Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/1-YUazfhbqYcuJZq5kWTw7L7BQOE.roa
File: 1-YUazfhbqYcuJZq5kWTw7L7BQOE.roa (raw, json)
Hash identifier: b1DSLcveD/8yOwYBS0fXBjOAkz56Hl0DNIMhkePb710=
Subject key identifier: F9:85:1A:CD:F8:5B:A9:87:2E:25:9A:B9:91:64:F0:EC:BE:C1:40:E1
Certificate issuer: /CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Certificate serial: 0DBAE773
Authority key identifier: B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/1-YUazfhbqYcuJZq5kWTw7L7BQOE.roa
Signing time: Wed 16 Feb 2022 18:38:58 +0000
ROA not before: Wed 16 Feb 2022 18:38:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205645
IP address blocks: 5.59.68.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 230352755 (0xdbae773)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Validity
Not Before: Feb 16 18:38:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f9851acdf85ba9872e259ab99164f0ecbec140e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7e:44:95:38:03:59:c6:66:5b:65:50:26:7a:
81:2f:93:ac:1a:d8:88:d4:68:ac:88:70:08:27:1c:
3b:1a:fe:fd:5d:42:eb:19:37:18:ff:84:a1:08:6e:
3b:0f:e4:f6:78:76:0e:6f:2a:de:f5:34:f9:a6:81:
04:63:66:e7:d9:36:5f:68:a6:c0:2e:04:23:39:c1:
bb:a8:d1:3c:4e:83:84:62:d1:ed:93:c4:04:ac:55:
34:d0:82:47:06:45:72:c6:2f:e8:28:9c:3c:33:88:
cf:dc:0b:0d:1d:7a:6b:fd:18:e0:48:88:d3:da:16:
bb:2f:35:d1:9a:a0:c6:14:d2:5d:e1:73:9a:47:78:
68:39:20:5f:c2:be:f8:a4:23:f8:7f:db:f2:ee:7d:
9e:28:68:bc:22:34:a2:5a:7b:7c:54:c7:8e:a5:43:
4d:83:a7:03:fc:2c:ed:b1:92:75:ce:b7:3f:f1:cb:
c3:ab:7c:53:99:4c:cd:89:a4:9b:5c:af:d9:4e:ec:
38:1c:79:3d:46:25:0c:18:79:72:70:5b:0b:1b:fe:
6a:a4:e7:a9:4d:1b:7e:9e:d2:d6:eb:8c:c6:ed:21:
6b:a5:14:7b:35:b3:a6:98:bd:5e:cd:22:b4:19:d1:
a0:b0:91:3c:ed:2c:af:91:94:c2:b1:8e:d7:51:ee:
66:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:85:1A:CD:F8:5B:A9:87:2E:25:9A:B9:91:64:F0:EC:BE:C1:40:E1
X509v3 Authority Key Identifier:
keyid:B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/1-YUazfhbqYcuJZq5kWTw7L7BQOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.59.68.0/22
Signature Algorithm: sha256WithRSAEncryption
08:99:db:ab:58:fc:a6:67:9a:f6:c4:19:23:0c:a2:32:ad:c2:
28:32:ee:fa:3e:c2:55:66:30:75:37:a0:34:5f:45:3a:70:70:
df:ed:54:d8:cc:bd:d8:59:74:cd:30:61:11:54:c1:8e:28:f2:
c9:28:33:35:e7:6d:19:cc:18:58:28:46:27:60:a3:c1:11:be:
ce:04:26:6b:e4:db:a8:68:99:d7:b0:fd:81:b7:27:8a:41:9a:
1b:42:47:b6:1f:64:a6:83:45:15:8f:92:ea:e9:77:92:96:5d:
fd:5e:eb:dc:a8:b4:0b:a1:55:0e:b2:d1:84:8b:00:bf:b4:ba:
72:ad:88:26:fd:7f:1e:23:2b:d3:03:e4:4b:2a:ac:49:8a:e1:
8a:52:98:ca:92:11:48:66:51:35:54:26:a7:f3:54:95:0c:fd:
38:be:ca:3a:83:b9:f0:3b:39:61:31:98:cb:01:6d:6e:0e:f5:
0b:bf:99:89:22:b1:7b:80:8e:2e:a0:ba:91:8b:fc:b4:22:4e:
15:ef:46:39:17:0a:bf:82:34:0a:e7:2f:72:04:f0:76:dd:9d:
9d:e4:62:f2:65:93:5a:59:f0:66:db:38:09:36:e6:ba:9c:9d:
d1:4e:fd:8e:3e:a6:2b:d3:4f:8e:36:c0:7e:8c:68:62:84:a7:
49:12:bb:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:37 2024 by rpki-client on console-fra.rpki-client.org