Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/_PGlkxXQ4Vzhby4l5BhsTHNkKBk.roa
File: _PGlkxXQ4Vzhby4l5BhsTHNkKBk.roa (raw, json)
Hash identifier: hL7HQ0Qb+4A3FZdFc41ourZ/zsd860GtYbLVNfo0sWU=
Subject key identifier: FC:F1:A5:93:15:D0:E1:5C:E1:6F:2E:25:E4:18:6C:4C:73:64:28:19
Certificate issuer: /CN=6f5de9f9dbbd4618857b58105c6743720a11bc6e
Certificate serial: 1A64637F
Authority key identifier: 6F:5D:E9:F9:DB:BD:46:18:85:7B:58:10:5C:67:43:72:0A:11:BC:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b13p-du9RhiFe1gQXGdDcgoRvG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/_PGlkxXQ4Vzhby4l5BhsTHNkKBk.roa
Signing time: Sat 01 Jan 2022 15:02:32 +0000
ROA not before: Sat 01 Jan 2022 15:02:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199092
IP address blocks: 5.187.56.0/23 maxlen: 23
5.187.56.0/21 maxlen: 21
5.187.58.0/24 maxlen: 24
5.187.63.0/24 maxlen: 24
2a01:41c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 442786687 (0x1a64637f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5de9f9dbbd4618857b58105c6743720a11bc6e
Validity
Not Before: Jan 1 15:02:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fcf1a59315d0e15ce16f2e25e4186c4c73642819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7f:7e:85:91:71:5c:4d:ca:2d:03:ba:99:4e:
52:0c:a6:9d:0d:ee:f1:7f:a0:c9:71:4d:d7:a8:2b:
dc:5c:2c:9d:02:97:3a:a2:de:5b:aa:e0:50:9b:c1:
a4:6b:c9:62:25:00:ea:60:d5:a1:53:13:5a:89:d6:
db:b0:ae:7b:2f:d1:09:84:f1:60:5b:42:7b:14:bd:
d4:94:fb:92:8f:ec:95:bb:76:70:72:f2:d7:12:5c:
19:60:93:5e:be:ff:ad:b2:de:2f:da:89:ba:77:98:
9c:8b:00:ee:84:ad:22:4c:72:a5:1d:3a:49:9d:b6:
fc:78:f4:6c:49:53:fb:5f:68:9c:c5:d7:d3:6e:5e:
9e:c0:e4:fb:3f:f5:76:60:36:5e:9e:24:20:4c:87:
c3:8d:4b:41:75:aa:b9:5b:17:b8:f3:a2:c4:83:42:
7f:34:47:b7:94:03:39:4c:e1:5a:e4:53:6d:6e:4e:
77:1a:f4:3a:85:c4:55:38:a7:6d:32:97:ad:23:d8:
c5:02:25:1f:df:0f:0b:b3:70:30:f4:31:fd:3d:aa:
1a:e4:d3:73:12:18:20:c3:f2:78:bb:b0:ad:0f:86:
6e:bc:56:65:52:ca:4c:bd:83:3d:d6:67:58:69:83:
74:51:f8:1c:39:78:a4:7a:c0:fb:cf:ce:d7:8e:d1:
5f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F1:A5:93:15:D0:E1:5C:E1:6F:2E:25:E4:18:6C:4C:73:64:28:19
X509v3 Authority Key Identifier:
keyid:6F:5D:E9:F9:DB:BD:46:18:85:7B:58:10:5C:67:43:72:0A:11:BC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b13p-du9RhiFe1gQXGdDcgoRvG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/_PGlkxXQ4Vzhby4l5BhsTHNkKBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/b13p-du9RhiFe1gQXGdDcgoRvG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.187.56.0/21
IPv6:
2a01:41c0::/32
Signature Algorithm: sha256WithRSAEncryption
89:ce:63:1e:79:f5:a2:b3:ad:77:a4:4f:15:67:c3:df:b8:2d:
04:63:27:52:25:f8:24:b2:eb:f5:4b:a2:eb:96:a8:1f:44:b3:
3f:55:ad:4c:85:1e:c6:eb:a0:5b:32:e7:cb:07:fc:6e:9c:2c:
dc:20:28:02:38:22:86:f1:65:a4:f7:9f:94:67:85:b0:06:1e:
36:82:2f:c7:a3:72:be:5e:27:34:ff:52:30:c0:b6:89:3e:96:
90:a4:00:c3:c8:61:db:1f:ab:8f:2c:46:9a:f7:f7:77:55:74:
9b:b8:58:94:4f:e3:d9:ab:ee:bb:b1:12:2e:69:a4:0c:06:2e:
4b:5b:36:8b:c1:d9:83:61:b3:a2:ff:a9:90:d1:9d:12:08:e8:
7a:ff:fa:eb:10:20:1e:a5:da:4a:10:49:ec:9a:55:34:53:d1:
9e:31:95:d2:ba:03:61:16:4d:4a:47:e9:6b:93:2f:1e:9b:6a:
56:9f:c6:fc:87:07:94:e4:aa:7e:3f:64:b9:b2:c6:6e:94:9d:
13:47:00:02:8a:4e:da:fc:83:f6:e9:72:85:34:2f:6e:74:86:
98:dc:ee:da:94:3e:47:c5:ad:02:66:c0:6d:44:a9:55:f4:dc:
15:f4:80:5f:05:b9:6d:e0:4b:1f:67:ee:1d:de:38:ae:b8:10:
3d:11:07:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:47 2024 by rpki-client on console-ams.rpki-client.org