keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/SB5489p-FDJVUoJuERaYuwz3jdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.180.0/23
103.229.81.0/24
185.219.6.0/24
IPv6:
2a10:e300::/32
Signature Algorithm: sha256WithRSAEncryption
af:2d:19:13:da:d3:17:01:6e:d3:c8:e9:73:12:24:5e:95:18:
98:d3:e3:f4:f7:7d:f2:c6:56:30:21:53:09:51:39:96:91:b8:
79:ba:0f:52:f9:b2:8f:76:5b:ac:26:e1:31:bd:96:e2:8f:46:
0c:0b:0f:2e:be:c6:02:f0:81:9b:82:6b:ff:89:02:31:0e:20:
5c:6e:78:19:06:2b:49:5f:2e:d0:1d:73:4f:d7:e2:dd:48:ac:
df:2f:65:1d:f8:f9:23:22:ae:32:9f:c2:e5:a3:62:ab:91:7c:
81:f5:32:de:68:43:af:64:87:34:b2:cb:cc:20:b3:0d:7d:c0:
53:47:a4:c7:44:8b:97:a0:39:f9:40:4f:c2:cd:10:36:09:2c:
57:b0:a2:29:9d:b0:54:c3:cb:c4:05:41:9b:db:3d:5d:3c:74:
ff:f3:5d:25:fb:8f:4b:31:d5:67:f6:be:a0:11:c6:0b:1a:f0:
76:e9:f8:f7:ce:bc:31:74:cf:0f:22:49:b0:4e:4a:dc:cf:99:
82:5d:92:da:0c:55:75:59:a5:98:33:1e:3f:9f:f7:6b:f6:ea:
a3:2b:5e:95:13:a3:1e:be:39:e0:51:34:bc:45:6d:c0:1d:59:
47:a4:66:05:4f:5c:1b:19:e3:08:77:fc:c8:75:af:46:e1:87:
80:fc:d1:3b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:15 2024 by rpki-client on console-ams.rpki-client.org