Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/FjEpfzLR0sWoxIPyPp_YrdjQCao.roa
File: FjEpfzLR0sWoxIPyPp_YrdjQCao.roa (raw, json)
Hash identifier: QYCi1T5d1Gm/k6GdYDqBd/JqIYbNp2XeoLgi1+zm9Vw=
Subject key identifier: 16:31:29:7F:32:D1:D2:C5:A8:C4:83:F2:3E:9F:D8:AD:D8:D0:09:AA
Certificate issuer: /CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Certificate serial: 01884C62356F91D8D9777728E544E0BBC540
Authority key identifier: 96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/FjEpfzLR0sWoxIPyPp_YrdjQCao.roa
Signing time: Wed 24 May 2023 06:11:24 +0000
ROA not before: Wed 24 May 2023 06:11:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200195
IP address blocks: 5.42.68.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4c:62:35:6f:91:d8:d9:77:77:28:e5:44:e0:bb:c5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Validity
Not Before: May 24 06:11:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1631297f32d1d2c5a8c483f23e9fd8add8d009aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c9:f4:71:90:71:72:b3:fe:e4:db:6b:a5:15:
9c:db:89:50:d7:0c:99:39:b0:62:e1:8c:1f:16:da:
38:d1:93:e9:6d:5b:50:8f:d0:93:7a:4c:60:64:be:
a4:3c:ba:7b:f1:79:e0:f8:af:e6:c7:52:85:62:82:
c6:22:93:c6:94:90:46:d8:43:2e:8b:70:21:42:2e:
05:95:0d:9c:49:c2:f9:d2:b1:03:3e:fc:44:43:46:
0d:42:d3:3e:9a:e3:9b:f4:09:75:42:76:e4:bf:b2:
23:ea:01:dd:4b:99:7a:b2:e1:2e:2c:cd:56:d7:55:
8a:22:32:5d:43:64:ae:c9:fd:3c:8b:30:12:5f:79:
0f:10:ad:be:df:87:72:09:3b:c4:4a:74:2b:ec:b0:
94:6e:45:81:e9:b9:7e:e9:ab:31:e7:5b:0f:8f:4f:
da:3f:c6:1e:0e:88:5a:87:d9:c1:f0:50:50:b2:fa:
ea:e3:e0:f7:83:c3:83:b8:e2:a0:c4:98:ab:6a:cd:
e6:b1:f7:0a:14:42:12:69:83:88:b4:7c:54:82:c3:
cc:f1:6c:85:03:77:ab:64:20:97:cc:8b:30:e8:24:
7c:29:6e:f2:10:86:40:76:28:00:0f:96:fa:04:d2:
92:6b:b9:02:91:02:50:c5:ea:c5:50:1d:fe:77:97:
ec:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:31:29:7F:32:D1:D2:C5:A8:C4:83:F2:3E:9F:D8:AD:D8:D0:09:AA
X509v3 Authority Key Identifier:
keyid:96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/FjEpfzLR0sWoxIPyPp_YrdjQCao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.68.0/24
Signature Algorithm: sha256WithRSAEncryption
12:7d:d4:d7:46:10:eb:3b:f2:c0:70:87:a1:47:13:1a:26:a3:
ae:25:78:bb:58:dd:6d:ca:d3:fd:cf:69:0c:d0:af:58:9d:26:
08:4f:80:26:bc:2a:7c:33:7f:95:ad:ce:b5:e9:8b:cd:16:5e:
78:38:08:f1:04:01:eb:44:01:4d:a4:60:89:20:24:bb:40:32:
4f:b1:f0:88:a1:04:42:f8:b2:23:2c:a9:a4:21:43:c0:c8:3b:
4a:7d:60:82:a0:74:a1:0b:53:de:df:4c:80:b6:d1:73:5c:4f:
8c:0e:35:52:3e:14:15:d5:e2:28:2c:a7:11:01:d3:5e:a9:3a:
49:3d:6a:d7:f6:b3:5f:d5:10:3e:e1:bb:0d:84:e5:0b:4d:76:
73:b9:80:15:3c:aa:10:8b:09:99:f3:f2:fa:ed:6f:e0:f0:cb:
fd:26:32:92:a0:eb:9e:be:75:c9:67:98:c0:05:3b:34:63:69:
99:97:67:48:7f:f5:6b:f0:09:43:2c:12:70:b2:96:d5:f8:1f:
03:93:bd:ae:1e:91:e9:91:8b:8e:07:76:28:b1:6e:17:64:da:
ba:b5:f9:33:b9:3b:38:9f:ab:74:51:35:3c:ad:7f:d6:15:b6:
83:3b:68:10:a6:35:fb:84:19:28:5f:f3:57:b1:ce:c5:c6:67:
8b:53:9c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:23 2025 by rpki-client