Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/PjO3lt8GLxK8mFscVXko5XSGuTU.roa
File: PjO3lt8GLxK8mFscVXko5XSGuTU.roa (raw, json)
Hash identifier: vp2PlxkbI2ll4/hgrDaYD5vIfyGKcYaUaMeCynwWerw=
Subject key identifier: 3E:33:B7:96:DF:06:2F:12:BC:98:5B:1C:55:79:28:E5:74:86:B9:35
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 018571F10A49E751C8DCAA2E85960D93BE9A
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/PjO3lt8GLxK8mFscVXko5XSGuTU.roa
Signing time: Mon 02 Jan 2023 10:05:00 +0000
ROA not before: Mon 02 Jan 2023 10:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207614
IP address blocks: 5.154.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:f1:0a:49:e7:51:c8:dc:aa:2e:85:96:0d:93:be:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 2 10:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e33b796df062f12bc985b1c557928e57486b935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:75:db:7d:75:3f:f1:a6:f5:2b:03:8f:2f:78:
fe:a5:52:c1:37:04:ad:63:00:97:01:f9:c4:d4:0c:
db:5b:f0:a2:b7:cf:5d:e2:4b:12:ed:87:2f:48:31:
dd:42:60:31:fa:e8:45:ab:4b:0d:f5:67:d0:3c:83:
b3:28:aa:0a:6d:ce:a9:a3:f7:51:be:b2:35:55:db:
66:e9:8b:7e:92:dd:d4:06:bc:78:ab:47:3c:6e:90:
67:f2:e5:66:54:52:bb:83:f3:e3:a1:ec:fb:e1:38:
b3:a5:62:9c:94:44:9b:12:0c:f5:02:ef:fe:45:16:
0d:85:b8:6d:5c:ec:34:77:1f:78:be:13:03:bd:98:
51:c4:f2:9f:6a:a2:af:63:e6:95:4c:43:1e:a7:18:
07:d0:60:78:ee:30:b6:70:d6:af:fc:ce:9a:91:fa:
cb:98:8e:03:cf:2c:6e:a2:cb:26:0d:9f:54:1c:d7:
d8:4f:54:46:d6:ba:78:5a:c8:a7:fb:2c:84:06:a3:
b4:15:58:44:44:27:d9:33:32:e7:e8:03:3e:56:2d:
a8:f4:95:01:61:fc:a6:d3:5f:1c:bb:df:af:5b:fe:
74:2a:3b:9f:d8:8a:e5:b9:f9:72:65:74:67:2c:3d:
56:d7:14:cd:65:65:4d:d0:ed:47:b7:b8:46:7b:c8:
9e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:33:B7:96:DF:06:2F:12:BC:98:5B:1C:55:79:28:E5:74:86:B9:35
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/PjO3lt8GLxK8mFscVXko5XSGuTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.7.0/24
Signature Algorithm: sha256WithRSAEncryption
27:47:3f:38:4f:18:39:43:a8:4a:c4:d7:93:fa:87:3b:fe:47:
9e:05:33:6f:ee:5b:7c:a7:a5:3e:03:bc:9f:82:61:c7:51:69:
03:7f:25:4b:30:cd:8c:4b:06:27:69:ae:3e:aa:d8:18:70:13:
67:28:03:05:17:70:39:b7:da:68:13:6d:4a:2a:9f:34:48:84:
b7:44:68:ed:93:6b:3e:99:ba:5a:33:4d:f8:43:08:51:41:e8:
ce:ed:ac:4e:f4:b3:d1:83:f2:d1:3f:30:e3:4a:36:60:e4:4c:
d4:5a:b2:f9:d3:88:b5:2f:d2:87:e4:7b:05:b1:3f:64:37:9f:
2c:4e:48:3f:36:bc:58:f8:47:9a:a6:bb:da:84:50:77:b4:7d:
61:f9:0b:48:a0:86:5f:b4:b5:15:e9:79:37:ad:84:75:95:bf:
c8:5b:14:eb:4a:b8:84:e9:a2:66:76:05:86:45:ba:21:ca:ed:
06:ce:c9:40:b9:2e:29:cf:c6:30:c3:59:4d:91:e1:22:39:0e:
75:99:af:36:cc:f6:53:92:ed:03:c0:ac:6b:00:be:e8:6c:7f:
f1:4a:b6:0f:65:f4:89:09:4e:9c:73:35:6b:cd:a1:5a:c7:15:
f9:11:fa:5b:75:9a:b1:ec:d6:f9:2b:cd:23:12:9e:7d:9d:03:
2c:ed:26:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:19:53 2025 by rpki-client