Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/5WqBCv-Mzd6NqRzm4e7tTlXi87o.roa
File: 5WqBCv-Mzd6NqRzm4e7tTlXi87o.roa (raw, json)
Hash identifier: g7a3it5KfPwqJAqoCTUvrQptEbgIdJiYTcx0FCgTyRY=
Subject key identifier: E5:6A:81:0A:FF:8C:CD:DE:8D:A9:1C:E6:E1:EE:ED:4E:55:E2:F3:BA
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 018895DD5C4F85A3D76A04B8A6CB10F6DCF5
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/5WqBCv-Mzd6NqRzm4e7tTlXi87o.roa
Signing time: Wed 07 Jun 2023 12:38:12 +0000
ROA not before: Wed 07 Jun 2023 12:38:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198265
IP address blocks: 217.113.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:95:dd:5c:4f:85:a3:d7:6a:04:b8:a6:cb:10:f6:dc:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Jun 7 12:38:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e56a810aff8ccdde8da91ce6e1eeed4e55e2f3ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7e:14:df:45:89:4e:40:48:08:3c:6d:e4:7c:
a6:72:c8:77:c9:ef:af:b5:3b:9d:0e:15:ca:54:b0:
bb:6b:d2:4d:94:c7:4d:d6:87:c4:8d:5f:45:1b:37:
52:aa:78:f6:0f:22:e9:df:9f:5d:a1:ba:a2:97:f6:
72:ac:50:63:69:5c:21:88:08:1f:87:dd:c3:e8:f7:
04:6b:31:1f:03:28:e2:e0:07:4a:d0:cf:27:e1:64:
c3:17:23:72:8b:a7:7d:e8:07:db:c8:a7:9e:ae:2f:
68:b5:42:da:34:ce:ac:6a:7f:85:a0:45:11:2f:96:
cc:0b:11:ac:0c:3c:bc:ab:d9:81:0c:2b:61:cb:b4:
a8:51:69:0e:d9:b7:92:ae:b1:f3:02:49:dc:6c:16:
2e:de:8d:25:fb:e2:82:b0:d8:70:28:e1:2c:e5:37:
6f:30:c5:e9:52:08:1f:2d:52:05:57:5b:c3:92:88:
e6:98:c6:5d:1b:55:12:b2:f1:9b:d3:ed:c9:c4:b1:
bd:fe:ad:8b:ce:11:12:9a:1f:77:2d:20:a5:82:b0:
48:6c:76:2c:e3:49:f9:3f:91:6a:c4:39:e8:6a:0b:
bf:28:ea:87:14:e7:01:e9:97:e5:86:55:9f:9e:22:
0f:86:ce:66:09:cd:83:b6:94:6c:32:28:0a:39:de:
5d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:6A:81:0A:FF:8C:CD:DE:8D:A9:1C:E6:E1:EE:ED:4E:55:E2:F3:BA
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/5WqBCv-Mzd6NqRzm4e7tTlXi87o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.113.25.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:0d:dc:f7:42:c6:92:97:05:a2:42:b0:34:af:ee:ee:55:b0:
56:09:f9:da:98:c3:76:37:49:79:c6:e6:fb:83:5b:6b:b4:fe:
11:79:69:5b:f6:a9:21:ab:71:22:ac:68:45:3a:8c:c8:67:81:
46:91:19:61:18:18:9f:fb:a2:c6:5c:5a:4c:fc:e4:ee:ab:3c:
ac:0d:3a:51:52:31:d6:e6:e8:5f:a2:a1:8b:25:2e:33:55:ca:
83:f0:1a:1a:0e:d0:3e:54:8c:8a:54:ef:b9:75:46:07:b0:3b:
1d:b5:67:57:8b:80:ac:1d:ae:68:69:67:38:c3:da:90:dd:61:
af:f2:a6:90:26:b7:67:d2:5b:39:16:4c:6d:c1:a5:33:bc:b0:
6e:4d:e6:e4:cc:f4:0b:46:90:f2:e8:32:bc:2a:58:c3:86:1c:
25:97:a8:2b:ac:e4:96:c2:23:60:cf:7b:06:82:96:e6:cf:77:
2c:06:87:7a:aa:0d:70:5f:99:c3:25:55:f0:d1:1b:43:f7:09:
f1:b8:f2:d0:41:f7:d0:3e:dc:53:94:d1:ab:89:1d:01:5f:29:
af:04:d9:ae:d7:e7:64:e4:1b:44:fc:1b:14:8c:8d:f8:f1:e4:
a7:5d:1a:5c:ac:aa:e7:50:74:f1:b6:66:b6:84:2b:7d:be:02:
59:a3:23:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:26:54 2025 by rpki-client