Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/l5E__vyM6hHZ9zNb4HNNbS9cbTM.roa
File: l5E__vyM6hHZ9zNb4HNNbS9cbTM.roa (raw, json)
Hash identifier: RzFV3DXTfthZ4NU5ZBKbescFgq2YaxdRWLLa7VzBsNk=
Subject key identifier: 97:91:3F:FE:FC:8C:EA:11:D9:F7:33:5B:E0:73:4D:6D:2F:5C:6D:33
Certificate issuer: /CN=3ecd53c66424c3f369ca88ee7af76adb25e18451
Certificate serial: 02D538C9
Authority key identifier: 3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/l5E__vyM6hHZ9zNb4HNNbS9cbTM.roa
Signing time: Fri 01 Jul 2022 06:49:02 +0000
ROA not before: Fri 01 Jul 2022 06:49:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59437
IP address blocks: 87.121.28.0/22 maxlen: 22
176.56.192.0/19 maxlen: 19
94.156.254.0/23 maxlen: 23
87.120.208.0/21 maxlen: 21
185.159.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47528137 (0x2d538c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ecd53c66424c3f369ca88ee7af76adb25e18451
Validity
Not Before: Jul 1 06:49:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=97913ffefc8cea11d9f7335be0734d6d2f5c6d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7c:9f:f3:29:06:41:71:bd:12:47:66:3c:88:
04:d4:ee:f9:92:01:bb:fa:25:23:b0:3b:cc:cd:8b:
10:96:c9:c9:6d:1b:9d:70:fb:78:83:c1:63:da:b5:
25:42:32:9e:81:9b:e2:31:2a:09:d1:58:f3:7a:c2:
e6:fe:67:d0:63:9b:9b:58:c6:1b:39:3a:37:66:2c:
f2:da:d8:4d:48:80:a1:50:89:85:f5:d8:78:df:8e:
b3:7b:17:05:93:9e:fe:89:3e:1e:9a:6c:ad:11:ea:
20:e5:b7:51:c7:8a:8d:7d:29:a4:87:85:b2:22:f3:
dd:b4:ed:0f:07:b4:fd:17:ae:b3:73:04:12:3f:1e:
b4:1a:1e:40:61:08:59:28:11:25:d1:af:ef:f3:2a:
a4:4a:52:c4:47:9f:c3:77:85:cf:8b:7b:a7:1e:12:
9d:e5:a7:72:80:74:39:40:17:90:03:f0:01:d1:59:
1e:6e:67:3c:aa:c4:90:91:39:ba:19:1d:47:b3:bd:
21:ee:44:36:5f:ab:e9:56:c7:a7:fa:e5:b4:07:7e:
a0:eb:f7:63:61:33:f1:39:2b:ec:e9:61:3d:40:52:
bf:2b:7d:4e:20:b6:0c:41:e5:34:e0:15:0c:f0:6b:
a2:7c:19:aa:1e:bb:42:1f:4e:4a:88:21:86:b4:17:
81:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:91:3F:FE:FC:8C:EA:11:D9:F7:33:5B:E0:73:4D:6D:2F:5C:6D:33
X509v3 Authority Key Identifier:
keyid:3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/l5E__vyM6hHZ9zNb4HNNbS9cbTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.208.0/21
87.121.28.0/22
94.156.254.0/23
176.56.192.0/19
185.159.86.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:0b:94:f4:79:b6:24:48:c8:09:01:2f:20:6e:76:f2:84:fd:
67:4a:eb:69:3e:81:70:ab:89:76:75:a0:de:23:da:58:45:ec:
f6:f7:9c:f8:c6:4f:c6:ee:e2:10:07:2e:86:03:e2:d0:22:f9:
15:ce:28:b3:53:6c:58:93:b7:ae:0c:88:eb:89:a4:80:20:2b:
44:9b:e6:4b:77:e0:36:4f:9b:9b:e0:ea:6a:05:80:24:a9:48:
38:9f:d2:45:14:7c:d2:16:e4:41:96:95:20:70:12:2b:e6:31:
0d:b6:1f:cc:81:dd:eb:43:63:83:aa:51:6e:f2:73:83:52:da:
19:cf:89:39:89:6b:75:8e:40:6c:02:43:89:66:1e:6d:8a:ee:
0d:d2:47:5c:3a:0c:87:40:ea:59:17:50:3d:0a:47:0c:ce:6f:
47:5b:ee:7e:85:3e:15:5d:d0:96:0d:a7:30:2f:47:35:a6:f8:
62:85:c7:84:12:5b:72:05:3b:07:ac:af:30:ec:ae:e6:a8:a5:
2c:23:85:42:d0:cd:55:5c:b7:1d:12:26:67:d5:d5:46:53:54:
fe:b1:d2:dc:ae:66:d8:f0:1d:74:b0:71:34:cd:85:1f:30:2e:
f0:c8:f0:61:e8:f4:c6:22:a0:a3:bb:6e:ca:d5:f6:c2:dc:62:
da:69:e4:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:40 2025 by rpki-client