Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/jBmwji6xRsOjfbF47grhr8v3-XY.roa
File: jBmwji6xRsOjfbF47grhr8v3-XY.roa (raw, json)
Hash identifier: KM3j4kFEg7rqECHxzmV2LKH21aDIBk0jb2YxGwivpD8=
Subject key identifier: 8C:19:B0:8E:2E:B1:46:C3:A3:7D:B1:78:EE:0A:E1:AF:CB:F7:F9:76
Certificate issuer: /CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Certificate serial: 01838A4C4547726DB58097C76E31C5C90CA2
Authority key identifier: B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/jBmwji6xRsOjfbF47grhr8v3-XY.roa
Signing time: Thu 29 Sep 2022 17:29:57 +0000
ROA not before: Thu 29 Sep 2022 17:29:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212109
IP address blocks: 5.59.182.0/24 maxlen: 24
5.59.241.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:8a:4c:45:47:72:6d:b5:80:97:c7:6e:31:c5:c9:0c:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Validity
Not Before: Sep 29 17:29:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c19b08e2eb146c3a37db178ee0ae1afcbf7f976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:50:da:7c:1c:3d:ed:24:54:76:3e:cf:ea:7e:
e7:25:ae:9f:b6:7a:3e:2e:ba:65:7e:f7:0d:4e:c0:
e2:76:83:ab:fa:3f:a5:79:6e:4d:04:92:14:00:89:
e0:0c:49:91:c3:95:ec:f6:75:3f:63:2b:ca:0c:d5:
9b:77:bd:75:aa:16:91:d7:d8:89:e5:ae:93:0d:bc:
d5:38:8f:c6:4a:71:7f:06:0d:18:b9:2b:7e:07:7c:
e4:f6:c9:0c:3a:a0:5b:9a:8a:5a:d3:72:70:32:bb:
a7:8d:1d:af:29:be:a5:6f:6e:5a:f2:ab:3c:37:91:
e9:dd:e1:18:eb:5e:8b:23:ac:c2:f6:cc:3c:ee:42:
7a:c8:78:a8:07:28:e0:99:6c:9d:85:31:79:f7:86:
eb:7c:c2:f5:e7:8c:b2:cd:4b:f0:f9:7b:7c:55:18:
30:57:c1:f8:38:70:8c:49:48:e2:24:e5:a2:fd:04:
8b:1d:0d:43:e5:e8:b4:6f:7b:b2:0a:fe:58:23:77:
d2:5c:ed:78:92:0e:f8:c5:5b:c8:f3:88:dd:ed:de:
fb:2f:dc:4f:8e:c6:56:83:a3:b4:6b:03:06:6b:4f:
42:ca:61:5b:1f:6a:db:06:8a:db:8a:32:78:dd:d7:
26:1b:f1:cc:21:90:88:73:e0:dc:d7:87:15:dc:e0:
43:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:19:B0:8E:2E:B1:46:C3:A3:7D:B1:78:EE:0A:E1:AF:CB:F7:F9:76
X509v3 Authority Key Identifier:
keyid:B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/jBmwji6xRsOjfbF47grhr8v3-XY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.59.182.0/24
5.59.241.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:ae:78:21:12:b4:57:a4:b2:73:f6:aa:3f:6c:00:99:80:dc:
c9:c7:04:4a:3e:51:fc:ae:bc:29:0b:d4:db:13:32:86:65:25:
ce:66:77:07:09:c6:d4:30:73:17:35:ea:b3:7e:cb:80:34:67:
a6:01:1c:b6:a1:b3:e3:eb:e8:f5:0a:23:da:15:cf:8a:86:73:
42:85:13:6c:69:4f:3a:3a:8c:80:92:a5:e7:30:5c:64:e6:5c:
f6:da:ea:d8:bb:8e:10:2b:12:7e:fd:3f:bd:2b:d1:72:7e:65:
28:7b:3e:ce:29:26:1d:c8:a4:c5:b8:6e:04:a3:c4:76:c6:b1:
80:75:fe:b0:b4:7e:f0:b2:cc:73:1f:09:43:a1:b2:6e:f8:00:
63:e0:98:4e:24:64:e6:c4:69:a6:ae:e9:11:73:0e:13:9d:a6:
36:3a:98:44:8a:df:50:b9:9b:0c:39:7f:14:41:bc:3b:f3:75:
8c:cb:1d:90:44:34:6f:bb:d5:1f:70:05:a2:eb:c7:c2:49:ef:
6d:f0:cf:43:f6:5b:cf:aa:e8:6d:a9:d9:9e:1c:ca:17:bc:9a:
58:02:a7:d3:a7:7b:36:03:df:93:f3:08:f7:e6:b5:83:4c:70:
02:43:38:5d:7e:f3:4a:07:e8:37:fa:39:f2:2b:fe:bb:0c:6a:
75:3e:fa:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:52 2024 by rpki-client on console-ams.rpki-client.org