Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/a_8TWOu4ZUPzbmZIOuHsDvQas3Q.roa
File: a_8TWOu4ZUPzbmZIOuHsDvQas3Q.roa (raw, json)
Hash identifier: E4gezz/wZD9ICaOzHLqnnT9A8/9Q9hb4pkHlVKezhNo=
Subject key identifier: 6B:FF:13:58:EB:B8:65:43:F3:6E:66:48:3A:E1:EC:0E:F4:1A:B3:74
Certificate issuer: /CN=0a5ec6e0660db6f625b978be0d5ee71c2dcd465a
Certificate serial: 01856D0ACA64B135FDA059EF9D62E98BA527
Authority key identifier: 0A:5E:C6:E0:66:0D:B6:F6:25:B9:78:BE:0D:5E:E7:1C:2D:CD:46:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cl7G4GYNtvYluXi-DV7nHC3NRlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/a_8TWOu4ZUPzbmZIOuHsDvQas3Q.roa
Signing time: Sun 01 Jan 2023 11:15:01 +0000
ROA not before: Sun 01 Jan 2023 11:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211420
IP address blocks: 5.255.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:ca:64:b1:35:fd:a0:59:ef:9d:62:e9:8b:a5:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a5ec6e0660db6f625b978be0d5ee71c2dcd465a
Validity
Not Before: Jan 1 11:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6bff1358ebb86543f36e66483ae1ec0ef41ab374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:61:27:3f:d4:db:75:95:c5:c0:14:96:ea:4f:
16:45:1c:3f:c1:b9:6c:87:a4:5d:e7:43:d4:4b:f7:
dc:2d:c6:56:fb:5c:0b:d4:7d:d0:32:6a:14:37:26:
5f:62:ea:92:b1:97:ea:55:42:a6:ac:31:3c:fa:1c:
b8:6b:8f:ed:77:3d:43:d5:c1:eb:04:e4:09:cc:74:
08:52:b8:e6:a0:41:f0:31:26:60:cd:15:96:06:03:
94:af:4a:f0:35:e5:c1:3c:81:fd:5a:47:b9:fa:60:
34:a2:de:df:96:4d:af:a3:bc:e0:74:81:81:76:35:
f3:3b:d4:54:48:2a:c6:88:ef:7d:e2:6d:99:cb:09:
b5:ee:a4:96:dc:53:b6:04:e8:00:4b:62:f3:b8:40:
4e:d3:46:78:93:a1:a4:26:ef:e1:63:eb:2e:53:73:
a3:11:dd:a1:74:61:38:f8:9f:52:a5:06:dd:7d:da:
ed:dc:44:79:78:b6:ac:82:ff:4b:91:dd:ff:18:e3:
6d:ca:a7:5d:0d:45:41:7f:e0:73:64:af:af:b3:44:
80:9f:61:ef:a2:2d:10:82:4c:3a:68:3b:8d:76:c6:
f5:21:f2:ac:80:d5:13:6f:7e:e6:7c:b1:e7:0f:ab:
6d:0d:43:5c:d5:84:d6:77:3a:d3:78:1a:17:5a:80:
ca:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:FF:13:58:EB:B8:65:43:F3:6E:66:48:3A:E1:EC:0E:F4:1A:B3:74
X509v3 Authority Key Identifier:
keyid:0A:5E:C6:E0:66:0D:B6:F6:25:B9:78:BE:0D:5E:E7:1C:2D:CD:46:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cl7G4GYNtvYluXi-DV7nHC3NRlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/a_8TWOu4ZUPzbmZIOuHsDvQas3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.255.60.0/24
Signature Algorithm: sha256WithRSAEncryption
