Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/5e1N3sl3gbpVB5OHSXVpvG1f-J8.roa
File: 5e1N3sl3gbpVB5OHSXVpvG1f-J8.roa (raw, json)
Hash identifier: 5XkDEnt98+EYzS/fySiapFysJUb3Q7m6urwpoWCQi78=
Subject key identifier: E5:ED:4D:DE:C9:77:81:BA:55:07:93:87:49:75:69:BC:6D:5F:F8:9F
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01857246E7C2DFB8E8F51B61375BD78826B9
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/5e1N3sl3gbpVB5OHSXVpvG1f-J8.roa
Signing time: Mon 02 Jan 2023 11:38:47 +0000
ROA not before: Mon 02 Jan 2023 11:38:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213064
IP address blocks: 45.134.90.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:e7:c2:df:b8:e8:f5:1b:61:37:5b:d7:88:26:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 2 11:38:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e5ed4ddec97781ba55079387497569bc6d5ff89f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6e:7a:bc:75:e6:c2:a7:ea:02:c3:f5:b6:19:
e2:7b:21:a6:3f:91:4f:3b:02:5d:1e:c9:70:8a:9e:
cc:05:71:7e:13:80:3b:64:25:1d:39:57:53:ff:13:
0b:f2:7b:3d:df:6b:06:f6:98:51:32:ea:04:1e:7d:
c4:07:84:11:87:2d:fa:f4:d2:c6:c0:f8:25:cf:43:
51:04:6c:a5:09:70:81:8c:01:bb:01:7c:e7:5b:a8:
7a:7e:f2:14:f1:92:22:e9:ff:d9:ef:1d:3e:c4:ea:
4a:05:7e:d2:72:f2:e8:94:b8:94:52:7c:de:cd:ed:
9c:6a:38:a2:fc:c0:3c:af:92:3a:62:3a:60:d7:0c:
d4:4c:c9:f6:42:0e:63:6e:f8:20:8b:bf:6a:d1:bd:
fd:2a:7d:b1:ce:a2:65:4a:28:2d:ca:eb:fa:54:33:
d7:87:8b:f4:98:2d:90:3e:dd:4f:bb:6e:f7:11:d4:
f9:c3:cb:d0:67:63:e9:e8:da:95:86:a9:ee:4d:49:
4c:47:e7:c1:2f:a0:d3:b4:ee:6b:d9:69:84:ce:2e:
2d:2b:78:da:9e:a8:c5:4f:c5:59:20:be:e9:3f:7b:
dc:f4:83:38:47:76:97:1b:1c:70:c3:ae:c5:c0:88:
95:39:5e:92:ca:29:98:ab:b1:86:ee:59:e1:de:03:
54:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:ED:4D:DE:C9:77:81:BA:55:07:93:87:49:75:69:BC:6D:5F:F8:9F
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/5e1N3sl3gbpVB5OHSXVpvG1f-J8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.90.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:55:82:01:d4:4b:e4:25:58:72:6c:8a:47:58:bc:d4:f5:5b:
16:bd:fe:02:1f:fa:3c:44:c1:d0:3d:21:e9:d7:ab:87:6e:23:
5b:de:dc:e6:1c:1d:a4:66:1b:4a:95:ce:39:72:e2:b1:ba:fc:
14:ec:76:07:a7:2b:88:3d:30:aa:bf:22:46:8e:86:6a:94:d8:
c0:51:34:39:10:d3:4e:86:91:a3:71:0d:0b:9d:7c:0a:c2:53:
c9:36:34:ed:74:7c:63:9b:f6:d1:38:e2:7a:da:20:b4:2c:50:
0c:8f:cd:b6:96:3a:c0:28:05:e2:46:0e:34:7b:23:ac:6a:7f:
01:af:57:5e:18:06:9a:1d:02:d9:ac:0c:85:89:4d:6a:ce:19:
a1:40:77:5b:04:46:01:59:4b:15:34:eb:a4:0f:3f:f7:81:1e:
f8:99:03:4b:7c:74:50:f0:da:a7:a8:87:e1:63:b0:e7:5d:a0:
08:b0:00:04:bf:67:c3:70:89:03:1d:e8:58:aa:b0:02:f8:28:
41:59:dd:35:cd:a7:8d:7f:a4:5d:0d:f2:84:28:0e:c1:c6:b8:
23:44:d4:09:83:83:b1:d3:7a:1f:28:ff:7c:5c:3a:9f:70:53:
aa:47:6a:8b:f8:7a:1d:b6:2d:5c:25:85:81:ff:1f:8b:ba:12:
35:51:10:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:27:52 2025 by rpki-client