Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/63Z-Gu_XWOujV3iwyhFpiQfRJZc.roa
File: 63Z-Gu_XWOujV3iwyhFpiQfRJZc.roa (raw, json)
Hash identifier: U51B6AQPPGiIqWJMCKcHkAtZMxdqP5hj5OShKWZH79c=
Subject key identifier: EB:76:7E:1A:EF:D7:58:EB:A3:57:78:B0:CA:11:69:89:07:D1:25:97
Certificate issuer: /CN=57b80e60b5adf45aeba5c0c8abccc63997a0f1db
Certificate serial: 1922BE5E
Authority key identifier: 57:B8:0E:60:B5:AD:F4:5A:EB:A5:C0:C8:AB:CC:C6:39:97:A0:F1:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7gOYLWt9FrrpcDIq8zGOZeg8ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/63Z-Gu_XWOujV3iwyhFpiQfRJZc.roa
Signing time: Sat 01 Jan 2022 06:53:00 +0000
ROA not before: Sat 01 Jan 2022 06:53:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49902
IP address blocks: 213.55.0.0/18 maxlen: 18
109.122.128.0/18 maxlen: 18
5.57.96.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 421707358 (0x1922be5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57b80e60b5adf45aeba5c0c8abccc63997a0f1db
Validity
Not Before: Jan 1 06:53:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb767e1aefd758eba35778b0ca11698907d12597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6c:42:6a:3d:8b:85:4c:88:3b:11:d9:40:02:
ad:3b:f9:7b:b5:f5:c1:b8:cf:45:25:f6:1b:bb:f2:
0c:78:fa:c4:de:74:74:85:1b:97:1e:94:64:a6:ae:
2e:01:29:9e:a7:89:f6:80:b1:51:35:81:24:82:91:
b9:b2:4f:d4:2f:f0:d2:11:8c:4b:a9:87:25:17:2d:
63:1a:9d:f1:46:86:9c:cb:6b:1b:e6:e3:3b:9d:01:
9b:61:51:27:73:21:10:a5:37:89:db:1a:02:a0:f9:
a1:46:bc:34:8c:4b:69:ca:66:bf:3d:41:02:f2:da:
44:a8:04:0e:63:61:58:e8:3d:e6:b5:30:52:36:f9:
5c:56:c4:0a:70:cf:0c:f8:b5:64:4e:28:a5:18:3c:
5d:d9:ab:e0:b2:26:c3:e1:ab:c7:1a:61:d5:12:7e:
68:6d:43:8b:62:1e:41:5b:fd:b0:64:56:40:6d:9f:
17:f6:8f:9a:c9:ac:39:f1:0d:18:74:72:42:cb:dc:
4f:d0:f2:04:f0:be:44:5f:15:6a:67:df:84:78:49:
ec:5d:ae:d5:1c:48:b8:48:1b:c2:91:78:2b:71:6e:
b6:df:ed:fa:1e:bc:96:6b:13:85:72:47:2a:8f:0b:
31:ec:47:e0:77:89:55:a1:08:b4:ce:d3:01:ec:d3:
89:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:76:7E:1A:EF:D7:58:EB:A3:57:78:B0:CA:11:69:89:07:D1:25:97
X509v3 Authority Key Identifier:
keyid:57:B8:0E:60:B5:AD:F4:5A:EB:A5:C0:C8:AB:CC:C6:39:97:A0:F1:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7gOYLWt9FrrpcDIq8zGOZeg8ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/63Z-Gu_XWOujV3iwyhFpiQfRJZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/V7gOYLWt9FrrpcDIq8zGOZeg8ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.96.0/19
109.122.128.0/18
213.55.0.0/18
Signature Algorithm: sha256WithRSAEncryption
11:73:02:50:42:61:43:e3:9e:20:de:77:0f:9f:04:81:54:40:
23:92:04:70:0b:dc:c3:b8:d6:f8:12:18:07:e5:25:c5:0a:73:
a4:27:71:89:b1:39:a7:ad:66:0b:99:69:1b:51:4d:34:33:64:
3b:7e:0b:f7:3c:79:eb:e5:cf:7c:6b:19:f6:b5:cc:1f:e8:80:
7b:cf:06:fb:2b:d7:95:03:1d:a6:58:1d:b6:5c:d3:be:f2:08:
08:68:7e:96:85:eb:39:d4:b7:ee:e9:02:64:43:18:9a:b8:a7:
ae:3e:8c:7a:7b:9a:50:2c:68:1b:ca:2e:57:c4:62:39:a2:4e:
6e:d2:99:94:14:01:c9:7a:ef:d8:05:40:f2:8d:4b:21:a0:b2:
d3:6b:d7:62:17:c1:e7:62:f2:da:28:f0:4d:57:b9:1c:06:94:
f5:de:19:92:7b:fb:5d:4b:87:63:80:06:d8:82:45:d5:4c:20:
0f:59:1e:87:96:fa:86:8a:b7:59:85:9e:87:6d:91:59:ed:93:
93:4a:67:25:8a:02:39:24:4d:92:90:4e:0b:2b:db:bb:71:bc:
0c:74:d0:03:ff:df:16:3f:bf:94:77:8d:67:32:be:bc:c5:5e:
45:e2:d9:36:67:56:76:c2:99:84:aa:41:e1:35:59:aa:ce:f3:
fd:16:c0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:57 2024 by rpki-client on console-ams.rpki-client.org