Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/5x-f1UOZ7WscupNl7qrm1Bp1YE4.roa
File: 5x-f1UOZ7WscupNl7qrm1Bp1YE4.roa (raw, json)
Hash identifier: a9n4mopr5QE+c7bLE85G2iCg43Nn877efWE2t/iA6r0=
Subject key identifier: E7:1F:9F:D5:43:99:ED:6B:1C:BA:93:65:EE:AA:E6:D4:1A:75:60:4E
Certificate issuer: /CN=8387c219c9841ebafaa3d40806c984f9f3e4e461
Certificate serial: 025C51
Authority key identifier: 83:87:C2:19:C9:84:1E:BA:FA:A3:D4:08:06:C9:84:F9:F3:E4:E4:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/5x-f1UOZ7WscupNl7qrm1Bp1YE4.roa
Signing time: Mon 17 Jan 2022 08:39:44 +0000
ROA not before: Mon 17 Jan 2022 08:39:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48689
IP address blocks: 212.57.32.0/21 maxlen: 24
195.181.248.0/22 maxlen: 24
185.65.220.0/22 maxlen: 24
2a00:1e40::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154705 (0x25c51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8387c219c9841ebafaa3d40806c984f9f3e4e461
Validity
Not Before: Jan 17 08:39:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e71f9fd54399ed6b1cba9365eeaae6d41a75604e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:19:46:d4:5e:74:be:a5:28:6e:67:8c:32:9b:
dc:8a:07:9f:12:00:70:0b:ef:26:ad:98:ee:f2:3d:
30:45:47:55:60:74:23:69:ea:60:6b:a4:b2:21:07:
31:8e:8a:e2:e6:fc:5e:53:7d:dd:6a:1b:a1:f0:88:
bc:4c:23:e7:d8:57:85:36:52:c8:f3:94:82:2f:de:
f8:7f:df:27:07:84:84:59:af:c6:f4:fb:9f:0f:df:
3f:01:d4:1a:67:8c:ff:b8:9a:be:67:6a:39:8b:34:
e9:6e:89:c9:cf:df:a8:94:68:21:f0:55:e8:44:38:
0d:19:2a:2a:11:1b:3b:63:dd:f5:db:d1:df:23:a8:
e2:06:25:0b:cf:f1:56:39:ce:85:1e:a7:35:c0:f6:
6c:1a:52:2e:e1:2b:ee:99:84:b4:ce:ed:67:a9:6a:
7b:f9:13:c5:cf:2f:aa:49:93:02:c0:e3:83:37:2c:
55:24:80:d3:4c:9f:c6:c4:47:4a:d2:a9:b6:93:8a:
77:f9:85:f1:8f:d5:fb:ce:61:b6:f4:69:dd:dc:c3:
8f:7e:3f:7f:f5:09:22:fe:45:c2:18:2b:c4:05:b1:
66:73:77:12:04:08:87:da:81:3e:53:3d:d2:1b:24:
00:2a:54:6c:bc:f8:96:d6:1b:c2:3c:97:be:0b:ee:
b0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:1F:9F:D5:43:99:ED:6B:1C:BA:93:65:EE:AA:E6:D4:1A:75:60:4E
X509v3 Authority Key Identifier:
keyid:83:87:C2:19:C9:84:1E:BA:FA:A3:D4:08:06:C9:84:F9:F3:E4:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/5x-f1UOZ7WscupNl7qrm1Bp1YE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.220.0/22
195.181.248.0/22
212.57.32.0/21
IPv6:
2a00:1e40::/32
Signature Algorithm: sha256WithRSAEncryption
06:29:eb:08:01:12:c7:2c:14:8e:d5:e0:43:0e:0f:2d:1a:8e:
35:20:cc:f7:58:f2:b0:26:28:0f:52:f7:60:75:16:2f:40:58:
c8:c7:78:1f:84:84:ee:f4:a2:84:76:8c:1e:5c:b9:09:7b:61:
2e:9a:09:54:59:7d:9a:9b:27:14:af:2d:ea:80:e9:df:0d:57:
71:b8:bb:a9:0e:4e:78:78:b9:d0:8f:dd:a0:4f:15:be:05:5c:
76:f9:83:d6:db:e4:b9:85:4a:07:2f:29:93:40:37:37:32:02:
c0:12:80:86:94:7c:58:65:ec:62:77:05:fa:27:de:da:f2:4a:
8e:9f:dc:c5:c0:80:5d:5d:9a:96:12:4f:3b:f6:b4:31:cb:4c:
88:01:90:c5:a2:cc:19:44:d0:0f:bd:ec:9c:ac:9e:3a:fa:93:
29:7f:d1:73:87:8b:e4:16:8b:36:55:50:1d:75:d2:7b:62:df:
ff:d2:4f:e7:47:ee:be:fe:72:f7:45:64:11:16:fe:53:cb:e0:
75:be:0a:f7:f6:d1:c5:12:01:26:45:ba:25:61:74:2f:0e:d6:
c3:3d:0e:ce:86:51:96:4c:81:ea:12:56:38:fb:bd:5c:b6:e3:
9f:97:a6:aa:fd:42:6d:b6:db:ef:ae:37:62:12:d0:df:d9:5e:
43:4f:66:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:59 2025 by rpki-client