Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/l3M3CvkH2uKJl9QCPkOFma0Z4R8.roa
File: l3M3CvkH2uKJl9QCPkOFma0Z4R8.roa (raw, json)
Hash identifier: zN704Y56ziIBi56pUBNsPIgkr8h5KbSBgEC0drM6oyc=
Subject key identifier: 97:73:37:0A:F9:07:DA:E2:89:97:D4:02:3E:43:85:99:AD:19:E1:1F
Certificate issuer: /CN=4c7844abef711c232c84f83c807a420af3804728
Certificate serial: 0AB663E6
Authority key identifier: 4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/l3M3CvkH2uKJl9QCPkOFma0Z4R8.roa
Signing time: Sat 01 Jan 2022 15:06:05 +0000
ROA not before: Sat 01 Jan 2022 15:06:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197595
IP address blocks: 5.133.192.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179725286 (0xab663e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c7844abef711c232c84f83c807a420af3804728
Validity
Not Before: Jan 1 15:06:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9773370af907dae28997d4023e438599ad19e11f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:68:99:ff:1b:25:00:1e:de:51:84:fc:29:0f:
66:b5:49:dc:81:81:2a:2a:2f:19:b5:36:d6:4a:9b:
46:b6:a7:60:a3:0a:40:22:ef:3b:4b:f0:81:90:36:
69:f1:70:e2:5b:d2:7d:ec:d6:7e:5d:1f:34:58:71:
fa:f0:5f:bd:95:26:70:0b:7a:db:20:c3:5a:bc:8a:
1c:c6:48:10:62:7a:3f:55:51:a8:1f:84:44:de:42:
13:6f:5c:a9:2b:c4:82:c1:17:d0:d4:38:c2:92:d4:
4d:67:d8:a0:df:53:4d:09:13:36:d5:4f:b9:7c:f8:
d9:09:5a:e4:ff:e8:aa:48:89:e0:b0:dd:1d:65:31:
77:d0:58:44:24:46:10:d9:00:01:ce:05:50:df:8d:
4c:35:0c:b6:da:cd:48:a2:1c:0a:66:35:34:ff:bf:
07:e5:7d:db:a2:4f:c7:af:de:d4:11:e0:4b:2f:05:
fa:6b:6f:08:1e:15:41:34:c5:f1:79:1d:d3:b9:64:
b1:41:ca:9e:04:72:62:a7:09:17:77:6a:26:47:99:
3f:22:4a:30:5b:08:7c:8d:ea:0a:e4:73:7f:ab:21:
6e:d8:71:ff:ba:cd:8b:2f:00:f5:ba:27:7f:62:24:
08:0c:63:ca:18:55:06:b7:2a:f1:13:f0:45:d0:b5:
d4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:73:37:0A:F9:07:DA:E2:89:97:D4:02:3E:43:85:99:AD:19:E1:1F
X509v3 Authority Key Identifier:
keyid:4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/l3M3CvkH2uKJl9QCPkOFma0Z4R8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.192.0/19
Signature Algorithm: sha256WithRSAEncryption
2a:f4:f4:f6:8c:da:df:9c:eb:5a:f9:9e:31:54:33:cc:60:a0:
48:14:ab:fa:c1:4a:85:4b:dd:da:22:a4:88:40:f3:88:46:cd:
bf:c1:a6:79:04:09:14:ae:24:86:01:42:c7:73:47:16:d0:21:
a5:77:ac:1c:ab:a9:6e:95:6e:a7:ce:ff:dd:02:56:40:95:7f:
3f:bd:a9:4d:f9:d5:05:b1:77:94:f2:86:19:35:1e:66:3b:72:
eb:92:a9:9d:3d:d7:78:b7:38:7a:77:d0:dc:74:2b:49:a6:46:
05:d8:2d:cf:e6:aa:a4:9f:f9:72:f3:2c:5e:9e:ce:f9:33:1f:
00:e5:6c:49:4c:7e:b4:de:7d:a4:e7:ad:10:8b:1c:dc:4e:4d:
cf:af:a0:06:e9:1e:e6:3f:e9:26:39:da:17:95:cf:ce:40:7b:
2a:00:c0:b7:8e:0d:96:3a:9d:f9:a7:67:5e:84:85:15:4d:03:
80:a1:69:48:1a:a9:1b:27:e6:9e:30:fc:2f:49:f7:c2:10:f4:
92:2a:bd:38:7f:de:96:f1:bd:4b:b7:3f:62:c6:cd:c9:31:f0:
01:e5:38:dd:13:e7:00:3e:e6:fc:3d:83:14:47:81:b8:74:2d:
bf:4f:37:e1:a7:1c:c7:e8:fb:30:de:bf:60:ba:82:04:ff:0b:
f0:33:33:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:12:28 2025 by rpki-client