Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/X11l_GEeuTT6GyWren3P4761EHc.roa
File: X11l_GEeuTT6GyWren3P4761EHc.roa (raw, json)
Hash identifier: g3dlsAFGkjsK7Qo2v5W0w8As44XGC+q6B2VF2hYYwas=
Subject key identifier: 5F:5D:65:FC:61:1E:B9:34:FA:1B:25:AB:7A:7D:CF:E3:BE:B5:10:77
Certificate issuer: /CN=6a187ca5b8aee195cc8cadcfb48c544b181477ef
Certificate serial: 01856EC1FA0E08DA3C43AC420FE045B522E9
Authority key identifier: 6A:18:7C:A5:B8:AE:E1:95:CC:8C:AD:CF:B4:8C:54:4B:18:14:77:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/X11l_GEeuTT6GyWren3P4761EHc.roa
Signing time: Sun 01 Jan 2023 19:14:43 +0000
ROA not before: Sun 01 Jan 2023 19:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30437
IP address blocks: 159.245.16.0/24 maxlen: 24
159.245.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c1:fa:0e:08:da:3c:43:ac:42:0f:e0:45:b5:22:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a187ca5b8aee195cc8cadcfb48c544b181477ef
Validity
Not Before: Jan 1 19:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f5d65fc611eb934fa1b25ab7a7dcfe3beb51077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:77:c9:42:7b:27:8a:b5:e3:db:eb:c7:0c:c5:
f9:b4:38:3c:77:51:57:2f:ba:7e:c1:45:6a:3c:87:
09:3f:41:fd:c6:66:6f:d0:a3:2c:a0:27:b9:fb:53:
b6:46:87:18:e7:97:5c:9d:53:68:20:35:1b:fc:d1:
f2:34:aa:06:b7:e3:d4:43:17:9d:4d:41:fc:67:13:
0c:3a:44:fc:45:f0:a6:77:02:dd:5a:e3:63:4d:21:
6c:59:0c:3e:a3:43:93:77:21:5b:ed:8c:37:a1:61:
cd:e0:ae:53:2b:a0:41:66:85:3d:44:d0:85:fb:27:
80:e5:e2:85:5f:1f:9e:35:37:41:00:1e:ce:cc:7e:
8a:bb:cc:6b:7f:32:fe:2d:4d:11:6b:23:c4:ff:45:
8e:51:e7:5e:aa:ee:1e:f7:d2:a7:92:81:3f:42:55:
3d:5e:35:16:a4:ed:0a:66:c0:94:98:e1:93:d0:9f:
48:99:48:00:83:a5:25:93:70:b8:ed:45:73:0d:d6:
d8:cb:6a:b3:ab:e5:7f:67:13:36:70:70:d9:f0:3e:
9d:d5:fc:ce:19:ae:6c:b6:02:dd:63:54:12:e7:09:
f2:ef:e4:6b:9c:0b:f7:1f:17:9f:b8:86:d3:b7:19:
5f:43:97:58:9c:8b:93:8b:7a:39:8b:61:d3:c8:24:
7a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:5D:65:FC:61:1E:B9:34:FA:1B:25:AB:7A:7D:CF:E3:BE:B5:10:77
X509v3 Authority Key Identifier:
keyid:6A:18:7C:A5:B8:AE:E1:95:CC:8C:AD:CF:B4:8C:54:4B:18:14:77:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/X11l_GEeuTT6GyWren3P4761EHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.245.16.0/24
159.245.18.0/24
Signature Algorithm: sha256WithRSAEncryption
67:81:6f:89:c5:8f:c4:10:18:bf:e4:0c:a9:46:66:36:5d:95:
33:43:9a:a6:1d:0c:e7:ef:43:3e:ae:9f:d1:68:86:20:33:93:
6f:a4:48:25:6d:53:92:80:89:7c:84:81:ed:cc:fc:a7:21:de:
f5:7d:6b:dd:5d:a3:a5:54:15:f0:32:37:5e:c4:ca:07:2a:eb:
33:82:86:06:c1:ca:a9:91:f5:8f:d8:18:34:3e:b6:86:58:cf:
e9:40:86:03:90:12:f8:d8:fd:77:a2:ce:d7:f3:16:58:39:16:
19:00:d6:d5:4f:d2:b5:aa:8f:03:cb:38:3f:f3:ae:47:46:f3:
c8:b9:07:eb:77:63:1b:fb:17:28:55:f9:e5:54:86:54:e0:4d:
64:2b:3e:7a:02:68:23:11:fa:b8:c8:31:9d:02:64:b4:48:9b:
ae:3a:76:12:95:d4:39:2f:a0:a1:85:a4:ac:b7:91:f7:9a:64:
bb:77:4a:04:1d:6c:18:94:f0:6e:25:c9:78:4c:73:82:02:77:
01:de:05:4f:40:04:c8:ef:b4:6a:84:d0:81:34:4e:d7:7a:00:
53:cf:75:27:3c:13:e1:ac:a0:1f:b7:53:23:93:a7:4f:d3:fa:
8e:e4:6e:65:57:61:53:c0:bc:3d:6a:ff:2d:d3:91:4e:cf:6b:
94:a0:15:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:45:17 2025 by rpki-client