Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/k5Q3PstNSg80ZEykgq_-Q6stS9Y.roa
File: k5Q3PstNSg80ZEykgq_-Q6stS9Y.roa (raw, json)
Hash identifier: 1PG4ZkPzCXxWIsWFq1e9V7DLhjBNXDQGDNIV02IG648=
Subject key identifier: 93:94:37:3E:CB:4D:4A:0F:34:64:4C:A4:82:AF:FE:43:AB:2D:4B:D6
Certificate issuer: /CN=0f827a5a24e771cc14fa69bb74b3e760167b026b
Certificate serial: 018867443B79E191BD628CEA048DC1DD3A85
Authority key identifier: 0F:82:7A:5A:24:E7:71:CC:14:FA:69:BB:74:B3:E7:60:16:7B:02:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D4J6WiTnccwU-mm7dLPnYBZ7Ams.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/k5Q3PstNSg80ZEykgq_-Q6stS9Y.roa
Signing time: Mon 29 May 2023 11:28:24 +0000
ROA not before: Mon 29 May 2023 11:28:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57732
IP address blocks: 37.98.128.0/20 maxlen: 20
85.209.168.0/22 maxlen: 22
62.106.48.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:67:44:3b:79:e1:91:bd:62:8c:ea:04:8d:c1:dd:3a:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f827a5a24e771cc14fa69bb74b3e760167b026b
Validity
Not Before: May 29 11:28:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9394373ecb4d4a0f34644ca482affe43ab2d4bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:58:fc:f4:7c:41:63:1b:b2:54:2a:69:aa:e4:
90:d5:8b:5f:ff:06:bf:2f:2d:c7:a1:28:44:cc:20:
88:d0:4e:36:a0:70:fe:61:b1:09:97:8b:5c:71:4c:
56:f3:8a:81:55:5d:b4:da:6b:44:8e:4b:8c:7f:7f:
ee:9c:02:a3:c0:57:1f:39:bd:de:67:ba:17:d8:b8:
5b:47:2e:38:4f:7e:62:5b:cb:e0:e4:c4:33:a1:64:
26:01:4b:19:e6:a6:02:0a:00:f7:32:5b:bb:30:f5:
2b:9e:60:1d:5a:1a:ad:b0:e3:24:97:1a:71:18:70:
4a:4f:4b:25:e5:d6:ea:91:1b:e6:cb:48:98:87:90:
6c:b5:54:f3:5d:42:26:4e:d1:82:30:65:9c:f7:b0:
de:a3:4b:45:e8:28:87:7f:f6:8e:0f:9b:2d:87:2d:
56:58:bd:64:41:bd:a0:6d:58:06:04:c0:17:46:d1:
20:0d:77:1e:7e:3f:20:39:08:03:47:4c:ad:1f:ed:
47:b8:1e:e1:12:b9:9d:b6:78:f2:44:8a:bb:78:1e:
6c:b2:f7:bd:1e:1d:dc:6d:38:d6:5f:f7:77:35:8e:
04:14:21:ce:c2:6d:1c:6b:36:d2:82:30:58:cb:d2:
92:56:1a:b2:09:ac:20:00:eb:f7:f0:67:7e:39:c2:
18:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:94:37:3E:CB:4D:4A:0F:34:64:4C:A4:82:AF:FE:43:AB:2D:4B:D6
X509v3 Authority Key Identifier:
keyid:0F:82:7A:5A:24:E7:71:CC:14:FA:69:BB:74:B3:E7:60:16:7B:02:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4J6WiTnccwU-mm7dLPnYBZ7Ams.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/k5Q3PstNSg80ZEykgq_-Q6stS9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.128.0/20
62.106.48.0/20
85.209.168.0/22
Signature Algorithm: sha256WithRSAEncryption
64:29:28:c2:c9:b2:e2:50:10:07:86:37:12:d0:41:17:d8:a1:
70:26:7d:10:0e:c1:69:2d:dc:da:c6:28:47:57:32:68:fc:f2:
da:f7:4d:83:09:c9:8d:12:5d:dc:42:5a:db:ea:4f:c4:51:d3:
27:9a:19:e7:5e:3d:45:f0:d2:22:78:91:ac:2b:f1:64:0f:91:
f1:45:3a:cc:cc:e4:51:a5:22:de:b0:6e:3a:d9:65:be:a6:8d:
22:89:46:27:18:83:45:b4:0a:d0:b5:da:19:ec:dd:da:8f:87:
c6:50:89:4a:17:fa:dc:8c:1a:73:c3:9a:0b:e0:ef:5b:ac:4b:
35:81:ed:8c:03:51:aa:53:17:f4:f6:8f:c5:3b:80:33:de:19:
db:bc:7a:b3:a0:30:86:79:fb:92:2f:1e:35:e2:5e:26:01:21:
78:27:49:0e:bc:52:93:00:c6:44:73:33:07:48:6d:44:95:9c:
53:78:a0:dc:39:59:c9:d6:0f:60:65:a5:e8:75:df:10:f5:36:
55:1e:8c:e9:c5:48:dc:0a:d1:f1:62:a3:7d:3d:84:a5:03:d8:
93:c8:ab:75:f0:c7:bc:23:0b:23:52:d2:05:00:fc:fb:48:50:
8b:7d:f9:99:d2:27:a7:64:44:61:ec:62:7a:92:fd:cd:b3:47:
1e:81:ca:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 14:24:51 2025 by rpki-client