Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/bb3b62-3302-45aa-968a-ecbb3fc0a725/1/7Fc6k5vQfsURU_9dBGTuebNxISE.roa
File: 7Fc6k5vQfsURU_9dBGTuebNxISE.roa (raw, json)
Hash identifier: 83+hDY8voXqg7TAOnVd+uYVG8uT11GJwBoJymcDdYSc=
Subject key identifier: EC:57:3A:93:9B:D0:7E:C5:11:53:FF:5D:04:64:EE:79:B3:71:21:21
Certificate issuer: /CN=b172c8d4fc986deb9fceb1f0d0cae27c1c3135c3
Certificate serial: 0183D0661C5A93F49BF88E7C5A884FA2DC51
Authority key identifier: B1:72:C8:D4:FC:98:6D:EB:9F:CE:B1:F0:D0:CA:E2:7C:1C:31:35:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXLI1PyYbeufzrHw0MrifBwxNcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/bb3b62-3302-45aa-968a-ecbb3fc0a725/1/7Fc6k5vQfsURU_9dBGTuebNxISE.roa
Signing time: Thu 13 Oct 2022 08:11:36 +0000
ROA not before: Thu 13 Oct 2022 08:11:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61310
IP address blocks: 5.63.176.0/23 maxlen: 23
5.63.176.0/22 maxlen: 22
5.63.176.0/21 maxlen: 21
5.63.182.0/23 maxlen: 23
5.63.182.0/24 maxlen: 24
5.63.180.0/22 maxlen: 22
5.63.180.0/23 maxlen: 23
2a04:5d80::/30 maxlen: 30
2a04:5d80::/31 maxlen: 31
2a04:5d84::/30 maxlen: 30
2a04:5d84::/31 maxlen: 31
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d0:66:1c:5a:93:f4:9b:f8:8e:7c:5a:88:4f:a2:dc:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172c8d4fc986deb9fceb1f0d0cae27c1c3135c3
Validity
Not Before: Oct 13 08:11:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ec573a939bd07ec51153ff5d0464ee79b3712121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:95:6c:58:c1:99:f0:13:5e:b4:a4:e9:f3:f1:
7e:2b:b0:c4:bc:fb:d4:88:10:9e:14:09:46:3f:ba:
8b:a8:71:3a:a1:d7:03:d0:69:68:d2:cf:dc:44:99:
df:bb:81:9b:c0:4d:43:5a:21:b4:46:a8:f7:0f:ac:
3b:d5:7e:d6:e1:32:7f:f3:95:dd:68:5c:f2:97:69:
35:bd:57:90:eb:7e:ff:07:88:5f:be:4c:b7:36:41:
e2:b1:cc:95:ff:81:2f:06:78:e4:43:a4:c2:af:1e:
3b:46:70:72:06:c6:d0:98:71:b6:76:59:f3:b3:d1:
12:01:97:d0:43:8c:42:51:19:c9:5e:c1:8b:90:31:
2e:f6:21:ed:b6:7f:b3:ff:53:2b:45:cf:de:98:a9:
cc:8c:dd:6e:9b:7c:5c:67:0d:2d:6a:ba:48:2e:9d:
45:e4:db:12:ae:eb:f2:49:4f:cb:95:31:d3:ec:f6:
15:37:45:97:5b:09:e7:6d:21:2c:d1:08:39:d6:a1:
ad:72:57:47:a1:4f:5d:e9:af:a7:2a:39:44:e1:66:
e4:7f:9b:62:63:54:a6:e7:d3:9c:42:c8:bd:cf:50:
99:cd:c5:75:78:ed:af:41:f6:61:1f:28:2f:7e:99:
45:dd:d3:0f:ef:82:c2:90:d9:96:34:b4:29:5f:9c:
da:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:57:3A:93:9B:D0:7E:C5:11:53:FF:5D:04:64:EE:79:B3:71:21:21
X509v3 Authority Key Identifier:
keyid:B1:72:C8:D4:FC:98:6D:EB:9F:CE:B1:F0:D0:CA:E2:7C:1C:31:35:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXLI1PyYbeufzrHw0MrifBwxNcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/bb3b62-3302-45aa-968a-ecbb3fc0a725/1/7Fc6k5vQfsURU_9dBGTuebNxISE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/bb3b62-3302-45aa-968a-ecbb3fc0a725/1/sXLI1PyYbeufzrHw0MrifBwxNcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.63.176.0/21
IPv6:
2a04:5d80::/29
Signature Algorithm: sha256WithRSAEncryption
75:46:7c:d5:6d:bb:0a:a4:eb:03:70:ca:99:09:ab:91:1f:20:
19:59:7e:60:42:3d:d1:86:88:80:87:60:f4:7e:c5:a5:34:d6:
8a:97:69:91:e0:6a:de:20:41:b8:44:61:c5:d7:82:fe:ec:15:
e6:55:f8:fd:9e:4b:6a:f8:f2:bc:fe:a0:72:35:be:e0:b4:5f:
99:6d:7e:9a:7b:05:30:0d:b8:4d:54:27:dd:da:24:de:1b:8e:
87:14:dc:e4:10:48:ee:22:4b:1e:12:3c:b6:fa:63:a4:26:a8:
16:1d:37:01:90:5f:87:13:4c:23:34:2a:74:15:df:b8:21:84:
97:28:2b:bf:57:3a:0e:63:53:ec:8d:bc:6c:b1:2b:4f:ce:0d:
49:4c:b5:1a:c1:70:81:2a:ba:eb:3a:54:0c:a3:4c:d5:0e:72:
b8:0e:04:aa:46:64:07:de:d3:b3:b0:32:26:c0:a3:ea:0f:f7:
ba:0c:b6:5c:22:3a:c2:ed:ee:34:14:31:99:b2:e1:a2:bb:d2:
3f:07:3a:72:da:81:3b:9e:76:3d:5b:f5:7e:58:b7:12:4d:7d:
7a:f6:b8:8e:13:a0:bb:4c:b9:1c:7a:12:63:b8:b6:96:ed:f8:
c0:12:48:a1:68:c2:bc:f9:c8:86:9a:e0:59:84:ce:29:a5:e8:
6b:e9:24:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:29 2024 by rpki-client on console-fra.rpki-client.org