Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/5f7Ak3JiWTeW1rHbAUBzsXRUYYY.roa
File: 5f7Ak3JiWTeW1rHbAUBzsXRUYYY.roa (raw, json)
Hash identifier: yEBPbP7MRqaG2aNDhz5y75lzG9RCJmmr45GLW7qK+YU=
Subject key identifier: E5:FE:C0:93:72:62:59:37:96:D6:B1:DB:01:40:73:B1:74:54:61:86
Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial: 13708CE5
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/5f7Ak3JiWTeW1rHbAUBzsXRUYYY.roa
Signing time: Sat 01 Jan 2022 05:58:27 +0000
ROA not before: Sat 01 Jan 2022 05:58:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200093
IP address blocks: 83.125.118.0/23 maxlen: 23
83.125.24.0/24 maxlen: 24
83.125.32.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 326143205 (0x13708ce5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Validity
Not Before: Jan 1 05:58:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e5fec0937262593796d6b1db014073b174546186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d1:51:87:81:17:ba:99:43:db:f3:f2:dc:87:
d1:8c:0a:15:bd:32:15:09:e8:47:22:d4:67:71:b2:
10:3e:bf:ce:90:8a:d7:e7:82:74:e6:d1:05:be:12:
74:4f:d5:ca:e5:1f:08:ba:89:fd:6f:47:6c:28:95:
0d:f1:ec:91:54:d9:6d:10:80:00:3b:3d:cb:50:51:
c4:f0:63:3b:ea:4b:e2:99:41:85:fc:59:cf:24:e0:
8e:13:11:3d:fa:8c:17:f9:56:ed:91:c7:28:71:2a:
bb:50:0d:28:20:12:e6:f5:d8:59:29:b6:70:c6:eb:
e9:93:4c:31:24:82:dd:68:f5:78:1d:fc:ce:93:12:
af:b4:e1:0d:22:45:39:9a:b9:a6:4e:86:03:57:e2:
46:27:3c:95:b6:83:19:57:51:97:78:86:c2:29:1b:
66:3c:ca:92:eb:b8:4d:44:a0:4f:7b:d9:67:7c:c3:
3c:f4:e2:44:51:53:a9:28:f4:41:1e:70:16:ec:d3:
41:73:4b:81:e4:70:15:b8:28:e2:dd:41:d4:76:fc:
09:4b:4a:12:40:01:09:30:09:d7:72:d8:eb:ee:ee:
37:5f:3a:8d:c3:b5:5e:48:f3:aa:b7:3d:98:92:06:
22:1d:b5:c1:d6:e4:91:d1:d0:02:a0:f4:7d:83:f8:
4d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:FE:C0:93:72:62:59:37:96:D6:B1:DB:01:40:73:B1:74:54:61:86
X509v3 Authority Key Identifier:
keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/5f7Ak3JiWTeW1rHbAUBzsXRUYYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.125.24.0/24
83.125.32.0/22
83.125.118.0/23
Signature Algorithm: sha256WithRSAEncryption
16:04:ae:b7:f0:db:4b:5b:dd:a0:fa:6a:ab:26:e8:90:81:7c:
d1:5c:6c:62:bc:c3:e9:4e:de:6b:59:57:cf:b2:c6:c9:cc:60:
5b:91:0b:c0:b7:d8:db:ad:f5:53:73:2c:f2:01:82:fa:b3:1d:
a0:aa:fd:ef:93:a0:4e:80:c9:8b:87:f6:3f:59:ba:ab:cb:48:
6b:69:5b:24:0f:cd:bb:62:75:0a:2c:de:84:fb:0c:bd:f3:44:
5c:7b:b0:9d:f6:25:3f:8a:bb:ce:b9:c6:ba:27:f4:ed:2e:f2:
d8:f8:97:b7:06:90:67:07:ad:ce:8c:d7:c5:27:f2:89:dc:f9:
22:34:3d:3f:e3:6e:2d:95:c6:0f:85:c0:8a:a5:21:96:fb:6c:
e5:bb:81:ff:79:39:2c:5e:b4:20:cb:c3:e3:53:ea:55:ff:64:
93:a4:94:62:e3:15:3f:7b:68:04:a4:7a:f0:1f:d8:8c:8f:11:
56:b7:7a:3f:fa:27:0f:c2:ab:0e:3b:f4:99:80:59:83:74:97:
bd:92:50:85:e5:79:e6:c5:8a:54:f2:5c:2a:48:c7:fb:bc:7a:
d4:42:0b:a7:36:88:75:68:ce:4a:b6:eb:1d:be:bb:a5:a2:31:
4b:9e:0e:a5:7d:c5:41:00:27:75:8a:a4:b9:8b:36:c8:18:32:
ab:37:fe:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:48:34 2025 by rpki-client