Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/ScE5HNEmU5MwSI6d3gNvu5Na9QU.roa
File: ScE5HNEmU5MwSI6d3gNvu5Na9QU.roa (raw, json)
Hash identifier: ykeiG+c0aqXwj64gpeH8opRPtAPbUSERzMYxYRsRpkA=
Subject key identifier: 49:C1:39:1C:D1:26:53:93:30:48:8E:9D:DE:03:6F:BB:93:5A:F5:05
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 018AF55CF6666DB7C64EF1212F346BC65154
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/ScE5HNEmU5MwSI6d3gNvu5Na9QU.roa
Signing time: Tue 03 Oct 2023 11:47:04 +0000
ROA not before: Tue 03 Oct 2023 11:47:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62387
IP address blocks: 85.254.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f5:5c:f6:66:6d:b7:c6:4e:f1:21:2f:34:6b:c6:51:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Oct 3 11:47:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49c1391cd126539330488e9dde036fbb935af505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:50:dc:6b:6f:1d:2f:6a:bf:1b:2e:d4:1a:b9:
91:c9:0b:30:03:de:d6:4d:6d:ba:93:3a:6e:92:85:
50:52:3c:d2:87:d0:03:15:ef:af:8d:1c:0b:32:80:
2a:4f:86:3f:77:d4:14:18:1a:f3:4f:0c:26:86:f5:
19:47:3f:f9:02:dd:f3:7e:84:64:d7:00:1f:5f:56:
87:79:26:22:71:de:56:08:35:6f:dc:c4:69:e1:7e:
b9:2d:82:10:d5:51:49:27:aa:a5:01:11:48:80:38:
37:8e:57:b2:e6:45:dc:21:6d:62:d1:67:1a:c9:5d:
e7:42:0d:86:ed:b8:0f:f9:a8:6e:72:d0:e8:c1:e7:
de:03:c7:0e:d2:fe:73:05:69:3b:d2:88:c8:44:e4:
fd:4f:41:0a:de:36:5f:df:09:e4:33:f6:f2:63:e6:
03:f4:43:ef:65:6b:0a:4e:ba:7a:cb:07:68:51:dd:
91:47:e3:8c:34:ea:1a:4e:0e:b5:c6:f0:e0:33:15:
41:cb:dd:15:e5:41:76:3f:70:10:d1:a8:e6:f2:3d:
24:da:8b:df:c2:36:95:3b:9b:5a:9f:d2:be:ed:20:
e0:2d:7e:ba:c2:bd:7c:cb:33:90:a4:a3:ad:51:f1:
6e:29:15:4a:bf:8e:dd:1a:45:5c:90:30:e4:5a:0a:
12:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C1:39:1C:D1:26:53:93:30:48:8E:9D:DE:03:6F:BB:93:5A:F5:05
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/ScE5HNEmU5MwSI6d3gNvu5Na9QU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.254.47.0/24
Signature Algorithm: sha256WithRSAEncryption
28:0a:26:a6:0c:1e:80:25:25:e6:c1:bf:fd:2c:87:c0:8a:5a:
50:51:88:62:26:2c:8d:63:47:4a:28:72:c8:a8:f2:81:a3:b6:
de:c4:81:8c:0a:aa:02:1f:10:7b:cc:6f:0f:34:4e:e4:c9:f4:
1b:fb:c3:92:01:1d:e1:b8:82:d4:f1:47:ad:8b:b9:15:cf:66:
fd:ea:21:03:1b:3c:58:d1:25:92:2b:3c:cf:bb:38:2a:5b:36:
55:be:37:e6:6c:8d:ab:ce:56:48:41:7e:6d:2f:80:cc:cd:19:
8a:db:39:43:c9:7d:60:79:57:d9:2b:dc:73:80:e5:a1:c7:7d:
dd:16:27:5e:5b:91:70:cc:62:19:18:dd:4b:23:38:a5:3a:f6:
9b:8a:03:e2:1b:21:3c:91:9d:e6:e9:78:cb:ee:18:38:14:95:
dc:cd:78:e2:42:1d:55:47:5a:87:72:4f:40:39:b5:54:e8:fd:
48:ed:2e:b9:8a:86:de:2b:0a:8a:f8:7e:fe:4d:17:11:c3:a5:
96:d1:c5:b9:d4:c2:5c:8e:0f:7f:38:88:06:2c:46:4c:bb:16:
c3:b7:ea:58:14:bd:13:21:3c:b4:da:14:b2:ea:56:7b:de:c6:
9d:63:42:8a:04:22:43:83:8b:5d:4d:3e:b5:82:9c:e0:39:ce:
d4:55:78:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:18:38 2025 by rpki-client