Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uaZ48ti8ERDntVJnS8CMoa75Bgw.roa
File: uaZ48ti8ERDntVJnS8CMoa75Bgw.roa (raw, json)
Hash identifier: zO48/i4oY9tmx1SeXeasmDPBBnLyDzw7HmVwhVskbTc=
Subject key identifier: B9:A6:78:F2:D8:BC:11:10:E7:B5:52:67:4B:C0:8C:A1:AE:F9:06:0C
Certificate issuer: /CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Certificate serial: 01856E6FAE8BAD179703884B284D0B586F22
Authority key identifier: B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uaZ48ti8ERDntVJnS8CMoa75Bgw.roa
Signing time: Sun 01 Jan 2023 17:44:50 +0000
ROA not before: Sun 01 Jan 2023 17:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205645
IP address blocks: 5.59.68.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:6f:ae:8b:ad:17:97:03:88:4b:28:4d:0b:58:6f:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Validity
Not Before: Jan 1 17:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9a678f2d8bc1110e7b552674bc08ca1aef9060c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:46:ad:5b:03:54:3b:64:34:29:c3:fb:74:c2:
1a:b2:69:89:b2:60:fa:1a:13:87:7b:dc:65:0d:23:
4e:f0:d2:5d:82:9b:d2:ba:3a:2a:36:ec:26:69:e3:
11:05:57:3b:f6:8e:0c:1b:1b:dc:f0:1f:2f:3e:6c:
79:d7:e3:b9:d0:0d:e9:f9:4e:fd:9a:1d:2e:47:76:
55:f3:db:0e:0b:11:0b:1c:b7:58:d6:a7:3c:78:4a:
73:17:45:01:cd:2c:8f:af:96:22:4b:f8:9e:72:9e:
7f:07:83:94:45:7b:43:48:f0:f6:70:b1:ff:85:e6:
b8:62:91:bf:91:7b:a0:ac:72:cc:df:3d:67:a1:f2:
46:64:e7:f0:04:93:18:42:ec:36:5f:bd:56:83:e8:
93:95:cb:58:bd:cd:59:a6:3b:68:c5:22:0c:0d:d8:
07:d2:8f:f1:3c:80:35:1d:2a:c7:7f:9d:c3:0e:4b:
46:54:5c:9f:74:01:24:e9:4e:14:8d:90:cb:44:56:
5b:9b:3d:04:04:9a:f9:6a:72:ac:9a:d7:09:44:32:
ae:d6:14:47:b4:f7:99:14:4b:a4:e2:cd:21:98:3f:
84:0b:c9:42:4e:66:f4:3e:88:c8:a4:fd:7c:b8:d8:
66:77:97:f8:68:42:c3:27:d4:ad:24:af:a4:14:86:
02:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A6:78:F2:D8:BC:11:10:E7:B5:52:67:4B:C0:8C:A1:AE:F9:06:0C
X509v3 Authority Key Identifier:
keyid:B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uaZ48ti8ERDntVJnS8CMoa75Bgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.59.68.0/22
Signature Algorithm: sha256WithRSAEncryption
37:49:25:58:45:9b:40:d8:e6:2d:5f:2a:41:68:0e:47:84:2c:
5e:1a:91:74:20:1e:d7:1a:16:e3:cf:f0:90:9b:e5:17:b8:c8:
51:c0:2e:c2:d5:53:ac:04:57:aa:a0:bb:e8:52:dc:43:00:11:
e6:8e:c9:9a:17:0d:46:6b:47:ae:c0:55:17:08:77:cf:cd:27:
11:d1:76:bb:b9:d5:36:63:85:eb:8b:eb:89:cd:5a:03:61:d2:
f1:36:b5:78:84:29:c1:6a:30:ac:b2:eb:be:45:41:7e:c9:44:
89:d3:b1:21:e5:e5:2d:9e:06:9e:27:95:4d:e9:79:93:23:f4:
9a:08:5c:c5:7d:d9:c5:1d:e9:11:3c:66:9e:bb:2a:92:65:0e:
7b:0c:a1:c2:11:9c:38:91:e0:5f:97:fb:09:1d:3b:e2:31:14:
05:70:38:1e:c1:e0:5a:40:f7:f3:82:54:ad:b1:f3:6b:c1:71:
88:2b:96:8d:46:bc:f0:56:3b:f9:0c:b4:64:b9:a1:5a:a5:66:
ad:9d:c2:7e:a6:e6:c9:18:55:c0:b9:e3:62:b7:99:79:3e:f1:
2e:a0:49:9b:3b:27:6b:f0:79:3b:61:9d:72:e7:1b:d4:b9:16:
d8:69:3d:67:3f:a4:b6:52:96:e2:16:cc:fb:21:21:15:0b:0b:
fc:1b:3a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:56 2025 by rpki-client