Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/5glwHpYx5QUi5AIv0lRb4AFocQw.roa
File: 5glwHpYx5QUi5AIv0lRb4AFocQw.roa (raw, json)
Hash identifier: SeVhgbGKQI4VJgGuoYhfvTr13eoM821CQH6Wtd8YErA=
Subject key identifier: E6:09:70:1E:96:31:E5:05:22:E4:02:2F:D2:54:5B:E0:01:68:71:0C
Certificate issuer: /CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Certificate serial: 01890C117247AC405C7F06F841BA4CC307F3
Authority key identifier: AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/5glwHpYx5QUi5AIv0lRb4AFocQw.roa
Signing time: Fri 30 Jun 2023 11:30:17 +0000
ROA not before: Fri 30 Jun 2023 11:30:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3326
IP address blocks: 77.120.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:0c:11:72:47:ac:40:5c:7f:06:f8:41:ba:4c:c3:07:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Validity
Not Before: Jun 30 11:30:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e609701e9631e50522e4022fd2545be00168710c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4a:81:9e:c9:d2:76:13:b0:10:ce:fc:56:0a:
b1:d9:31:3b:8f:5e:88:0a:96:43:76:b7:b9:f6:8e:
1e:2c:6d:fa:6a:ec:5a:fa:4c:bd:6c:8f:5d:3f:8b:
ad:ae:df:41:fe:0f:8a:8f:d1:d3:24:6c:ad:55:09:
c8:c7:da:bb:3f:36:22:f9:cc:3a:16:39:57:43:41:
20:9d:58:bf:d4:7b:fb:67:98:6a:96:b9:8c:c5:d0:
63:14:9e:af:66:ce:74:a8:8d:ff:66:97:08:cc:4b:
8d:34:3a:94:8b:da:0b:0c:ea:59:92:f8:1c:63:82:
77:3f:9c:bc:0f:f6:71:4e:8e:01:4f:88:24:a4:75:
97:df:62:45:a8:1f:21:ca:cd:fc:6e:3e:66:cc:8d:
55:9c:d7:70:29:1a:72:f9:74:60:5a:f9:0e:08:c3:
e5:22:cb:80:8f:18:d5:87:af:2b:55:c8:1d:aa:ef:
12:00:2c:55:a2:3b:06:8b:e1:83:a0:1e:0b:30:82:
45:be:ac:a4:44:3f:25:65:d2:39:38:8f:79:70:4e:
00:cd:ff:66:14:7e:43:e6:a3:b9:ba:c5:96:4e:20:
23:b0:cc:92:e8:f0:f5:f4:49:c6:7a:b6:de:38:55:
5a:2f:db:a9:a4:06:1b:23:18:58:4e:1e:bd:3f:6a:
11:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:09:70:1E:96:31:E5:05:22:E4:02:2F:D2:54:5B:E0:01:68:71:0C
X509v3 Authority Key Identifier:
keyid:AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/5glwHpYx5QUi5AIv0lRb4AFocQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.120.6.0/24
Signature Algorithm: sha256WithRSAEncryption
97:99:c2:0d:cf:60:1b:e2:b8:12:fa:00:a7:2a:2a:c2:ee:6d:
52:9a:0a:1c:11:9e:ec:37:a4:b8:45:54:f6:f2:31:71:65:f4:
aa:97:b1:fb:1d:d1:f0:93:a2:5d:23:f3:26:7d:f2:ba:44:82:
28:f0:70:85:47:b9:58:3a:80:17:cd:f0:7d:a2:19:6a:65:7a:
39:ea:17:52:fa:ff:f1:76:86:8c:56:65:52:83:03:83:a0:bd:
33:22:38:a8:94:c0:2f:18:3a:da:71:09:a1:f6:9a:f6:37:34:
1f:02:93:23:f3:fd:f8:9e:d9:ae:f4:bf:12:09:20:29:6f:12:
11:7d:8e:c3:ef:e0:4f:be:f8:c3:c4:00:bf:28:07:68:e5:ed:
e0:fd:8e:05:77:fa:a3:0e:a4:a2:5c:da:c9:a1:87:d7:7e:0b:
59:5c:25:bb:4e:c2:33:ed:04:1b:65:01:3a:a0:01:7a:ad:a2:
00:da:52:9b:df:07:83:37:3d:6a:c4:9a:ce:22:66:06:c8:31:
5c:f3:48:67:76:aa:c6:f9:16:b2:b6:58:14:54:c5:ca:73:5e:
9b:4e:96:02:02:6d:f4:12:b6:a7:0f:f0:6d:45:54:a1:d1:8d:
ee:59:1e:16:c6:ca:4a:70:e7:2e:77:d2:66:36:a0:10:53:0a:
eb:e3:ee:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:48:06 2025 by rpki-client