Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/CO5jhuNJtJXo0qTAH3j6we7GMvA.roa
File: CO5jhuNJtJXo0qTAH3j6we7GMvA.roa (raw, json)
Hash identifier: G4tvpQH+mVFQGB88RNDA0pGfKeQnqJ4GD0cHDpUHLbU=
Subject key identifier: 08:EE:63:86:E3:49:B4:95:E8:D2:A4:C0:1F:78:FA:C1:EE:C6:32:F0
Certificate issuer: /CN=a1f7882861c29ed599be4a937480c4d13e25bfc2
Certificate serial: 1343D798
Authority key identifier: A1:F7:88:28:61:C2:9E:D5:99:BE:4A:93:74:80:C4:D1:3E:25:BF:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/CO5jhuNJtJXo0qTAH3j6we7GMvA.roa
Signing time: Thu 02 Jun 2022 13:34:20 +0000
ROA not before: Thu 02 Jun 2022 13:34:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206459
IP address blocks: 5.181.160.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 323213208 (0x1343d798)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1f7882861c29ed599be4a937480c4d13e25bfc2
Validity
Not Before: Jun 2 13:34:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=08ee6386e349b495e8d2a4c01f78fac1eec632f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:63:b5:af:f3:9c:46:95:51:f9:e1:39:15:32:
66:02:d9:24:a5:49:a3:b2:cf:42:72:0c:77:b8:e1:
1e:4d:80:b7:44:d1:0e:ce:de:29:44:78:54:34:79:
13:85:e8:b2:8e:bb:de:e9:a6:be:8e:03:90:cc:43:
f2:d7:1e:03:bb:71:1b:06:ee:7d:dc:a6:98:04:8e:
26:10:95:fc:f8:28:0f:35:2b:2d:1b:5b:d5:50:79:
d9:f3:8b:5c:df:51:43:4d:2e:66:1c:11:b1:f4:d5:
45:18:b4:d0:b0:cb:f1:37:24:f1:fa:d7:6c:38:4a:
d2:ca:a3:f8:a9:74:6d:ec:47:55:f3:a9:b0:40:7e:
3b:56:5c:f8:37:d9:56:69:ce:7a:28:a4:0c:41:60:
08:22:f0:a7:7b:12:27:03:8d:4d:81:5f:cd:06:40:
8e:88:bb:8a:b3:cd:99:c3:43:92:34:24:e9:6a:d2:
4a:85:16:c1:09:8b:39:36:51:4e:7b:3f:00:52:ec:
5e:11:b5:0e:6c:6b:65:a3:c6:64:80:4a:e3:bf:38:
79:86:32:51:18:a7:27:41:0e:eb:fe:6b:86:b6:2d:
55:de:70:53:03:27:26:94:38:fb:61:b0:d6:f4:e6:
2c:9a:f2:36:da:82:94:ce:7a:01:be:ba:2e:c4:79:
52:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:EE:63:86:E3:49:B4:95:E8:D2:A4:C0:1F:78:FA:C1:EE:C6:32:F0
X509v3 Authority Key Identifier:
keyid:A1:F7:88:28:61:C2:9E:D5:99:BE:4A:93:74:80:C4:D1:3E:25:BF:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/CO5jhuNJtJXo0qTAH3j6we7GMvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.160.0/24
Signature Algorithm: sha256WithRSAEncryption
04:14:08:e2:f3:ce:10:92:a9:c1:b7:43:ac:02:ce:2e:00:ff:
c4:b2:b8:43:7a:81:3a:d3:b1:d9:68:44:5f:9a:7f:d9:48:19:
14:64:d9:d2:96:5b:5d:62:c9:67:7e:4c:51:2a:ce:43:b0:71:
29:9c:b2:ba:e1:0a:a4:60:93:15:4e:08:56:f0:cc:ea:35:9d:
73:e6:5d:0f:d1:7e:31:a8:cc:af:74:a2:c5:41:83:c6:ee:7a:
35:c2:b0:93:82:13:31:d8:44:9e:8f:37:be:c3:58:0a:09:76:
e3:ba:b4:04:c3:73:ed:9c:e8:49:6f:b2:bb:4a:35:04:48:1d:
5c:79:e7:3d:a2:75:72:5c:bb:a3:14:cd:b4:dc:d7:33:a9:0c:
6e:10:ba:0c:cd:31:07:42:ac:e1:21:5a:b7:5c:19:f2:a2:ec:
0d:7c:83:86:bb:87:64:1d:ac:c2:f3:9c:fb:7f:9a:93:f0:4d:
d5:b5:e7:7a:98:89:37:84:09:b5:11:f9:a5:42:59:bc:3d:74:
e9:76:a0:38:e9:bd:77:73:78:f0:d8:be:29:aa:9e:23:bf:91:
ed:95:95:7f:00:0b:7a:d2:33:08:30:0b:ec:49:0b:01:0e:00:
29:b5:12:58:5d:53:f1:5d:e5:48:16:8b:4a:53:66:09:ea:e5:
26:62:74:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:37:42 2025 by rpki-client