Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/JZuI6-frL-Km-XtvvPMSw4HBE04.roa
File: JZuI6-frL-Km-XtvvPMSw4HBE04.roa (raw, json)
Hash identifier: G7oiG9eocl0yTCt5fZIH7HA10LDypqgi0kk9auT6wrg=
Subject key identifier: 25:9B:88:EB:E7:EB:2F:E2:A6:F9:7B:6F:BC:F3:12:C3:81:C1:13:4E
Certificate issuer: /CN=5fbe65ae23f207fa695255f55a907ac1608be094
Certificate serial: 09366E2F
Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/JZuI6-frL-Km-XtvvPMSw4HBE04.roa
Signing time: Sat 01 Jan 2022 10:02:54 +0000
ROA not before: Sat 01 Jan 2022 10:02:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49981
IP address blocks: 5.253.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154562095 (0x9366e2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094
Validity
Not Before: Jan 1 10:02:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=259b88ebe7eb2fe2a6f97b6fbcf312c381c1134e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:15:1b:d2:19:8e:05:80:79:f5:9a:e4:08:33:
95:7c:2c:31:a5:0d:4e:de:df:2d:7c:54:a6:80:50:
66:1d:92:6a:a6:28:91:85:52:a7:76:fd:d6:ca:77:
b2:fa:1f:fe:85:56:b0:28:f2:2b:f3:bb:f7:4c:20:
f9:d0:bf:08:d8:af:67:f0:83:31:ff:ab:bf:de:a4:
19:24:22:79:51:fa:b9:52:51:d3:4b:71:29:fa:0e:
d4:a6:48:6f:2a:40:2a:6f:c4:49:dd:5e:68:4a:29:
f0:45:64:ab:39:35:48:be:26:a8:46:cf:d6:01:c8:
62:90:a0:00:ef:d8:e4:16:3c:c5:5d:44:fc:22:a4:
71:67:72:ec:51:89:31:34:69:cc:bf:40:5e:1f:66:
16:b7:e2:06:a4:83:e8:44:f5:9a:33:9b:84:82:e1:
49:0e:6f:3d:68:22:4e:66:e6:cf:7e:0b:8e:2d:21:
be:80:e5:89:37:18:d4:d8:f4:62:a7:cd:b3:31:bd:
d8:81:55:29:15:32:78:1e:3f:fd:15:84:ac:90:90:
de:bf:14:50:bd:fd:56:41:cd:71:70:22:fa:1d:73:
67:53:dc:6b:4d:bb:d7:07:a8:1d:6c:05:c1:8a:90:
7a:db:37:30:88:7d:0c:91:34:9f:b5:45:5a:e4:bb:
10:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:9B:88:EB:E7:EB:2F:E2:A6:F9:7B:6F:BC:F3:12:C3:81:C1:13:4E
X509v3 Authority Key Identifier:
keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/JZuI6-frL-Km-XtvvPMSw4HBE04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.63.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:b4:39:5d:1a:20:8b:77:05:a2:fd:88:75:b3:62:b6:0e:2a:
27:a5:2c:34:da:9d:56:ea:f6:83:18:d2:91:4b:c7:4c:26:cf:
f6:41:9f:79:ae:bb:12:66:a9:8b:93:17:b5:1c:01:c1:0a:b4:
95:fc:73:f1:f1:d8:52:8a:1f:85:1d:8c:e9:28:d3:0d:7e:1e:
63:4d:dc:90:53:dc:89:6d:c2:65:1f:c8:a4:de:cb:22:e0:6e:
41:ec:02:48:6f:93:ac:b3:0a:08:97:8d:3e:1d:16:a9:80:5c:
13:60:23:92:8f:42:30:fb:b1:44:06:91:56:59:e7:4f:03:7a:
20:5b:c3:2a:12:06:72:a0:49:ba:66:e2:0f:f3:f5:04:e6:62:
5a:74:d0:5c:a8:0d:14:a5:f9:3d:2b:f9:2a:10:11:fe:c0:32:
cf:1b:ec:b3:fd:d3:3f:d9:e7:18:5d:30:d3:f1:20:f3:c7:0c:
f0:53:53:0f:6a:50:18:37:ec:6c:1d:94:8c:76:16:4e:70:25:
d1:fc:d9:98:01:57:9f:4b:93:56:87:62:d7:2e:e2:e1:17:b5:
ff:79:ef:8c:01:7e:a2:95:bc:fb:1f:2d:32:5a:b2:f2:3b:b3:
0a:0e:57:a8:16:5a:c6:f3:8a:89:4c:31:59:77:15:39:a7:df:
57:92:01:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:02 2024 by rpki-client on console-ams.rpki-client.org