Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/ejX5FckERmR7u6uK2kfqu3iIg9k.roa
File: ejX5FckERmR7u6uK2kfqu3iIg9k.roa (raw, json)
Hash identifier: QigxXktxiGH+8BtInw0IYCQ+hlPtj7+CzaOHDtMP2r4=
Subject key identifier: 7A:35:F9:15:C9:04:46:64:7B:BB:AB:8A:DA:47:EA:BB:78:88:83:D9
Certificate issuer: /CN=b1a89b67c66debf5ded3f2880bb4941d30411257
Certificate serial: F54160
Authority key identifier: B1:A8:9B:67:C6:6D:EB:F5:DE:D3:F2:88:0B:B4:94:1D:30:41:12:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/ejX5FckERmR7u6uK2kfqu3iIg9k.roa
Signing time: Mon 04 Apr 2022 09:32:17 +0000
ROA not before: Mon 04 Apr 2022 09:32:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7155
IP address blocks: 5.8.188.0/24 maxlen: 24
5.8.189.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16073056 (0xf54160)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a89b67c66debf5ded3f2880bb4941d30411257
Validity
Not Before: Apr 4 09:32:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7a35f915c90446647bbbab8ada47eabb788883d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bd:6e:9c:5d:14:d6:8c:38:6c:96:b9:d7:e3:
62:c6:6e:50:79:5e:f5:7b:99:0a:ab:99:2c:78:40:
d5:7c:14:83:93:fe:4b:61:26:8d:f0:5a:d3:1e:fc:
67:a5:67:d9:27:be:a9:70:a1:2b:d4:61:9b:79:ad:
93:82:60:53:07:cb:ae:54:98:e7:e6:0f:42:0e:05:
45:a4:1d:e0:8b:74:39:0e:11:33:0a:bb:f2:8e:be:
9d:ac:98:5d:b4:4a:c1:86:13:88:6a:77:70:ac:9c:
be:8b:63:aa:5b:ab:ba:a0:4b:5d:dd:ac:e4:34:aa:
97:1c:74:c7:21:c8:55:b6:89:1e:39:3e:ba:30:cc:
86:6b:de:aa:18:aa:1f:8c:b2:41:7e:fe:7e:e5:6b:
12:78:43:e8:01:e6:6e:16:36:0d:34:e1:bf:7a:3b:
58:4e:bc:d5:01:ce:56:44:be:4c:67:dd:03:e1:71:
44:0c:85:48:ab:fd:59:3f:84:a4:7a:cd:c4:aa:a9:
d8:ec:e1:b7:9a:78:fd:1b:61:41:9a:ff:55:96:9c:
35:8f:74:98:36:fa:a8:a1:2f:f3:0e:fc:ec:9c:4e:
6c:e8:cf:ff:c3:e1:c8:5d:5b:12:0f:7b:b6:95:8d:
2c:ea:de:43:00:e7:46:44:d8:0b:38:4c:4e:38:9a:
f5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:35:F9:15:C9:04:46:64:7B:BB:AB:8A:DA:47:EA:BB:78:88:83:D9
X509v3 Authority Key Identifier:
keyid:B1:A8:9B:67:C6:6D:EB:F5:DE:D3:F2:88:0B:B4:94:1D:30:41:12:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/ejX5FckERmR7u6uK2kfqu3iIg9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.188.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:2c:b1:09:1a:9f:7f:fa:72:72:d7:4d:49:25:63:e6:50:8e:
62:8d:bd:bd:75:3a:91:41:75:0a:9c:cb:85:34:8c:85:51:51:
47:db:82:fb:47:97:88:d3:b5:01:a8:5d:53:87:2e:f4:5c:2a:
cd:a5:2d:fd:a0:09:23:73:87:60:c2:c7:39:33:a6:d1:37:b0:
c7:fe:59:e5:f6:3c:b9:73:9f:1d:9c:1c:93:cd:13:b5:c5:93:
5b:c2:99:ba:4f:d9:9b:ab:11:96:e4:ed:cf:5c:c6:09:da:cd:
17:e9:b8:ad:a5:dc:77:57:39:5d:cf:b8:ec:6b:b3:a6:78:2a:
69:71:19:e6:7c:fc:83:f9:fa:8c:76:bb:d3:11:33:47:b2:cb:
f2:bc:86:bf:c7:0c:d0:18:19:9e:04:45:b2:70:b1:f7:4a:d4:
af:65:d1:04:6e:92:75:cc:51:e0:af:fa:e6:f4:e2:6f:fc:48:
11:cc:12:08:d0:8f:b4:5d:8a:a8:02:e7:4e:e5:4c:79:3c:bc:
20:64:54:95:99:5a:d7:73:bf:28:24:05:6a:d4:ed:50:7b:6b:
60:f4:69:64:18:5a:65:80:68:c3:55:74:0c:c9:96:d3:5c:c5:
59:d2:76:d0:24:a9:5f:74:ef:75:a8:e4:87:b2:bc:5f:46:fd:
46:e2:e3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:48 2025 by rpki-client