Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/J4MNIG5-r698WMt3SpBlke0duQY.roa
File: J4MNIG5-r698WMt3SpBlke0duQY.roa (raw, json)
Hash identifier: Z+ZbJRSpFz+OPedzR2D8DrqRsLjsolfVrPp1u4+dneM=
Subject key identifier: 27:83:0D:20:6E:7E:AF:AF:7C:58:CB:77:4A:90:65:91:ED:1D:B9:06
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 09A275DA
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/J4MNIG5-r698WMt3SpBlke0duQY.roa
Signing time: Sat 01 Jan 2022 05:04:14 +0000
ROA not before: Sat 01 Jan 2022 05:04:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206124
IP address blocks: 5.154.103.0/24 maxlen: 24
5.154.102.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161641946 (0x9a275da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 1 05:04:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=27830d206e7eafaf7c58cb774a906591ed1db906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b0:75:e1:02:cd:a6:f6:b8:4d:cc:ea:29:df:
10:af:17:f3:12:89:6f:ea:30:ac:1d:ad:d2:56:e4:
05:ed:b4:b7:db:c6:7d:23:73:1e:e9:78:8b:58:ee:
0d:89:7c:0e:c6:f8:e6:06:3a:09:38:85:42:25:ee:
ea:e7:2c:e8:f3:cb:b5:9e:52:15:45:d4:37:dd:cc:
09:c9:74:0b:24:8a:e7:ba:94:1f:2e:63:16:5a:56:
3c:32:5a:1e:20:ba:66:d7:d4:77:84:3d:b0:33:bf:
fa:2b:d9:69:02:4e:56:8b:e4:a1:75:7c:ca:d9:62:
a5:26:69:7d:0f:f6:ef:3d:93:a8:38:bf:9f:c7:84:
1c:c2:92:f8:9b:51:cf:c5:12:ff:71:f5:8d:3e:4d:
95:af:00:b8:77:3d:1c:56:c9:cb:ef:d2:2e:03:20:
90:af:04:56:84:18:62:50:5b:2f:e4:53:d3:a0:0a:
eb:9e:17:ae:65:20:7e:d9:74:88:bf:10:86:b9:5c:
f6:2f:03:91:00:2e:d7:6f:bd:60:7e:1d:4e:ef:86:
84:69:3a:47:bf:ff:be:bb:ae:e6:13:9d:ad:79:4e:
e2:e9:9c:18:ae:03:27:18:27:a6:6c:1e:d1:f8:6f:
4f:d6:33:79:93:d0:2d:59:ff:64:c4:67:63:e6:b1:
f8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:83:0D:20:6E:7E:AF:AF:7C:58:CB:77:4A:90:65:91:ED:1D:B9:06
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/J4MNIG5-r698WMt3SpBlke0duQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.102.0/23
Signature Algorithm: sha256WithRSAEncryption
45:f5:cb:94:3b:a8:98:e8:31:00:0e:34:6d:1d:fe:30:7c:f5:
47:12:3d:6e:c2:53:d7:15:bc:50:60:89:8b:81:14:65:b9:1e:
b5:5f:49:c1:34:5e:23:ca:bb:8c:b9:99:91:6b:69:22:a1:6a:
70:47:dd:c7:a2:06:96:7b:63:cc:55:c4:43:30:0e:ed:98:32:
31:46:bb:35:82:5d:32:34:dc:2e:66:ec:16:23:36:4a:8e:13:
f0:11:1a:31:79:75:62:29:97:6c:70:fd:29:2d:94:0d:78:6b:
fa:fa:52:a1:ba:85:e6:1d:8c:dd:46:8e:04:b5:21:6b:c4:fa:
5f:00:5e:cd:3d:fd:9b:16:d6:16:a7:7a:7b:b1:19:3f:1b:7d:
4a:6f:7a:88:9f:07:03:d2:56:0f:cc:e7:7c:cf:e8:33:36:35:
66:34:11:d3:17:ad:db:46:62:30:c5:ed:09:03:bf:4c:36:30:
a8:9e:5a:96:ba:22:c6:eb:22:c1:47:7a:3e:a1:3e:34:7d:f0:
d6:ac:81:6f:c8:f6:c8:7f:81:f1:82:55:3f:21:4c:5e:63:7e:
14:82:e5:31:d1:b7:0f:98:4a:33:1a:02:9c:db:91:a4:a1:63:
9d:bf:66:0c:f0:b6:88:67:a5:7e:67:12:39:d5:39:34:25:e6:
61:c0:6c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:18:36 2025 by rpki-client