Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/5V7nfQS_f0j0cXJnK94njdU56IE.roa
File: 5V7nfQS_f0j0cXJnK94njdU56IE.roa (raw, json)
Hash identifier: sZIdZKZx0lJlSn8sz95mFRc31I0DZVKC/adorxzET8Q=
Subject key identifier: E5:5E:E7:7D:04:BF:7F:48:F4:71:72:67:2B:DE:27:8D:D5:39:E8:81
Certificate issuer: /CN=f210bac96aff25b2aa931c4297446be37ffe2ada
Certificate serial: 01856D2F312BF4353CD882F0933D29F2D5DA
Authority key identifier: F2:10:BA:C9:6A:FF:25:B2:AA:93:1C:42:97:44:6B:E3:7F:FE:2A:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hC6yWr_JbKqkxxCl0Rr43_-Kto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/5V7nfQS_f0j0cXJnK94njdU56IE.roa
Signing time: Sun 01 Jan 2023 11:54:47 +0000
ROA not before: Sun 01 Jan 2023 11:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1103
IP address blocks: 192.31.231.0/24 maxlen: 24
130.37.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:2f:31:2b:f4:35:3c:d8:82:f0:93:3d:29:f2:d5:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f210bac96aff25b2aa931c4297446be37ffe2ada
Validity
Not Before: Jan 1 11:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e55ee77d04bf7f48f47172672bde278dd539e881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:aa:5f:2d:c8:db:19:47:86:67:ef:e5:0a:ef:
f1:5d:ab:66:6a:22:1f:41:75:31:f8:a3:03:cc:fe:
84:d6:c1:3c:f8:ab:cb:68:d8:f4:bb:79:04:98:87:
96:43:6c:9d:36:30:56:1e:36:ea:4f:28:1d:08:fe:
0d:6c:c9:9b:7a:a6:90:a0:13:58:55:48:f5:e8:af:
7b:29:91:99:97:38:cf:a5:b2:0d:44:da:64:30:bd:
36:de:e4:18:0d:91:1c:2e:f7:f3:a5:27:e7:54:be:
c5:28:fa:ad:32:f1:ed:55:ad:5d:70:47:4b:5c:e1:
7d:fe:31:64:fb:13:a2:62:52:17:3f:f6:c5:2d:38:
0a:07:d5:f8:a1:ac:be:d0:ee:90:db:3a:76:81:e0:
39:d6:66:65:33:8e:b6:78:bb:0d:ed:b2:a2:73:3e:
50:03:d8:e2:d3:5b:2b:75:b3:65:f5:ad:51:e0:21:
08:d6:09:bb:1d:43:e7:52:50:38:f0:75:50:91:b0:
5a:15:06:92:8a:1f:34:1b:12:20:f9:07:e2:33:ed:
41:a2:60:b7:f6:5f:7c:ad:db:42:a5:4a:35:62:74:
38:99:36:e5:27:8e:ad:f6:74:48:79:29:ed:79:77:
30:5d:78:af:31:f9:9b:47:d1:cd:d4:92:a4:13:80:
94:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:5E:E7:7D:04:BF:7F:48:F4:71:72:67:2B:DE:27:8D:D5:39:E8:81
X509v3 Authority Key Identifier:
keyid:F2:10:BA:C9:6A:FF:25:B2:AA:93:1C:42:97:44:6B:E3:7F:FE:2A:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hC6yWr_JbKqkxxCl0Rr43_-Kto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/5V7nfQS_f0j0cXJnK94njdU56IE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.37.0.0/16
192.31.231.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:37:2a:fd:95:87:34:73:05:51:b0:f3:2b:ec:68:1c:c8:dd:
0e:f0:26:9b:0c:45:08:03:3f:f0:ec:26:d9:2e:a9:91:88:3b:
7e:9d:d9:c5:f2:ef:05:9f:bf:b9:d6:36:4e:b8:bb:81:01:cf:
46:78:10:a1:5b:72:db:dc:8a:a4:05:b4:95:2b:6c:eb:c7:9b:
2f:21:b8:00:49:fb:01:9f:a6:bd:85:58:8d:4d:f6:11:b5:aa:
24:4e:63:08:92:d2:5f:65:07:cd:a0:94:45:73:94:b7:25:19:
64:eb:f7:69:c7:10:76:a7:90:b0:4a:e6:25:81:26:36:6d:41:
af:4b:e2:d8:b3:73:a2:fc:10:8d:71:3e:5c:d1:ca:bf:f0:af:
b9:23:aa:c2:49:8c:cd:cc:77:17:5f:1d:5a:aa:45:7b:ff:5c:
7e:71:d2:89:5a:94:d3:4d:0c:d7:c7:9e:84:b7:2c:01:65:a2:
b8:29:34:29:b0:51:83:d3:d7:87:d1:8d:6f:48:1c:71:fe:71:
ec:03:d8:ed:b1:02:6b:ff:97:2b:52:01:9d:ad:78:8f:ed:ab:
f9:19:a9:9a:9d:11:8c:a2:40:3b:b5:3e:d6:35:20:f9:d8:cd:
9d:a5:bb:fa:1c:8a:fe:58:3b:e2:14:d0:bb:4d:db:cc:f6:bb:
84:31:4b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:44:19 2025 by rpki-client