Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/04fTaaN-JIVRfnK44Gwgh7O7UBM.roa
File: 04fTaaN-JIVRfnK44Gwgh7O7UBM.roa (raw, json)
Hash identifier: 6GwyIWl2KMk2VNrV4egVACwpBKYkSBESdIgnunnZja8=
Subject key identifier: D3:87:D3:69:A3:7E:24:85:51:7E:72:B8:E0:6C:20:87:B3:BB:50:13
Certificate issuer: /CN=5bb1c57055c29d669f289a9f68f392823942132a
Certificate serial: 01856EB9148199923FDAAA0FFF936E95668F
Authority key identifier: 5B:B1:C5:70:55:C2:9D:66:9F:28:9A:9F:68:F3:92:82:39:42:13:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/04fTaaN-JIVRfnK44Gwgh7O7UBM.roa
Signing time: Sun 01 Jan 2023 19:05:01 +0000
ROA not before: Sun 01 Jan 2023 19:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44084
IP address blocks: 5.253.212.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b9:14:81:99:92:3f:da:aa:0f:ff:93:6e:95:66:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bb1c57055c29d669f289a9f68f392823942132a
Validity
Not Before: Jan 1 19:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d387d369a37e2485517e72b8e06c2087b3bb5013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8d:e6:a6:48:df:fb:67:9f:2a:61:62:20:bd:
a0:a6:7b:52:67:4e:92:a0:ec:e2:bd:49:9e:2d:4b:
40:f0:c7:96:21:70:0d:d3:4f:b1:7a:41:43:a6:ad:
4a:b4:e1:17:53:ea:59:90:de:09:3f:23:a1:a1:11:
7d:de:2c:3c:07:7a:d5:75:c5:59:3f:7b:34:28:1f:
e7:2b:df:1c:36:cc:c7:25:0d:8a:31:f1:28:2b:fa:
9c:2d:b0:cc:e7:c5:2c:52:b4:b4:e0:c0:d7:09:95:
87:82:f1:17:19:d8:97:39:4b:87:1a:04:03:f8:c7:
65:26:1f:60:43:37:23:e3:f1:f4:67:b5:79:bd:31:
37:77:6c:2d:ef:cd:e8:17:76:65:03:28:05:5e:06:
b2:87:2c:90:46:4a:a8:19:9f:42:c9:e8:c6:ac:24:
86:82:37:6c:2c:36:e8:56:1c:f5:ae:83:70:65:ea:
de:7f:fa:08:a4:a7:42:95:79:f8:b2:dc:fb:fd:16:
0f:37:2f:24:30:8b:d1:ed:a8:94:15:61:51:86:e7:
16:96:29:98:e1:8b:d9:a1:a6:60:e3:b1:80:33:62:
0f:0d:3a:ca:31:f4:bd:22:19:e9:70:bd:43:ce:15:
6f:b5:d7:75:f6:1c:f3:0b:92:3d:ba:c7:5b:82:d8:
36:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:87:D3:69:A3:7E:24:85:51:7E:72:B8:E0:6C:20:87:B3:BB:50:13
X509v3 Authority Key Identifier:
keyid:5B:B1:C5:70:55:C2:9D:66:9F:28:9A:9F:68:F3:92:82:39:42:13:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/04fTaaN-JIVRfnK44Gwgh7O7UBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.212.0/23
Signature Algorithm: sha256WithRSAEncryption
97:94:63:b2:18:80:c0:d7:9e:01:71:55:dc:eb:c0:00:4d:97:
aa:87:bf:73:e6:6e:f0:44:4c:d9:3e:a4:c6:aa:a2:d6:3e:7b:
86:da:3b:e4:45:d5:df:d2:fb:c9:67:12:f3:8b:77:d7:16:cd:
e1:68:f8:60:34:88:13:43:0c:20:8a:e4:bf:cb:6f:aa:e2:45:
59:2b:6c:ca:bc:ba:e2:0f:2e:9b:14:c8:b6:d4:f1:35:d0:69:
e4:4b:8d:51:f6:ff:07:8a:44:67:70:4e:8c:bd:03:d4:55:6d:
ae:0c:3a:07:e9:91:ac:31:6e:a1:16:0d:4c:a4:e2:f8:2f:9a:
50:7b:1e:44:79:49:10:a9:c5:1f:75:ac:cd:33:eb:ab:35:9c:
c6:16:80:95:9d:9e:d9:3a:68:d6:68:95:27:5d:2e:c2:59:66:
5b:4c:bf:8b:5b:b9:02:5f:15:0e:66:83:48:83:a5:d7:d3:97:
6c:e6:d7:88:7e:cf:dc:e3:40:83:62:e9:d4:33:1e:0f:99:e9:
3d:70:c2:3b:61:8e:af:c0:0f:63:b2:46:7f:ca:4d:9b:5b:77:
34:63:17:ff:20:00:c0:80:58:ba:e8:81:a4:81:54:1a:0c:98:
e5:46:af:4a:5b:3a:49:38:4f:a9:89:a7:ac:59:38:c6:c2:d4:
de:6e:a1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:05 2025 by rpki-client