Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/5ZoP_N5H8uiuExuj9AtANFOSDDk.roa
File: 5ZoP_N5H8uiuExuj9AtANFOSDDk.roa (raw, json)
Hash identifier: CFu0x82AQ694xBmp/ACW+vaxrnN4zpcn0ZgCS4w6b4Q=
Subject key identifier: E5:9A:0F:FC:DE:47:F2:E8:AE:13:1B:A3:F4:0B:40:34:53:92:0C:39
Certificate issuer: /CN=d90155c51ff2394da784a384aa717c76e3032c24
Certificate serial: 01856BF7D94F729B65158FB969988712551B
Authority key identifier: D9:01:55:C5:1F:F2:39:4D:A7:84:A3:84:AA:71:7C:76:E3:03:2C:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/5ZoP_N5H8uiuExuj9AtANFOSDDk.roa
Signing time: Sun 01 Jan 2023 06:14:43 +0000
ROA not before: Sun 01 Jan 2023 06:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210967
IP address blocks: 213.217.30.0/24 maxlen: 24
2a11:1b00::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:f7:d9:4f:72:9b:65:15:8f:b9:69:98:87:12:55:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90155c51ff2394da784a384aa717c76e3032c24
Validity
Not Before: Jan 1 06:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e59a0ffcde47f2e8ae131ba3f40b403453920c39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:fe:c7:df:1e:6d:12:23:e5:a0:15:fb:09:90:
1a:a6:6a:ef:07:06:24:bb:45:d5:8b:83:6d:5d:c3:
4f:f4:c1:2f:62:d8:45:5e:33:14:d1:fe:e2:9e:a7:
df:5e:64:1c:12:4d:ad:60:5c:c2:6c:ab:f0:63:87:
8a:81:4a:54:ae:dc:35:fd:79:0d:ec:8d:ab:f1:90:
7d:29:c7:e0:5c:b1:02:71:18:20:2e:79:12:50:dd:
c0:dc:48:05:3e:85:d0:6f:1c:c4:95:1f:58:96:20:
36:f2:fc:77:51:49:d2:fd:2c:e1:dd:34:d6:76:c9:
ab:4a:cf:90:9a:55:71:31:a9:6c:f8:7e:5f:f0:7b:
62:aa:1b:17:35:ac:ee:57:71:84:a6:f4:89:0e:43:
58:db:70:66:17:4d:0f:d6:9c:c2:98:2d:bc:2a:29:
dc:eb:de:25:07:9c:b9:ff:e5:f6:3a:4c:ab:8f:08:
3a:f3:25:37:2e:ec:de:0d:df:31:98:cd:d1:3f:d6:
9a:8a:bf:f1:64:04:c6:58:d4:84:3e:77:b7:d7:f3:
6e:01:2c:cd:36:b8:56:ec:a5:50:61:33:96:4d:04:
2f:eb:38:45:f2:df:6f:72:09:01:ae:bd:f9:4f:bb:
93:ab:c2:e1:39:49:46:44:fe:15:f0:6a:49:99:c1:
54:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:9A:0F:FC:DE:47:F2:E8:AE:13:1B:A3:F4:0B:40:34:53:92:0C:39
X509v3 Authority Key Identifier:
keyid:D9:01:55:C5:1F:F2:39:4D:A7:84:A3:84:AA:71:7C:76:E3:03:2C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/5ZoP_N5H8uiuExuj9AtANFOSDDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.217.30.0/24
IPv6:
2a11:1b00::/29
Signature Algorithm: sha256WithRSAEncryption
95:63:44:eb:34:c6:8f:0f:ea:ef:80:f3:00:6a:b3:68:ee:f4:
4d:34:01:99:d1:8a:25:fb:6e:f4:1f:fb:e1:bd:02:19:9a:34:
cd:a3:27:89:cf:b6:46:8a:27:c4:3f:af:6e:87:38:be:33:71:
33:49:f0:24:e2:1d:fb:d3:16:93:fd:c5:51:78:e4:71:e9:b2:
92:87:7f:d1:6a:15:ff:42:bd:5a:df:26:85:b2:83:e7:14:f8:
26:f4:63:58:d0:8e:89:1c:a6:44:d0:1f:35:19:9e:94:32:b8:
10:ea:e0:5b:16:72:1e:e7:05:f8:b5:5c:64:63:31:44:59:b6:
a2:93:2a:62:55:e5:4b:cb:cf:81:da:15:2a:c1:49:45:2d:22:
49:47:d1:a0:ca:e7:8e:9e:de:1f:4b:f5:2e:fe:81:75:82:b3:
f1:70:40:c0:16:1f:82:71:f2:61:8f:79:5b:68:60:26:bb:3f:
9d:ad:d4:dc:44:51:c1:27:38:df:df:5a:e5:6d:8f:a9:b6:5a:
ad:9d:d9:47:f9:b5:66:2f:43:ca:80:da:85:d7:5a:18:2a:44:
93:22:8e:61:af:8c:40:e9:63:4f:28:a8:e8:95:fb:66:6b:2e:
2d:96:10:06:58:c4:45:5d:48:5b:ae:05:9b:98:5c:94:66:30:
4e:c5:f5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:46:05 2025 by rpki-client