Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/5B39VE3MwwGsvCI4rz08_2RD12c.roa
File: 5B39VE3MwwGsvCI4rz08_2RD12c.roa (raw, json)
Hash identifier: fi4eYpvbwTzny9LeXUipw2AesS/4z9anPFFoW03fPIc=
Subject key identifier: E4:1D:FD:54:4D:CC:C3:01:AC:BC:22:38:AF:3D:3C:FF:64:43:D7:67
Certificate issuer: /CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8
Certificate serial: 018B42B42E2D995971E4487CE74C5D356683
Authority key identifier: 5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/5B39VE3MwwGsvCI4rz08_2RD12c.roa
Signing time: Wed 18 Oct 2023 12:13:06 +0000
ROA not before: Wed 18 Oct 2023 12:13:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39011
IP address blocks: 5.253.188.0/22 maxlen: 22
194.102.204.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:42:b4:2e:2d:99:59:71:e4:48:7c:e7:4c:5d:35:66:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8
Validity
Not Before: Oct 18 12:13:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e41dfd544dccc301acbc2238af3d3cff6443d767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a0:71:f6:57:66:51:e6:16:84:58:52:6b:5a:
00:cc:65:10:89:1e:8d:7e:5d:90:b7:95:78:62:ff:
c7:4f:56:fd:1b:35:18:af:ef:4f:79:d3:fc:d8:d4:
f9:ef:dd:f1:69:0e:cd:9f:91:1b:88:df:66:2f:d4:
60:b2:d5:ba:a6:02:c4:52:6a:e3:17:02:39:a6:74:
b5:23:65:36:5d:cb:ca:12:ce:6e:02:08:68:61:be:
7e:7a:e8:47:1d:07:54:7b:30:22:a4:81:f6:f2:c4:
fa:57:b3:8e:a7:60:21:af:7e:a6:f6:13:bc:4b:a6:
d7:73:1b:4e:a9:59:4e:e5:a4:4e:a5:57:9c:ee:df:
73:02:51:85:10:de:40:ab:3a:fc:d8:3d:c5:8d:46:
70:92:41:6a:79:f6:d1:ec:c8:f1:c0:e7:36:0c:ea:
15:87:96:18:5a:51:6b:94:d3:e3:56:51:52:11:9c:
23:ef:be:a9:eb:51:9d:d7:7e:c4:28:9d:b4:f2:6e:
98:a5:38:e2:6e:4f:f9:b4:0a:dd:fd:68:8e:5b:3d:
b0:c0:28:f2:8e:d2:c0:40:38:a4:fc:1b:20:57:ef:
c8:e6:c1:33:25:48:9e:79:ec:08:34:16:6b:bb:4d:
64:e4:de:20:36:f9:bc:6f:fd:64:fa:20:e7:d9:3a:
88:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:1D:FD:54:4D:CC:C3:01:AC:BC:22:38:AF:3D:3C:FF:64:43:D7:67
X509v3 Authority Key Identifier:
keyid:5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/5B39VE3MwwGsvCI4rz08_2RD12c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.188.0/22
194.102.204.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:54:9d:5c:c3:8d:af:e5:cf:b3:37:b7:14:da:b8:ec:8d:91:
ca:31:bf:82:fd:c9:46:bc:aa:13:bb:4f:24:74:5d:6f:3d:90:
2c:25:50:69:cb:9b:a1:42:dc:76:5b:a9:98:97:6d:47:9d:c5:
80:73:60:cf:df:77:a2:a6:2f:84:57:7b:57:b4:64:15:29:8b:
44:52:9c:c2:93:8b:97:a6:ec:71:3d:3a:3f:fe:e2:56:e9:b2:
c5:ac:89:d1:df:87:6a:f6:08:15:49:fb:b9:e5:fc:51:fa:a2:
fa:a8:63:6b:d1:a2:a3:a1:8c:c2:88:59:6d:49:f9:04:ed:96:
b8:2e:25:f3:f2:a3:0e:81:c4:55:b4:71:13:cc:71:84:db:69:
41:b5:f9:e2:34:20:21:71:e8:bc:9b:06:86:45:17:3f:d9:b1:
24:ed:7f:62:40:7b:70:c1:b5:76:93:09:ec:12:30:8d:73:10:
9a:4a:aa:83:03:dd:a7:08:df:c6:3e:55:b4:85:72:f4:77:56:
87:36:0f:8f:db:92:59:c6:78:0e:08:57:11:75:3c:08:9d:1c:
8e:91:74:3f:94:5d:e3:60:cd:23:c0:5e:2f:29:40:05:2b:f3:
5b:8b:7b:0f:43:08:65:29:fb:27:9a:0c:85:17:5e:83:78:1a:
04:58:b1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:13:38 2025 by rpki-client