Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/PVm8btqIFfH3_Yj7xsQl_vuQrzY.roa
File: PVm8btqIFfH3_Yj7xsQl_vuQrzY.roa (raw, json)
Hash identifier: XS51zLAREgyEPiLvhgst8s4jPbKkctPdxMgzBV0V8zw=
Subject key identifier: 3D:59:BC:6E:DA:88:15:F1:F7:FD:88:FB:C6:C4:25:FE:FB:90:AF:36
Certificate issuer: /CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Certificate serial: 01856E6FAD70636F598D00D444FB66273827
Authority key identifier: B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/PVm8btqIFfH3_Yj7xsQl_vuQrzY.roa
Signing time: Sun 01 Jan 2023 17:44:50 +0000
ROA not before: Sun 01 Jan 2023 17:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202813
IP address blocks: 5.59.64.0/22 maxlen: 24
5.59.172.0/24 maxlen: 24
5.59.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:6f:ad:70:63:6f:59:8d:00:d4:44:fb:66:27:38:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Validity
Not Before: Jan 1 17:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d59bc6eda8815f1f7fd88fbc6c425fefb90af36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:67:77:61:d1:90:60:d6:3b:a8:5c:a6:a5:3a:
a3:87:2c:42:0d:36:d1:df:0a:bb:af:0b:07:39:66:
b2:4e:92:71:fc:0d:c5:5d:a0:00:73:29:3e:3d:b9:
ee:1b:76:bd:ac:32:a7:9c:3d:13:dc:c7:ce:45:32:
3e:fb:1a:a1:4f:16:46:87:47:f5:98:4d:df:14:09:
50:8c:38:55:bf:b9:f6:3d:42:b6:5d:63:2e:cc:af:
67:9f:a6:90:98:bb:42:c1:c7:66:cf:72:6c:9a:d5:
f2:be:6b:6d:fa:b6:38:7c:e4:f4:d8:4a:b3:56:55:
5c:1b:ac:ec:77:9e:f9:36:ea:ec:68:7b:9b:1b:76:
1e:a4:34:b0:e8:cf:54:81:82:fc:cf:44:9b:2d:86:
fa:f1:4b:6f:62:99:56:0f:8a:6b:14:08:42:fb:90:
d1:82:a9:d5:36:e1:f3:d4:c7:0d:26:95:4f:99:da:
e4:e7:cd:56:fb:73:62:37:f6:34:01:57:e6:d8:e3:
7a:44:31:e2:22:dc:9f:48:a4:d1:21:7d:fc:87:7c:
8d:53:dd:6e:ae:ec:72:e1:6d:0d:03:1f:d7:f7:63:
30:d4:51:8f:4a:19:bf:e1:87:c4:b5:f6:0b:1f:87:
26:3e:af:16:af:9a:2b:13:89:b4:f7:a5:49:c2:d7:
b5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:59:BC:6E:DA:88:15:F1:F7:FD:88:FB:C6:C4:25:FE:FB:90:AF:36
X509v3 Authority Key Identifier:
keyid:B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/PVm8btqIFfH3_Yj7xsQl_vuQrzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.59.64.0/22
5.59.172.0/23
Signature Algorithm: sha256WithRSAEncryption
67:5d:51:4c:7d:ea:43:29:e8:06:c0:0f:32:57:84:9e:d4:bf:
c5:ad:09:e2:cc:9f:c2:02:51:14:70:57:53:33:03:10:ed:e0:
7b:5f:1f:9d:b7:02:10:1e:05:38:61:75:8b:d1:47:c5:c5:1d:
67:58:b8:13:d7:6b:62:df:15:5d:89:9d:7d:aa:42:71:d1:09:
52:e0:32:b2:71:6f:da:7b:04:1a:1a:cf:79:57:c7:f0:2d:85:
42:8f:e8:39:56:7f:38:f6:3a:85:2c:ef:81:f8:d9:a3:d5:de:
32:52:ed:09:e2:88:04:f6:34:be:c3:e5:c4:1a:27:06:55:9b:
7d:48:c3:44:ab:ca:30:28:a6:8f:bb:42:1f:f7:fb:5f:7d:c7:
b3:b7:20:4b:7f:b4:36:30:73:1c:8a:51:d9:17:01:dd:fb:3f:
28:ee:52:4b:9c:c5:c9:0a:cf:88:b7:34:29:41:12:ac:81:63:
9d:34:54:13:54:4e:a7:15:65:35:2b:7b:18:b8:f0:8c:0f:b9:
80:01:d4:f9:d1:7d:a8:ac:60:8d:3b:b6:4c:83:e5:cc:fb:a9:
7c:aa:f1:52:47:66:92:e6:a8:a7:21:59:83:59:ac:52:9b:af:
eb:13:24:0e:a7:b3:b5:ce:12:f1:c0:03:f7:68:ea:4c:6f:9b:
d3:84:37:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:31:47 2025 by rpki-client