Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/0zRBNG2Ao8DghbVKMXGkepFz9LE.roa
File: 0zRBNG2Ao8DghbVKMXGkepFz9LE.roa (raw, json)
Hash identifier: d0Fjdg4gVGmEQGehRhN7LQwVOFdC4n2nLtrSDIbXtRg=
Subject key identifier: D3:34:41:34:6D:80:A3:C0:E0:85:B5:4A:31:71:A4:7A:91:73:F4:B1
Certificate issuer: /CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Certificate serial: 0182B1CB6EF03EFF3679FE10E80FCFEF7CB5
Authority key identifier: B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/0zRBNG2Ao8DghbVKMXGkepFz9LE.roa
Signing time: Thu 18 Aug 2022 16:31:15 +0000
ROA not before: Thu 18 Aug 2022 16:31:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50083
IP address blocks: 5.59.224.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b1:cb:6e:f0:3e:ff:36:79:fe:10:e8:0f:cf:ef:7c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Validity
Not Before: Aug 18 16:31:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d33441346d80a3c0e085b54a3171a47a9173f4b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:37:6b:4d:7c:56:59:5b:b5:ff:33:9f:e3:fb:
ec:01:f1:16:5c:52:7e:73:db:73:eb:e9:d2:cc:53:
cd:f1:5e:65:b0:ad:68:f4:25:64:35:c4:18:1d:ab:
fd:49:90:46:52:db:ea:cd:d0:29:86:1d:fd:76:bd:
32:4b:73:4a:e0:5d:a3:a4:b4:ef:41:7d:f7:a4:4b:
6a:37:2a:ef:da:ff:6c:84:d9:3d:7a:81:fa:74:62:
0a:a7:61:ad:1b:83:94:6b:fd:d0:f6:56:9e:26:6e:
e0:41:6c:29:8d:73:05:30:de:b2:13:f9:69:6f:36:
07:25:08:bb:43:b7:6c:39:68:99:cd:0f:bc:6b:68:
cb:37:ec:e9:c4:9f:41:a4:4c:36:07:08:d5:5c:57:
36:f0:5f:6a:a0:4f:c2:14:75:be:d7:ff:97:0a:07:
af:b6:a7:f6:d3:83:2c:c2:5c:44:10:22:e3:f1:78:
dd:01:ef:b1:df:77:5f:77:3c:62:77:a2:77:e5:99:
80:33:c8:02:41:1c:85:fa:28:2d:51:b0:fd:91:e8:
05:a9:ca:a0:d5:0c:e6:30:72:81:9f:ba:a0:0b:4e:
5d:54:c3:56:c1:54:b4:2b:f8:32:3e:ed:ec:68:30:
88:d6:29:c3:58:62:8c:70:de:e2:eb:f5:70:a2:ed:
7f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:34:41:34:6D:80:A3:C0:E0:85:B5:4A:31:71:A4:7A:91:73:F4:B1
X509v3 Authority Key Identifier:
keyid:B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/0zRBNG2Ao8DghbVKMXGkepFz9LE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.59.224.0/22
Signature Algorithm: sha256WithRSAEncryption
87:83:39:d8:e2:22:4f:44:81:84:94:ed:cb:d7:1a:03:68:88:
57:e8:84:20:c2:7a:e8:ae:a5:27:9b:bb:a8:cb:26:39:cc:06:
6c:25:30:3b:3c:75:30:3a:64:98:13:23:bf:5c:71:38:3e:1e:
88:84:69:cb:bc:07:08:c4:a0:09:2b:8a:30:67:6f:5b:4d:53:
32:da:b9:ec:44:c4:da:03:50:0b:d9:0c:4a:8e:f9:da:c8:f3:
51:90:95:cb:47:0d:bb:28:4a:24:b0:eb:55:3c:92:18:57:7f:
28:f8:86:a3:30:1f:bd:dc:f6:21:b8:20:d5:2f:02:b7:bc:46:
3f:0c:66:ba:01:b1:2a:9d:3f:bb:61:e2:1a:de:ec:ff:1a:4f:
c1:3e:1b:ba:53:39:91:f4:da:38:13:f6:97:aa:4b:d7:d2:a8:
c2:e6:d0:b7:69:c2:4f:2b:bf:3a:73:2f:f8:fd:f4:aa:2b:1e:
2a:6a:fc:ef:ff:67:54:1a:bc:85:eb:d4:11:87:b8:73:08:4a:
38:4d:89:6d:fa:06:20:96:de:91:a8:48:ff:c8:0a:d9:b7:28:
9f:03:5a:ca:9c:d8:68:b9:73:c7:47:24:ec:ed:2b:2b:0b:bd:
32:87:c3:af:44:b4:61:d5:82:07:92:77:3e:83:43:a4:43:78:
2f:a3:12:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:23:22 2025 by rpki-client