Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/ar2Gebfc0dd4Q5KM6Mms5H9MZy4.roa
File: ar2Gebfc0dd4Q5KM6Mms5H9MZy4.roa (raw, json)
Hash identifier: u92++sh9uc07GH7bskTxE1Wlvhn2X6ddwtfOJNdGZaE=
Subject key identifier: 6A:BD:86:79:B7:DC:D1:D7:78:43:92:8C:E8:C9:AC:E4:7F:4C:67:2E
Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Certificate serial: 43A58BD1
Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/ar2Gebfc0dd4Q5KM6Mms5H9MZy4.roa
Signing time: Sat 01 Jan 2022 14:00:56 +0000
ROA not before: Sat 01 Jan 2022 14:00:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42689
IP address blocks: 5.134.192.0/21 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1134922705 (0x43a58bd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Validity
Not Before: Jan 1 14:00:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6abd8679b7dcd1d77843928ce8c9ace47f4c672e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cb:67:36:40:e9:ac:f1:b2:dc:f4:31:ce:36:
4c:90:9c:56:b4:1f:35:22:b4:bc:1f:2e:dc:27:24:
3f:1d:d1:e6:fd:18:5b:4f:dc:e4:c3:f7:77:06:3f:
ad:f3:02:75:98:07:36:24:5d:89:6f:69:ff:64:40:
df:e9:d3:28:62:81:33:8c:ef:5e:0f:04:11:17:44:
b9:8d:89:36:27:7f:93:f9:7c:bd:b5:22:17:d2:aa:
48:e2:29:55:4b:1f:3b:a3:1c:38:11:46:9f:3f:e6:
6f:92:86:b0:17:f1:46:45:28:d8:39:31:4e:af:ce:
dd:9e:7b:86:41:b2:28:7e:80:95:38:c6:4b:6f:ac:
79:b8:67:79:05:68:32:e5:bc:5c:e0:28:ff:e2:b9:
2e:71:67:c5:2c:52:4b:82:ce:0e:ac:d0:4d:f2:2f:
65:0b:0f:41:b7:29:26:98:9e:ae:42:e4:a7:b2:4b:
aa:b3:e9:6d:37:73:92:87:51:b1:06:90:ca:9f:6b:
d3:0e:4b:02:ee:9f:ce:fe:f5:37:de:07:b7:46:2d:
6c:fe:06:ce:a2:d1:81:cf:f5:0c:32:bb:7b:4f:24:
c1:22:ed:81:96:e1:5b:89:10:de:5d:42:ed:dc:c9:
c6:32:aa:20:cd:7d:45:80:64:62:08:25:3c:8c:fe:
47:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:BD:86:79:B7:DC:D1:D7:78:43:92:8C:E8:C9:AC:E4:7F:4C:67:2E
X509v3 Authority Key Identifier:
keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/ar2Gebfc0dd4Q5KM6Mms5H9MZy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.192.0/21
Signature Algorithm: sha256WithRSAEncryption
b6:4d:cc:13:a5:84:6b:6b:31:28:40:ef:a5:87:56:60:81:58:
3e:59:2c:14:fd:98:7f:d0:cd:1e:77:b1:bc:eb:df:fa:c0:01:
13:12:f7:9a:a8:ea:49:e3:03:ef:ca:25:e1:fe:a7:ba:1e:a5:
07:a9:86:08:23:fc:c0:bd:92:27:fd:d4:31:02:1e:83:31:93:
ba:f9:5c:dd:10:b9:46:d4:24:aa:73:0a:77:1f:2c:15:00:40:
a3:52:ee:a7:90:59:02:73:ce:86:2b:3c:8a:38:30:b0:11:f3:
c4:aa:cb:e6:ce:3d:9a:bf:0d:e4:b0:1d:52:eb:35:c9:ef:ac:
41:e4:28:88:64:1f:a3:1c:c7:5c:e3:86:b5:d3:90:9e:ea:58:
ae:34:49:08:d5:71:1d:46:67:9a:8c:2e:9f:e2:18:ed:84:1d:
55:13:7e:a9:21:c1:31:ed:16:88:cc:7f:c1:57:99:c1:81:5a:
47:01:d2:8e:e8:a8:d0:0b:8c:c9:2a:69:77:2d:94:b2:9e:80:
eb:27:1a:bf:25:1f:20:e8:e8:0e:7a:22:e8:61:a7:4f:34:08:
77:4d:3d:6b:03:16:b0:d4:db:7f:02:94:e8:0e:bc:1f:14:1c:
27:70:17:e4:34:e2:68:46:6a:64:7e:b7:f5:f2:3a:7f:1c:98:
61:c6:cb:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:49:48 2025 by rpki-client