Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/n5hWCDWBfQB5Zw8PdBqYxhIsgz4.roa
File: n5hWCDWBfQB5Zw8PdBqYxhIsgz4.roa (raw, json)
Hash identifier: r9CVLiPiszEeNLOkXqxXiqnERQ10SWoEdoQjkPss6Gs=
Subject key identifier: 9F:98:56:08:35:81:7D:00:79:67:0F:0F:74:1A:98:C6:12:2C:83:3E
Certificate issuer: /CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
Certificate serial: 0185736846BF89F7ECE52171E777EEEE1308
Authority key identifier: E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/n5hWCDWBfQB5Zw8PdBqYxhIsgz4.roa
Signing time: Mon 02 Jan 2023 16:54:51 +0000
ROA not before: Mon 02 Jan 2023 16:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 375
IP address blocks: 192.163.145.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:68:46:bf:89:f7:ec:e5:21:71:e7:77:ee:ee:13:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
Validity
Not Before: Jan 2 16:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f98560835817d0079670f0f741a98c6122c833e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a0:16:49:03:ce:e5:81:59:29:d8:29:74:b6:
a6:d4:c5:8a:4e:5e:22:7c:4d:ec:68:6b:53:3c:29:
97:ee:d3:d8:f8:29:5f:fb:df:34:ff:ce:ed:7d:50:
7d:6c:91:7e:f9:26:fc:42:cd:a2:7b:94:63:55:9c:
e4:30:73:ad:26:6a:d9:38:ed:2d:86:36:5c:f0:d2:
19:41:0d:fd:9e:5a:20:db:ce:c4:76:f3:6c:06:fe:
59:83:6f:56:50:db:af:b5:74:3e:84:e8:52:9b:14:
0a:d3:4c:03:f9:30:13:ef:eb:bb:29:b8:81:02:e3:
74:4e:b0:a3:84:1e:a5:4f:25:f4:fa:41:fb:dd:c3:
3d:ab:16:69:33:ee:0b:80:d0:8a:3d:e6:b3:03:ff:
75:de:1e:7d:78:b0:f0:9d:2c:b1:bb:3e:93:c9:f5:
78:18:10:d3:18:5e:2d:ea:1b:4a:17:f8:e7:48:45:
02:cd:6b:ff:70:4a:20:ee:c0:48:d0:51:e3:fe:8a:
0f:7b:79:41:8e:34:e7:60:8f:8a:b3:60:bd:0d:1b:
67:66:ac:74:9c:5d:e1:4e:93:1d:98:39:a0:5a:ab:
01:3d:91:f4:21:ab:af:98:f5:a4:d5:c3:d5:aa:8b:
72:ad:c6:22:fb:29:a1:e4:ea:b0:60:2f:e8:b1:a3:
5f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:98:56:08:35:81:7D:00:79:67:0F:0F:74:1A:98:C6:12:2C:83:3E
X509v3 Authority Key Identifier:
keyid:E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/n5hWCDWBfQB5Zw8PdBqYxhIsgz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.163.145.0/24
Signature Algorithm: sha256WithRSAEncryption
99:2e:f1:4e:55:37:a9:67:67:ab:08:53:a6:07:c1:c0:02:c9:
16:51:bf:85:6b:f6:60:8e:95:88:7d:81:9e:05:d9:5a:19:4c:
e3:12:1a:b3:38:56:6f:0c:68:e8:01:40:f3:62:93:6c:83:02:
8b:10:fa:2c:7a:ab:ae:23:7c:aa:60:24:85:35:25:23:64:4a:
bd:05:da:54:b2:39:fd:70:57:04:b7:27:53:dc:f3:30:95:af:
18:0e:01:dc:73:8d:cb:ad:bf:26:72:e0:9d:17:f9:3a:ab:0d:
72:7e:eb:ee:94:db:d3:7b:87:6c:4f:db:ca:d6:11:7b:17:3c:
7b:e5:0e:18:12:cb:e1:41:5c:a9:48:c4:5a:d5:14:f3:28:19:
57:ff:da:b3:b3:22:7f:e3:10:c8:cc:6d:d4:46:be:b3:43:1c:
10:a6:8d:16:ac:ed:37:ed:01:5e:ec:a1:a7:0c:8e:eb:a5:10:
29:cd:8f:33:cf:a9:f5:78:99:dc:7a:f8:9f:26:16:00:61:fa:
77:4c:2b:ed:6c:48:00:4f:09:66:1c:87:46:27:a5:af:b4:f4:
7f:cb:c3:9f:e6:bb:bb:d4:ba:99:87:52:7c:03:6b:8b:dc:19:
03:d6:67:14:3d:21:4c:ea:e5:2e:3a:78:d8:a0:ec:10:98:17:
6b:66:85:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:10 2025 by rpki-client