Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/etbRy2Nrw5qo2tT1StHD5BrSjWA.roa
File: etbRy2Nrw5qo2tT1StHD5BrSjWA.roa (raw, json)
Hash identifier: LFH6/eQPj18kQjUQSwFhNpb0lddV+cMf3XNf7IxZz9k=
Subject key identifier: 7A:D6:D1:CB:63:6B:C3:9A:A8:DA:D4:F5:4A:D1:C3:E4:1A:D2:8D:60
Certificate issuer: /CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Certificate serial: 0188099FD442589B70C566E0632BC4AA5FDA
Authority key identifier: 96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/etbRy2Nrw5qo2tT1StHD5BrSjWA.roa
Signing time: Thu 11 May 2023 07:04:09 +0000
ROA not before: Thu 11 May 2023 07:04:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204603
IP address blocks: 5.42.64.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:09:9f:d4:42:58:9b:70:c5:66:e0:63:2b:c4:aa:5f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Validity
Not Before: May 11 07:04:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ad6d1cb636bc39aa8dad4f54ad1c3e41ad28d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3e:95:c6:6f:40:a5:1a:23:c0:2b:80:54:c9:
e6:c8:39:27:bf:e5:57:64:24:0b:02:97:85:c3:f8:
dc:1f:db:84:fb:73:82:34:80:92:3f:02:5d:b6:ac:
f3:bc:bb:dc:71:46:21:32:b0:7b:fa:c7:98:65:aa:
e7:36:5b:9a:c8:2d:1f:8e:2b:ce:8f:90:c9:67:0c:
5a:a0:a1:4b:6f:16:bd:4f:ba:a2:0b:ca:17:f2:08:
28:19:3c:8f:01:7c:ff:e0:11:43:8b:e5:2e:b0:41:
3c:85:95:07:35:38:3f:08:e6:b9:46:c2:08:08:48:
d1:49:78:bb:96:a4:a8:2d:a3:c5:ab:14:dd:52:bb:
86:03:89:88:5d:37:30:e6:71:3f:6d:b6:fd:11:a0:
34:00:80:28:fc:5d:45:39:d3:ec:17:93:5a:05:41:
af:6b:18:36:71:62:b0:4b:5a:42:bb:9f:c3:4a:d9:
f4:90:a0:92:25:99:a7:19:b5:36:b0:51:83:ed:1e:
a8:1b:b4:8f:8a:c6:c7:57:06:f1:6b:f3:9a:5f:a8:
73:88:02:75:c8:73:68:63:33:9f:2b:b6:f5:e0:db:
52:27:2d:87:de:11:9d:3e:8a:51:49:cd:5e:14:2b:
3d:18:2d:36:0f:a2:de:8d:d1:dc:61:03:01:94:01:
19:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D6:D1:CB:63:6B:C3:9A:A8:DA:D4:F5:4A:D1:C3:E4:1A:D2:8D:60
X509v3 Authority Key Identifier:
keyid:96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/etbRy2Nrw5qo2tT1StHD5BrSjWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.64.0/22
Signature Algorithm: sha256WithRSAEncryption
79:58:a2:f8:e4:af:54:10:10:15:aa:3d:6b:e3:e4:91:a4:f2:
ac:3e:52:e0:26:8c:e2:cb:58:90:c6:59:5b:aa:22:45:b8:ba:
b7:f2:62:f2:5b:22:0b:24:f6:a1:fa:90:07:34:c8:78:2a:44:
ab:4a:34:3f:30:fb:80:d7:e1:8b:d3:46:3e:6f:5e:a7:fa:21:
06:bc:90:6e:41:13:a2:a4:03:d8:93:6b:21:80:2a:39:a8:c1:
f4:41:4e:08:cc:14:ac:3a:06:64:dc:ca:c2:ce:91:04:75:30:
99:8b:52:4a:57:32:60:76:f8:eb:3e:71:86:92:70:1c:77:84:
82:88:e6:78:4c:68:8a:73:9d:71:a3:42:83:40:00:30:de:8b:
94:28:51:d5:d6:ae:17:6d:eb:51:89:02:57:8c:a4:a8:7f:f5:
d6:bc:da:5d:03:1e:ce:f8:60:18:70:b0:3e:7c:e9:99:8f:b7:
79:51:1a:46:20:6e:3b:10:cf:0e:cd:27:ed:f2:00:39:0c:dc:
50:9b:6e:64:0e:27:44:70:6a:da:bd:b4:63:df:85:59:5c:7a:
6f:16:24:d9:b3:e5:ca:23:72:03:9d:0d:99:47:59:60:98:13:
a0:1e:e1:bf:a7:bc:55:06:e8:8a:af:9e:90:5d:5f:35:28:46:
ae:43:46:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:28 2025 by rpki-client