Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/j5KNTjWq5_4RGldwn6cgs9HLclI.roa
File: j5KNTjWq5_4RGldwn6cgs9HLclI.roa (raw, json)
Hash identifier: 9H+QCZPKSIlHWV1kTn0a9dpvLKEdgVaU40e/iII6LUA=
Subject key identifier: 8F:92:8D:4E:35:AA:E7:FE:11:1A:57:70:9F:A7:20:B3:D1:CB:72:52
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 018A56F755DA291524A4EE1A177B1061C044
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/j5KNTjWq5_4RGldwn6cgs9HLclI.roa
Signing time: Sat 02 Sep 2023 17:36:04 +0000
ROA not before: Sat 02 Sep 2023 17:36:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 217.113.22.0/23 maxlen: 23
217.113.26.0/23 maxlen: 24
5.134.86.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:56:f7:55:da:29:15:24:a4:ee:1a:17:7b:10:61:c0:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Sep 2 17:36:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f928d4e35aae7fe111a57709fa720b3d1cb7252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3b:35:2f:31:37:61:61:df:3f:28:c1:79:da:
60:ec:2a:16:b9:e9:cd:49:b7:a7:90:8c:a7:61:f1:
e2:ba:e8:63:28:e2:12:60:57:22:13:7c:24:35:cb:
8f:1e:62:cf:83:93:fb:cc:11:89:ae:c5:e0:ca:74:
40:bf:4d:63:25:d1:ce:d8:13:aa:90:4d:da:1a:25:
3a:2d:76:d8:65:d7:02:e4:0f:26:03:53:c1:86:bc:
08:90:86:c7:84:a5:ee:e2:2d:f7:81:e6:d1:7e:5f:
4b:44:1d:13:33:06:4e:45:9c:83:21:df:0d:66:70:
4e:a3:30:84:37:ac:28:d2:a3:ed:96:40:93:68:01:
56:bd:54:7d:17:c2:70:99:1d:59:f4:97:43:6b:0b:
b4:f1:84:39:8d:36:5e:46:0a:40:a8:8e:54:7a:77:
93:6f:21:8a:ce:bc:d7:ef:6c:70:f5:ef:b4:0f:0f:
fc:93:d6:7f:55:86:f1:8e:f2:ce:4e:b8:50:5a:e1:
79:2d:ec:d3:14:f8:f8:a7:3c:8d:f7:d5:a4:ea:0d:
f1:90:0d:4f:67:cb:49:ba:98:60:64:f5:85:e1:e7:
9b:3a:db:55:a0:08:f8:3d:a2:c4:e3:ee:0e:a9:c1:
09:b0:bc:70:71:4a:1b:d2:97:b9:fb:52:f5:ed:11:
2b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:92:8D:4E:35:AA:E7:FE:11:1A:57:70:9F:A7:20:B3:D1:CB:72:52
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/j5KNTjWq5_4RGldwn6cgs9HLclI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.86.0/23
217.113.22.0/23
217.113.26.0/23
Signature Algorithm: sha256WithRSAEncryption
14:b2:de:71:34:7a:9d:b1:22:a8:ac:43:e1:98:20:82:c3:c9:
5a:07:c3:24:bf:98:6c:8e:4e:67:12:f1:c1:58:4d:38:42:70:
7c:25:43:74:d6:ac:be:b4:2a:f0:1f:b4:85:6c:65:3e:f9:6f:
94:3c:a7:d8:a8:45:57:3e:9c:ff:e6:ec:ac:20:fc:49:ac:ac:
d5:d6:c5:38:7e:ca:7c:bc:96:ce:e4:27:0b:0c:fe:9d:21:d5:
5a:eb:4e:b2:94:e4:4a:b1:7f:b8:f8:88:a6:8d:26:7c:a3:cf:
3c:5f:ef:7c:e1:2c:9a:d6:36:3f:d8:2b:22:64:68:e1:86:b5:
bd:05:62:b7:1e:03:5b:c9:6b:65:a1:b5:b0:97:89:9a:e1:cf:
a6:ba:21:76:f1:e1:43:ad:fe:dd:11:77:ac:a8:20:2b:2d:24:
00:dc:3b:e4:92:d7:80:38:23:14:e1:ad:11:13:a1:55:9b:94:
e8:cf:35:e3:c4:43:01:c6:9b:68:54:aa:f4:9a:2f:a1:da:3e:
e7:4f:b9:78:7c:8f:56:77:04:bd:a8:3e:0b:37:6a:6d:65:83:
b5:c4:37:da:52:bc:ff:cb:89:6c:76:2f:98:d2:57:51:d2:b8:
41:8b:f8:b2:cb:83:92:5c:0c:1c:92:32:92:f9:b5:82:4b:e1:
1f:a8:78:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:32:47 2025 by rpki-client