Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/B1KBGShoVGfkDB3bquO_F4ctTJ8.roa
File: B1KBGShoVGfkDB3bquO_F4ctTJ8.roa (raw, json)
Hash identifier: 4BUrL6gPQaaiDa7v6MDW9c0On30JswY6lhDniCyUtK4=
Subject key identifier: 07:52:81:19:28:68:54:67:E4:0C:1D:DB:AA:E3:BF:17:87:2D:4C:9F
Certificate issuer: /CN=5bb1c57055c29d669f289a9f68f392823942132a
Certificate serial: 03E663B4
Authority key identifier: 5B:B1:C5:70:55:C2:9D:66:9F:28:9A:9F:68:F3:92:82:39:42:13:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/B1KBGShoVGfkDB3bquO_F4ctTJ8.roa
Signing time: Tue 03 May 2022 10:06:39 +0000
ROA not before: Tue 03 May 2022 10:06:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202709
IP address blocks: 5.253.213.0/24 maxlen: 24
5.253.212.0/22 maxlen: 22
5.253.212.0/24 maxlen: 24
5.253.215.0/24 maxlen: 24
5.253.214.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65430452 (0x3e663b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bb1c57055c29d669f289a9f68f392823942132a
Validity
Not Before: May 3 10:06:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0752811928685467e40c1ddbaae3bf17872d4c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:18:86:84:8f:55:1d:d2:19:be:18:be:da:e0:
ce:2a:b2:6d:ac:78:07:34:c5:a5:2e:0e:58:4e:af:
ab:f0:29:55:92:d3:7b:a1:45:25:c5:bd:16:40:31:
d0:28:c0:f9:5b:9b:92:a9:95:12:82:35:f5:d3:ad:
27:f1:64:2d:e0:24:cd:68:1f:d0:23:13:f9:ae:6f:
58:05:d8:c2:21:2e:da:23:23:a4:eb:0b:c4:4a:50:
16:db:e5:8a:16:c1:11:43:bb:7d:3d:4d:c2:72:90:
4b:fd:8d:e6:7d:a6:aa:81:ef:fc:46:a5:54:90:78:
6f:52:52:95:ab:b4:2c:32:94:1e:b1:d1:cd:e2:b5:
d5:d2:68:0a:39:ae:86:48:33:16:fa:e0:fe:7b:0c:
f1:d7:03:fe:2a:c7:6c:36:2e:99:fa:3f:65:87:c7:
58:22:b7:ce:20:03:26:5f:15:fa:89:ec:0d:ad:7a:
59:b1:89:01:27:14:9a:54:71:92:00:c4:a2:b2:0f:
f0:a4:8e:bb:a9:fa:db:ef:5b:19:28:21:3d:ff:5c:
eb:7b:81:a2:02:ff:53:7b:e1:ae:6d:46:56:c3:c4:
fb:15:04:dd:86:fa:a1:b3:f3:d1:24:a7:8d:66:15:
e0:df:93:59:db:63:bd:4f:92:2b:21:1c:72:c7:b4:
03:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:52:81:19:28:68:54:67:E4:0C:1D:DB:AA:E3:BF:17:87:2D:4C:9F
X509v3 Authority Key Identifier:
keyid:5B:B1:C5:70:55:C2:9D:66:9F:28:9A:9F:68:F3:92:82:39:42:13:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/B1KBGShoVGfkDB3bquO_F4ctTJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.212.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:8b:12:9f:84:d3:03:06:ba:70:28:37:d3:9c:65:8b:eb:90:
8b:58:f7:9f:ca:f8:19:a3:32:e4:31:18:23:c0:6b:d6:7f:ca:
2b:29:a6:5f:0c:b8:43:ae:d3:bf:64:1e:8d:35:90:2d:51:f3:
fb:4d:6e:fa:b8:54:4d:38:e1:b2:b5:64:ed:64:61:70:40:2e:
21:f4:27:f0:ea:7e:d5:3a:0c:66:be:b6:e7:9f:4e:4c:e1:74:
81:a0:e2:2e:be:5a:ed:09:2b:42:51:58:2a:41:48:08:3b:61:
34:3e:1d:74:23:06:10:2c:ca:db:e4:21:0e:fc:fe:93:58:f7:
e4:76:34:56:ec:38:e5:6e:32:73:7b:06:4a:85:9a:29:2e:5a:
92:c4:a3:8f:67:4b:4e:4a:c1:20:85:79:4e:f6:a0:3e:69:1e:
3b:53:1f:45:fa:dc:bd:37:18:9c:b4:57:61:8c:4a:25:94:2b:
94:fe:15:b5:e1:97:10:c5:3e:26:3d:eb:5f:d8:83:2c:a3:5a:
aa:66:7d:3d:f0:0a:f1:e1:36:44:fc:9d:ba:c9:1e:b1:66:8c:
7a:33:be:3a:99:64:98:89:a7:63:fb:fb:4a:02:84:42:5a:e0:
c6:15:44:d7:ad:1e:39:4c:2a:95:53:8f:e4:35:49:b7:17:d2:
d0:ff:f3:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:58 2024 by rpki-client on console-ams.rpki-client.org