Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/5A25QujyerxnY-PKASTXZJIm4bM.roa
File: 5A25QujyerxnY-PKASTXZJIm4bM.roa (raw, json)
Hash identifier: wIupCJ6ndmh/4fniOzAvffeJx2r6lmuDFPNzTkRLYDw=
Subject key identifier: E4:0D:B9:42:E8:F2:7A:BC:67:63:E3:CA:01:24:D7:64:92:26:E1:B3
Certificate issuer: /CN=51afbc1462455e9869d48b257b18e23be77aa6c3
Certificate serial: 0187946294EDC68B78F14B65A6DB8C78E4DE
Authority key identifier: 51:AF:BC:14:62:45:5E:98:69:D4:8B:25:7B:18:E2:3B:E7:7A:A6:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/5A25QujyerxnY-PKASTXZJIm4bM.roa
Signing time: Tue 18 Apr 2023 12:41:41 +0000
ROA not before: Tue 18 Apr 2023 12:41:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213241
IP address blocks: 185.39.9.0/24 maxlen: 24
2a13:1fc0::/48 maxlen: 48
2a13:1fc0:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:94:62:94:ed:c6:8b:78:f1:4b:65:a6:db:8c:78:e4:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51afbc1462455e9869d48b257b18e23be77aa6c3
Validity
Not Before: Apr 18 12:41:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e40db942e8f27abc6763e3ca0124d7649226e1b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4f:7f:84:08:74:cd:eb:0e:9b:28:b1:79:71:
fb:dd:27:6c:89:ef:f3:cb:5e:32:9b:65:9c:33:7d:
52:35:13:dc:27:87:56:0e:45:18:4e:3a:a9:3b:3c:
25:27:95:f0:a2:27:1a:a8:17:8a:8a:e9:88:a2:ea:
d3:25:45:1f:ec:9d:7e:ab:c2:70:f7:d3:7e:c5:fd:
7a:dc:88:ca:19:de:35:3f:b1:6a:48:cb:ad:d9:d3:
ef:76:30:da:d3:83:01:4d:45:10:f2:34:9c:0f:b4:
39:8c:72:aa:f7:60:6e:9d:97:aa:a2:41:05:1f:e7:
dd:f8:80:b1:99:d6:8c:84:d0:0b:65:b1:c8:19:7c:
35:ef:c5:fe:9b:e6:f8:d4:bc:e0:74:98:73:ab:a6:
13:a5:a5:37:f5:63:4b:b7:10:0b:82:8c:ca:b1:b5:
a4:9a:8c:36:13:62:f3:ba:7a:3f:31:25:97:dd:da:
16:d7:17:8e:0d:25:1e:9a:cd:52:02:75:be:9b:c5:
2e:b1:69:8b:b5:e1:a2:2d:54:d0:97:3c:44:30:c9:
61:e1:ab:63:2d:d9:89:9a:c6:ba:3f:e6:d6:35:2b:
31:73:05:69:2c:a6:f3:3e:89:12:99:65:0f:b9:62:
0f:74:eb:19:cd:e4:9c:f4:fd:09:cf:33:e8:88:cb:
2d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:0D:B9:42:E8:F2:7A:BC:67:63:E3:CA:01:24:D7:64:92:26:E1:B3
X509v3 Authority Key Identifier:
keyid:51:AF:BC:14:62:45:5E:98:69:D4:8B:25:7B:18:E2:3B:E7:7A:A6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/5A25QujyerxnY-PKASTXZJIm4bM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.9.0/24
IPv6:
2a13:1fc0::/47
Signature Algorithm: sha256WithRSAEncryption
9b:73:bf:86:bb:fc:c0:98:77:ce:87:f1:69:82:9d:ba:c2:20:
b0:ae:a8:50:af:0b:d7:9e:d0:3f:99:be:a1:e7:c6:0c:6f:0a:
c7:0e:9c:77:ff:e7:a0:4b:25:8d:a1:ae:22:38:dc:8a:2e:23:
55:4b:a5:3c:a3:0d:b9:65:a2:44:c7:46:7c:b1:31:d8:0f:33:
71:45:c5:76:9a:84:0b:8a:67:2a:79:f0:bb:b8:69:38:f1:ca:
4e:9e:26:f0:38:6a:89:42:a8:ed:6f:48:0d:4c:c2:b5:b7:6a:
da:71:b6:d2:cb:ec:60:e0:74:5c:51:a1:d2:51:ea:ca:60:2a:
fb:a2:59:74:d1:ee:c0:a7:8a:4a:8d:2a:b8:87:bd:eb:2b:a4:
4f:7f:e7:0e:fd:7c:22:ba:71:83:ed:1c:e5:0c:26:d4:42:17:
60:f3:c6:f6:98:fc:bd:91:63:52:b5:a8:df:2d:16:ba:5f:e4:
7f:c7:bc:2f:97:38:42:d9:0a:c3:30:cb:ad:f2:5b:e9:27:ca:
5f:b9:d0:4e:3b:f1:ff:aa:36:f9:f0:d4:0a:af:3d:65:63:38:
c8:af:16:f2:00:4e:3b:f6:f5:b2:4a:33:48:c1:69:b9:b1:95:
13:93:12:49:69:b1:a3:76:64:70:2c:ea:e5:0a:51:de:5c:e8:
58:83:e9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:50:17 2025 by rpki-client