91:a1:ed:13:7b:fc:1a:76:a0:72:69:04:61:76:ae:2c:23:8a:
a9:c2:ae:87:82:fb:ea:ce:09:c1:3f:04:f6:53:aa:be:f3:ac:
16:27:bc:34:f3:0b:6c:f9:d2:b2:d3:e5:81:e1:18:f1:f7:fc:
46:ef:50:81:99:32:51:c4:c5:1d:25:20:f6:c6:69:8d:18:b5:
11:1f:0c:86:d2:01:a1:fb:3d:79:b8:d4:de:67:62:44:6c:6c:
c3:9f:53:82:a9:93:bd:81:50:9a:ad:51:91:38:6b:36:5d:a6:
d6:b3:e4:d2:e2:ed:ca:a4:96:5e:1d:b6:a0:d0:25:e4:43:74:
5f:78:a8:d2:e3:d0:ef:74:59:cc:b7:b2:20:db:cf:e3:e8:71:
d9:70:e2:52:b9:9d:00:44:fe:f4:7a:86:38:a4:91:09:40:62:
6e:b9:ed:1c:ec:65:a5:b0:2f:bb:34:8c:28:9a:56:f0:69:9d:
42:dc:2c:13:4e:55:53:64:02:b0:e1:a7:be:50:55:99:52:29:
32:82:92:b3:f4:29:f8:5f:32:d0:86:24:2d:17:e5:f1:d7:97:
8d:7d:9e:83:4e:14:9e:e4:19:db:18:d1:b7:51:7c:d9:13:2b:
f2:d6:ea:a1:55:08:40:06:4f:ff:a1:98:ee:1c:fd:44:89:5e:
0a:93:e9:15
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtCspksTX9oFnvnWLpi6UnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNWVjNmUwNjYwZGI2ZjYyNWI5NzhiZTBkNWVlNzFjMmRj
ZDQ2NWEwHhcNMjMwMTAxMTExNTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YmZmMTM1OGViYjg2NTQzZjM2ZTY2NDgzYWUxZWMwZWY0MWFiMzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWEnP9TbdZXFwBSW6k8WRRw/wbls
h6Rd50PUS/fcLcZW+1wL1H3QMmoUNyZfYuqSsZfqVUKmrDE8+hy4a4/tdz1D1cHr
BOQJzHQIUrjmoEHwMSZgzRWWBgOUr0rwNeXBPIH9Wke5+mA0ot7flk2vo7zgdIGB
djXzO9RUSCrGiO994m2Zywm17qSW3FO2BOgAS2LzuEBO00Z4k6GkJu/hY+suU3Oj
Ed2hdGE4+J9SpQbdfdrt3ER5eLasgv9Lkd3/GONtyqddDUVBf+BzZK+vs0SAn2Hv
oi0Qgkw6aDuNdsb1IfKsgNUTb37mfLHnD6ttDUNc1YTWdzrTeBoXWoDKkQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGv/E1jruGVD825mSDrh7A70GrN0MB8GA1UdIwQY
MBaAFApexuBmDbb2Jbl4vg1e5xwtzUZaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2w3RzRHWU50dllsdVhpLURWN25IQzNOUmxvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy81Nzc2YTMtMDZkZC00OTgwLThmNmYt
ZDNlM2M3OGU3YzQ0LzEvYV84VFdPdTRaVVB6Ym1aSU91SHNEdlFhczNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy81Nzc2YTMtMDZkZC00OTgwLThmNmYtZDNlM2M3OGU3YzQ0
LzEvQ2w3RzRHWU50dllsdVhpLURWN25IQzNOUmxvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABf88MA0G
CSqGSIb3DQEBCwUAA4IBAQCRoe0Te/wadqByaQRhdq4sI4qpwq6HgvvqzgnBPwT2
U6q+86wWJ7w08wts+dKy0+WB4Rjx9/xG71CBmTJRxMUdJSD2xmmNGLURHwyG0gGh
+z15uNTeZ2JEbGzDn1OCqZO9gVCarVGROGs2XabWs+TS4u3KpJZeHbag0CXkQ3Rf
eKjS49DvdFnMt7Ig28/j6HHZcOJSuZ0ARP70eoY4pJEJQGJuue0c7GWlsC+7NIwo
mlbwaZ1C3CwTTlVTZAKw4ae+UFWZUikygpKz9Cn4XzLQhiQtF+Xx15eNfZ6DThSe
5BnbGNG3UXzZEyvy1uqhVQhABk//oZjuHP1EiV4Kk+kV
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:48 2025 by rpki-client