Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/LfMSBPmaaVf_NY9Ttmf4xVL5xj0.roa
File: LfMSBPmaaVf_NY9Ttmf4xVL5xj0.roa (raw, json)
Hash identifier: 33kDJxjxNNYj0qhH0xtjXUbmP2sgMhQ2R/cWEjAaIp8=
Subject key identifier: 2D:F3:12:04:F9:9A:69:57:FF:35:8F:53:B6:67:F8:C5:52:F9:C6:3D
Certificate issuer: /CN=56e3353d5f423ad4271c3261caa543140530bddb
Certificate serial: 01856D4A9702BD72086CC086637D85AFA4F2
Authority key identifier: 56:E3:35:3D:5F:42:3A:D4:27:1C:32:61:CA:A5:43:14:05:30:BD:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VuM1PV9COtQnHDJhyqVDFAUwvds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/LfMSBPmaaVf_NY9Ttmf4xVL5xj0.roa
Signing time: Sun 01 Jan 2023 12:24:42 +0000
ROA not before: Sun 01 Jan 2023 12:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41794
IP address blocks: 5.44.170.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:97:02:bd:72:08:6c:c0:86:63:7d:85:af:a4:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56e3353d5f423ad4271c3261caa543140530bddb
Validity
Not Before: Jan 1 12:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2df31204f99a6957ff358f53b667f8c552f9c63d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9a:16:ac:5d:d7:d4:f0:eb:e5:05:dd:aa:74:
37:60:23:3a:8e:40:df:54:ad:05:f3:33:de:ce:82:
be:09:bf:ed:74:f9:5d:7e:4c:df:2b:db:27:98:6a:
c8:2c:b9:6b:ed:9e:63:dc:e5:86:b9:45:74:11:ac:
bb:fe:a2:78:6f:ed:52:52:6f:b7:8d:86:9c:e3:8f:
c1:e9:d7:f6:40:b6:91:fa:75:7d:a3:49:ba:50:06:
b1:4f:83:a7:25:bf:e6:dc:19:cc:21:ed:e5:53:b2:
6b:f8:f6:71:88:4d:64:04:31:df:ae:49:80:1c:fd:
69:8c:2f:b4:c6:d6:b7:d0:ea:e1:57:59:17:f1:c7:
ae:ff:6c:a1:17:bc:2a:f1:e6:b3:96:f8:d8:c5:db:
33:f6:d2:ce:97:4c:28:73:6b:10:13:e5:d7:aa:00:
23:4d:ce:dd:ff:73:0b:6b:a0:c2:45:ac:b2:3d:1b:
c2:ef:f3:50:e5:72:98:f5:6d:84:b9:ae:8c:dc:69:
cd:7c:38:79:b8:6e:ab:3f:83:0f:93:e8:1e:39:20:
e1:09:42:89:7e:01:32:5f:1d:c9:bf:29:23:01:7f:
75:a3:b9:e2:3c:c6:58:94:5e:39:94:7b:4f:dc:71:
f5:cf:e5:29:37:87:4e:d3:6e:80:9a:34:ef:d7:b4:
e2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F3:12:04:F9:9A:69:57:FF:35:8F:53:B6:67:F8:C5:52:F9:C6:3D
X509v3 Authority Key Identifier:
keyid:56:E3:35:3D:5F:42:3A:D4:27:1C:32:61:CA:A5:43:14:05:30:BD:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuM1PV9COtQnHDJhyqVDFAUwvds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/LfMSBPmaaVf_NY9Ttmf4xVL5xj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.170.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:9f:34:e2:39:96:31:8f:48:12:9d:93:42:a6:ff:c6:e5:51:
86:7e:2d:61:f0:4c:e2:8e:99:98:aa:31:0d:09:c4:8c:cd:b6:
1e:2e:0a:f0:a1:c9:81:e9:3b:78:57:8c:88:a7:41:e1:67:21:
f4:a6:0e:a6:ab:9e:09:c0:36:fa:b8:99:f5:01:e1:de:38:ca:
07:27:7f:70:c8:2b:b1:eb:20:82:17:72:4d:6a:c7:ee:58:d6:
f4:cc:3d:dd:ca:a0:e7:fd:47:39:45:a8:f3:3b:f8:91:58:43:
eb:ec:10:37:c5:dc:56:b0:c7:2d:9c:f9:b0:fa:ed:dd:24:c6:
3d:75:25:ae:ae:82:a5:2f:80:a4:9f:a3:d3:b4:25:82:e6:a4:
65:68:ac:60:f5:2c:07:72:8d:af:a8:dd:57:fb:a9:b3:96:48:
7b:f0:e4:c7:4d:14:45:b8:77:ed:4c:78:b7:18:29:54:46:ab:
dc:8e:c5:3b:58:d6:32:b7:09:68:4f:fd:8e:de:13:70:66:d4:
b1:d6:f9:1d:7e:03:f2:6b:80:c0:95:63:35:2a:d7:75:2c:0c:
72:0b:cc:62:31:9f:35:8c:2b:dc:ca:f6:ba:63:f8:42:20:39:
7b:f7:ab:ba:72:58:db:77:0c:66:33:82:ed:07:e1:b0:38:ab:
a3:55:56:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:49:10 2025 by rpki-client