Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/k3AjsuYw2lQulvmsK55kJaNF-YY.roa
File: k3AjsuYw2lQulvmsK55kJaNF-YY.roa (raw, json)
Hash identifier: QjZ0L4iJNOoWCR0+VyXGQPMHFmH2dZCBNtdZ7MvW9v8=
Subject key identifier: 93:70:23:B2:E6:30:DA:54:2E:96:F9:AC:2B:9E:64:25:A3:45:F9:86
Certificate issuer: /CN=373b47a3cee79982adb170341d02026027332023
Certificate serial: 197C0727
Authority key identifier: 37:3B:47:A3:CE:E7:99:82:AD:B1:70:34:1D:02:02:60:27:33:20:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NztHo87nmYKtsXA0HQICYCczICM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/k3AjsuYw2lQulvmsK55kJaNF-YY.roa
Signing time: Sat 01 Jan 2022 08:55:03 +0000
ROA not before: Sat 01 Jan 2022 08:55:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59503
IP address blocks: 5.159.16.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 427558695 (0x197c0727)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=373b47a3cee79982adb170341d02026027332023
Validity
Not Before: Jan 1 08:55:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=937023b2e630da542e96f9ac2b9e6425a345f986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:60:e9:4a:38:00:ea:2c:a4:08:e9:ed:36:52:
a9:81:f1:51:8a:82:ae:93:0d:b2:63:31:6e:75:b5:
e6:29:15:e3:92:a2:01:46:ec:de:56:7b:bf:25:bf:
d8:98:7c:ae:82:08:16:5d:a8:66:93:04:d1:f6:e9:
f2:61:b6:6f:a3:a4:99:ac:1e:ad:70:9c:b0:c6:e3:
52:fd:2a:5e:fe:d5:5c:e9:67:25:0d:c3:e0:29:74:
25:f2:1f:44:a2:fa:06:8b:86:96:05:a8:0d:04:37:
f7:cd:7c:fa:59:e6:7f:a2:70:3e:a1:5d:d1:3b:a5:
66:2b:52:27:df:65:9c:65:8c:9c:68:d9:5f:8d:3b:
63:65:ad:c8:78:dd:ce:04:2a:3b:10:23:e6:f9:fa:
2e:47:80:aa:61:44:d9:75:d1:b1:c2:be:f4:0e:fa:
05:ec:2b:c9:86:a7:83:ea:22:94:3d:61:a2:76:ac:
cc:a0:c0:13:fe:e5:a7:b5:37:e7:14:23:f7:da:28:
66:58:81:20:c8:7e:76:c3:d6:fa:ac:43:e3:4c:31:
bd:c2:7b:25:67:83:e8:62:74:45:01:3c:db:8a:38:
8c:4e:f5:8f:87:5e:0f:39:7e:7a:1e:4f:ee:42:8b:
1e:d4:dd:9e:a8:19:e3:1b:f0:8e:f1:e2:f0:ea:be:
82:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:70:23:B2:E6:30:DA:54:2E:96:F9:AC:2B:9E:64:25:A3:45:F9:86
X509v3 Authority Key Identifier:
keyid:37:3B:47:A3:CE:E7:99:82:AD:B1:70:34:1D:02:02:60:27:33:20:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NztHo87nmYKtsXA0HQICYCczICM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/k3AjsuYw2lQulvmsK55kJaNF-YY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.159.16.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:aa:ea:ff:31:33:01:e4:45:88:f9:45:8f:a8:9e:c8:6f:c4:
49:e2:68:e9:36:6e:98:f7:ac:84:5f:0c:7c:39:43:a4:13:0b:
05:b7:70:ca:cd:5e:85:c3:6c:20:ab:bc:61:a8:f9:31:e7:f5:
63:88:de:68:9b:ed:18:ee:98:67:52:df:c8:9f:9e:b4:b3:84:
df:01:db:c9:15:b8:15:18:3a:77:4b:ec:23:48:07:3f:8e:4e:
cb:d2:8b:2a:35:78:1a:6a:a3:ed:40:9c:cf:48:33:1e:89:cd:
fb:41:6d:22:64:75:0a:04:b6:bf:e8:53:48:09:01:e1:4c:01:
bb:3f:f8:dc:e0:78:0a:df:1f:63:94:c6:2f:22:22:4a:a7:10:
37:c9:df:84:1f:10:aa:b5:bd:67:02:66:be:be:12:e1:ea:b9:
a1:27:b5:a8:31:24:fd:0a:ed:f8:8b:df:36:95:2f:ad:9a:3e:
34:51:5d:c4:b1:89:f5:1d:bf:9d:74:46:a6:0e:d0:54:7d:e2:
67:60:41:1c:8e:ed:2f:28:93:39:39:3c:6f:83:ac:85:93:3b:
b0:9e:cb:64:21:8a:9f:06:88:92:43:a7:e7:a6:9c:77:4e:9d:
43:af:73:d5:45:e9:78:50:aa:e5:88:fd:35:d5:fd:b1:06:3b:
65:57:f0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:20:45 2025 by rpki-client