Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/5vsurYmSX4Tf4q3ghvgwrkgSbDg.roa
File: 5vsurYmSX4Tf4q3ghvgwrkgSbDg.roa (raw, json)
Hash identifier: a+H9ce6xuWK6pOILd4OWINUC3j/ZcVm6qkWUOdEtNVY=
Subject key identifier: E6:FB:2E:AD:89:92:5F:84:DF:E2:AD:E0:86:F8:30:AE:48:12:6C:38
Certificate issuer: /CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119
Certificate serial: 01857227F1030145D7D99E33B40927AFB4D2
Authority key identifier: 6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/5vsurYmSX4Tf4q3ghvgwrkgSbDg.roa
Signing time: Mon 02 Jan 2023 11:04:58 +0000
ROA not before: Mon 02 Jan 2023 11:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7138
IP address blocks: 185.14.85.0/24 maxlen: 24
185.14.84.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:27:f1:03:01:45:d7:d9:9e:33:b4:09:27:af:b4:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119
Validity
Not Before: Jan 2 11:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6fb2ead89925f84dfe2ade086f830ae48126c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:47:d5:ce:0f:4d:91:65:4f:15:d6:96:58:2d:
be:bc:68:30:98:c8:42:87:a4:ff:af:6c:67:16:42:
82:69:8b:98:26:52:3f:85:ad:d7:56:e8:19:0b:ad:
68:c5:55:2b:73:ee:86:c7:80:c7:8e:4f:27:11:b2:
70:ee:9d:f7:77:73:b1:22:07:b6:0d:e5:c3:30:74:
99:fa:4e:bf:1c:cc:64:69:b9:ef:5b:26:88:40:50:
0c:5e:b1:c6:a5:83:fd:86:f3:35:4e:1f:d4:f5:93:
bc:50:da:08:7e:48:44:c3:4a:73:10:23:29:d3:aa:
26:df:44:7b:1c:a4:e7:58:a8:95:cc:90:93:34:2f:
59:2c:a5:50:09:14:ec:72:f2:05:81:d8:c3:66:ab:
b6:f6:1d:3a:d7:48:63:b7:b8:e8:50:10:2a:99:43:
2a:4c:ed:09:b8:40:e3:0d:48:de:cc:da:0a:7e:bb:
75:e3:40:6f:4a:39:1c:e7:ae:8a:c2:63:dd:b6:4b:
86:96:55:5a:ac:78:af:e8:d1:47:a0:5f:f1:3a:05:
9c:f2:2f:f9:51:7c:51:16:5a:4e:d7:48:2e:2e:9a:
f3:bb:26:e8:d0:90:6d:71:41:b7:5d:ea:f2:f5:d7:
f4:03:45:21:56:c9:f4:41:3c:c5:ee:e3:cb:e5:33:
a6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:FB:2E:AD:89:92:5F:84:DF:E2:AD:E0:86:F8:30:AE:48:12:6C:38
X509v3 Authority Key Identifier:
keyid:6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/5vsurYmSX4Tf4q3ghvgwrkgSbDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.14.84.0/22
Signature Algorithm: sha256WithRSAEncryption
78:1b:8b:14:f0:e5:bf:b9:a1:4d:7c:f7:91:b5:57:ea:3d:88:
66:7f:b3:09:3f:c8:74:7c:e2:16:b5:3c:5a:33:57:a7:fe:08:
4b:d6:a4:b1:40:de:56:99:54:79:7e:f9:77:2e:cf:80:1f:87:
87:4c:c1:33:23:be:61:25:20:3d:a5:8a:8f:67:bf:8e:02:d6:
1b:78:ad:a8:75:f8:41:98:ca:07:9a:a3:a5:ad:fb:15:6d:55:
2e:11:39:55:3a:67:7a:6d:07:d1:5b:c8:3e:cf:ae:c3:58:f8:
67:4c:70:53:be:89:81:8e:b0:47:20:cc:6b:74:75:96:1b:b5:
21:6c:7f:a7:b3:18:fc:e5:23:58:5d:fd:fc:6d:ef:cf:c9:97:
66:95:1a:d6:93:82:ed:07:ce:54:19:73:e6:c4:20:8e:75:e2:
16:83:b9:ec:23:f0:b0:77:17:fd:97:ae:48:58:c7:3a:75:3c:
4f:29:44:74:0f:2d:7f:d8:a3:b4:7b:22:d4:98:a9:df:82:74:
2a:be:a2:3a:8d:b5:b0:70:88:82:d3:e9:13:42:3b:54:23:85:
ce:5e:ff:14:3f:53:b7:59:fb:47:8d:41:7d:3d:b2:07:40:db:
76:e0:cb:b3:b6:46:55:4c:cc:33:97:aa:13:b9:79:66:05:a4:
41:7e:3e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:53:15 2025 by rpki-client