Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/ptjrNeWdHPDlkPgfkaaAB6ScZ2Q.roa
File: ptjrNeWdHPDlkPgfkaaAB6ScZ2Q.roa (raw, json)
Hash identifier: 2CW1o2UvD+z3OMveHMnIYfP68JD4pqHUyFJ5Jq+X9cE=
Subject key identifier: A6:D8:EB:35:E5:9D:1C:F0:E5:90:F8:1F:91:A6:80:07:A4:9C:67:64
Certificate issuer: /CN=ffe70693454bc33485dec69d219d0502654ac04a
Certificate serial: 018C5CE207F974B62FF34C7ADDD77D3CCE6F
Authority key identifier: FF:E7:06:93:45:4B:C3:34:85:DE:C6:9D:21:9D:05:02:65:4A:C0:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/ptjrNeWdHPDlkPgfkaaAB6ScZ2Q.roa
Signing time: Tue 12 Dec 2023 07:16:06 +0000
ROA not before: Tue 12 Dec 2023 07:16:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57099
IP address blocks: 5.181.57.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5c:e2:07:f9:74:b6:2f:f3:4c:7a:dd:d7:7d:3c:ce:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe70693454bc33485dec69d219d0502654ac04a
Validity
Not Before: Dec 12 07:16:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6d8eb35e59d1cf0e590f81f91a68007a49c6764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ad:8f:c3:c9:2f:a1:d7:bd:a3:38:71:27:1b:
3d:63:ec:76:10:a4:c3:05:9e:a0:04:87:d8:eb:de:
95:b0:f5:a4:97:2b:c8:bf:4a:79:00:17:2e:7f:fe:
a4:f5:77:16:d0:f4:65:b4:58:27:74:55:ad:aa:ce:
25:04:57:54:68:25:cd:28:42:04:71:c8:00:de:2f:
c2:1d:43:5c:96:42:01:f9:3c:a0:39:cd:b7:a1:3d:
f9:c0:4b:48:8f:cb:30:19:f9:dc:c1:55:e8:29:34:
e2:91:64:be:3e:f7:2e:7b:06:b2:37:ec:ed:43:4a:
49:fc:31:46:8e:a4:b5:01:6a:fb:9e:e9:9f:e8:36:
bb:54:6b:5e:70:49:eb:9b:2f:b9:bf:c1:f4:86:8d:
58:5f:d2:72:f6:8b:84:80:9f:5d:fc:63:56:b7:98:
db:b5:05:6f:45:19:5d:a3:a1:c8:9c:05:9c:af:57:
f7:45:df:07:bc:08:4b:5d:01:8d:7c:a5:ac:44:32:
08:2e:8e:c5:52:55:b6:82:f9:d2:35:f1:3f:15:12:
bd:ad:82:c1:b6:75:c5:a5:fe:d5:1f:2f:e7:5a:4d:
ce:aa:47:5c:6a:dd:10:f4:21:0b:9c:18:e5:c4:2b:
f7:0d:62:1a:3c:79:a8:b8:c2:cd:d0:3d:58:96:ba:
55:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D8:EB:35:E5:9D:1C:F0:E5:90:F8:1F:91:A6:80:07:A4:9C:67:64
X509v3 Authority Key Identifier:
keyid:FF:E7:06:93:45:4B:C3:34:85:DE:C6:9D:21:9D:05:02:65:4A:C0:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/ptjrNeWdHPDlkPgfkaaAB6ScZ2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.57.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:72:50:95:8f:c4:34:d9:76:40:58:f2:0f:cf:58:f8:b9:58:
51:a9:03:f3:37:e4:75:b4:41:e6:9f:8a:00:17:34:85:a3:fa:
2d:20:5c:12:63:b6:6d:38:6e:7e:00:9a:ca:57:ce:f3:d5:e4:
7d:86:d6:cc:96:f4:4a:d0:5b:81:93:b1:a4:81:04:71:14:17:
46:42:bd:51:36:6d:7a:83:76:d6:65:ee:7b:7c:b0:43:b8:c2:
6e:e5:4a:99:14:04:95:05:d6:5c:14:71:45:61:61:f2:30:78:
ef:a3:f6:ba:60:20:25:6c:13:fe:f1:4b:2f:ad:95:50:e3:ff:
9d:91:d8:83:ad:44:cd:c3:07:10:f6:4c:a0:4c:c8:89:6b:9a:
4a:6f:0c:56:6a:d0:f4:38:92:15:8f:09:85:0e:66:c9:56:c5:
61:39:3e:4b:fb:17:4d:36:49:42:1f:a6:95:ed:b9:11:4c:32:
bb:f1:39:32:cb:69:58:1a:0d:9c:a2:92:6c:26:05:c2:df:93:
6b:c4:c2:a0:63:06:e0:26:4c:5f:88:6a:07:5d:25:91:8f:6e:
7c:50:60:7a:21:f9:0c:5c:8d:76:6b:db:6b:14:2e:2b:f0:f2:
65:47:d1:a6:95:72:96:29:6f:6c:70:69:d9:f3:c0:96:20:bd:
68:c3:63:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:48 2025 by rpki-client