Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/PtJt62VTOUEz2AXXeqXqhdG2K64.roa
File: PtJt62VTOUEz2AXXeqXqhdG2K64.roa (raw, json)
Hash identifier: DpAfqsZCyuWIkKmrGaZmcSmUqE4W9XZsChqhBEVYP9w=
Subject key identifier: 3E:D2:6D:EB:65:53:39:41:33:D8:05:D7:7A:A5:EA:85:D1:B6:2B:AE
Certificate issuer: /CN=2631166de785a3531bdc8361f1190a8369a7ed6a
Certificate serial: 3807D345
Authority key identifier: 26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/PtJt62VTOUEz2AXXeqXqhdG2K64.roa
Signing time: Sat 01 Jan 2022 04:04:06 +0000
ROA not before: Sat 01 Jan 2022 04:04:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 5.255.84.0/24 maxlen: 24
5.255.83.0/24 maxlen: 24
2a00:1ca8:d4::/48 maxlen: 48
2a00:1ca8:9c::/48 maxlen: 48
2a03:3f40:2::/48 maxlen: 48
2a00:1ca8:45::/48 maxlen: 48
2a00:1ca8:d3::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 940036933 (0x3807d345)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2631166de785a3531bdc8361f1190a8369a7ed6a
Validity
Not Before: Jan 1 04:04:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3ed26deb6553394133d805d77aa5ea85d1b62bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:4e:dc:d7:fc:d9:c9:33:0f:d4:9e:4b:c7:88:
6a:72:12:02:68:35:f1:c5:38:ec:9d:72:a7:e6:ba:
2e:2c:9e:d4:55:b9:a6:bf:58:c7:31:78:25:68:8c:
36:ab:38:dc:db:d5:ff:65:14:8f:83:70:cc:b4:65:
d3:48:08:0c:44:22:75:32:97:8b:8b:25:a1:03:49:
7b:d5:f4:be:05:55:20:d2:06:81:4d:89:1d:59:0e:
0f:81:2a:3b:77:73:58:7e:50:f2:bf:25:19:7b:1d:
09:3e:57:31:53:fe:e4:e6:30:f7:3e:15:ba:5e:ee:
dc:f0:ca:90:16:a9:36:27:13:2a:28:49:4c:69:4a:
08:ea:58:bc:b2:d9:47:d5:a6:ef:fc:08:d9:3e:ec:
2f:78:24:00:2b:ff:64:b6:ec:29:4b:f8:9a:21:1a:
d4:56:51:a9:4c:6b:ad:0d:ac:f6:84:86:4d:5e:a4:
b6:d3:cc:f1:2a:40:bc:4e:14:ac:18:8b:39:b5:4d:
83:bc:c7:20:83:f8:ed:16:e7:d6:f5:26:c5:b6:e9:
fa:34:b5:87:6c:f2:5b:97:ae:8c:51:37:a3:0e:65:
e0:f6:3c:1b:2f:ab:85:f2:b0:a3:41:33:4c:e5:97:
07:1a:22:36:ba:3d:5a:91:c2:0b:21:ae:53:e5:d2:
20:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D2:6D:EB:65:53:39:41:33:D8:05:D7:7A:A5:EA:85:D1:B6:2B:AE
X509v3 Authority Key Identifier:
keyid:26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/PtJt62VTOUEz2AXXeqXqhdG2K64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.255.83.0-5.255.84.255
IPv6:
2a00:1ca8:45::/48
2a00:1ca8:9c::/48
2a00:1ca8:d3::-2a00:1ca8:d4:ffff:ffff:ffff:ffff:ffff
2a03:3f40:2::/48
Signature Algorithm: sha256WithRSAEncryption
29:81:14:92:98:85:7d:42:02:59:2e:fd:7d:f8:8c:f8:5a:47:
d2:e4:76:97:c7:0a:40:3f:f0:08:1a:ab:d9:76:bd:af:a9:38:
da:56:dd:cc:47:69:ad:c0:3b:9a:46:45:91:ad:d8:43:d2:7f:
3c:b1:e8:b2:fb:aa:93:da:95:fc:2f:0c:9d:24:23:68:f6:9b:
4c:90:11:d2:25:4c:38:5b:26:d2:7a:76:ca:93:06:5d:26:5d:
f7:36:f3:98:40:23:c9:f9:0b:85:87:0b:4c:14:0c:8a:b0:26:
f2:f3:44:72:24:a4:ba:45:9f:07:8c:d0:5b:1b:8e:06:18:f7:
1f:38:d2:ad:95:8c:bf:92:58:fa:19:16:57:e8:01:66:23:f9:
ec:72:d7:76:66:a0:9d:d0:18:aa:dd:55:5f:a3:69:d0:f5:b6:
41:e1:a7:18:b9:b8:9d:ef:13:e8:a3:b3:68:52:8f:67:9d:b6:
4f:59:5b:47:34:dd:0f:4f:91:d3:1f:6c:93:9d:c2:11:f2:f1:
b6:9e:87:66:aa:f3:5f:68:6f:3e:1d:b8:34:8b:7c:65:fa:06:
b9:27:b0:26:c9:bf:82:7f:39:ac:56:e3:d3:0a:6d:6a:9e:b8:
38:8c:4d:43:c2:f5:32:7a:73:1c:31:59:2a:bb:61:25:0d:fe:
3f:05:29:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:48 2024 by rpki-client on console-fra.rpki-client.org