Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/17527b-ecc2-4498-9208-e22b8c0a1726/1/q2VEqQgUYSgQKqtOdipeCk0TTxM.roa
File: q2VEqQgUYSgQKqtOdipeCk0TTxM.roa (raw, json)
Hash identifier: ybXJo8hWUwWfEw+D62oMHJ9thHgcvBk1cTJWLTvn+1E=
Subject key identifier: AB:65:44:A9:08:14:61:28:10:2A:AB:4E:76:2A:5E:0A:4D:13:4F:13
Certificate issuer: /CN=d56c5074e66f43ce578a3d4a2e7bcc215cb5e960
Certificate serial: 093F7F4B
Authority key identifier: D5:6C:50:74:E6:6F:43:CE:57:8A:3D:4A:2E:7B:CC:21:5C:B5:E9:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WxQdOZvQ85Xij1KLnvMIVy16WA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/17527b-ecc2-4498-9208-e22b8c0a1726/1/q2VEqQgUYSgQKqtOdipeCk0TTxM.roa
Signing time: Sat 01 Jan 2022 02:55:08 +0000
ROA not before: Sat 01 Jan 2022 02:55:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209426
IP address blocks: 5.253.135.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155156299 (0x93f7f4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56c5074e66f43ce578a3d4a2e7bcc215cb5e960
Validity
Not Before: Jan 1 02:55:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ab6544a908146128102aab4e762a5e0a4d134f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:57:01:a5:05:66:e0:81:b3:2e:fc:b4:83:99:
19:73:25:f5:53:a2:85:22:ba:f8:c1:73:f0:8c:aa:
9f:86:41:14:b3:3b:03:75:97:68:82:cb:24:1c:e6:
de:c1:a5:09:f2:35:41:6b:74:05:bd:47:c0:ba:a1:
1f:94:17:cc:d7:34:37:4a:d2:08:e9:6e:19:75:37:
e9:e5:c2:94:35:09:bb:6f:6b:21:5a:71:88:79:5d:
1d:46:1d:5a:6a:79:0a:3d:6a:94:72:6c:08:95:71:
99:85:54:b2:ad:a8:74:75:35:a7:42:2f:57:52:40:
93:73:8b:f5:d1:88:6b:94:d1:ad:f8:3d:9b:30:3c:
53:91:92:bb:d5:41:4f:93:5d:57:de:b4:b2:7c:5b:
bf:51:22:eb:48:4d:11:03:a4:d0:52:9a:a9:cc:72:
a7:d0:8a:93:ad:d2:da:19:bb:1d:ba:d2:e2:f0:2e:
59:19:a5:7e:b3:25:16:89:cf:85:91:c9:01:c3:e2:
f8:6e:24:ed:b4:4c:5f:7f:b7:5e:c7:95:06:78:35:
35:44:21:87:50:e6:36:5f:ba:0a:c3:48:19:ef:5f:
89:fb:d8:70:a9:0d:7f:f8:e7:7a:9f:3c:a5:dc:7b:
46:4b:14:1d:6b:92:5e:82:66:a1:c1:62:80:e9:dc:
ff:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:65:44:A9:08:14:61:28:10:2A:AB:4E:76:2A:5E:0A:4D:13:4F:13
X509v3 Authority Key Identifier:
keyid:D5:6C:50:74:E6:6F:43:CE:57:8A:3D:4A:2E:7B:CC:21:5C:B5:E9:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WxQdOZvQ85Xij1KLnvMIVy16WA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/17527b-ecc2-4498-9208-e22b8c0a1726/1/q2VEqQgUYSgQKqtOdipeCk0TTxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/17527b-ecc2-4498-9208-e22b8c0a1726/1/1WxQdOZvQ85Xij1KLnvMIVy16WA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.135.0/24
Signature Algorithm: sha256WithRSAEncryption
74:6f:55:9c:64:22:5e:b8:12:48:77:13:c7:d7:8c:0e:52:0f:
5c:1e:77:15:df:3c:24:dd:6d:1f:5e:01:03:64:23:28:d1:fa:
9e:86:ed:87:96:6a:5c:63:d5:e9:c8:d7:16:76:89:1c:d8:ba:
c6:b9:1a:89:82:b3:e4:da:0a:f6:d3:ef:7f:a5:56:45:c5:e4:
e0:1e:67:1c:61:17:7c:4e:02:d2:ba:9b:d4:07:a1:f8:44:67:
d8:83:13:7b:d9:9a:e8:3f:7a:1e:5a:4f:21:87:ac:2f:75:fa:
96:90:c3:9a:10:61:16:8c:5d:fe:62:22:8d:de:00:7e:ed:ea:
d1:4f:5b:12:6c:4e:72:5a:b1:31:fb:20:13:3c:74:5a:2f:7b:
5b:df:67:f7:8d:90:d0:7f:42:27:3c:42:ef:1c:17:e8:e7:48:
c5:e2:95:49:19:28:8f:a4:20:7a:1c:c7:63:9c:71:02:56:42:
a6:90:dc:fd:1a:68:9d:83:14:9d:41:15:3c:a3:aa:cd:bc:b0:
05:07:41:4f:0c:d7:9d:14:3a:5c:0a:f7:40:15:91:df:7f:b2:
5e:5d:15:5b:60:2a:16:9e:e9:c2:b6:4d:75:21:de:69:a8:81:
b8:ca:99:74:2a:2d:cf:6b:6c:73:de:af:cc:5d:97:bd:2e:b1:
37:fb:a3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:26:45 2025 by rpki-client