Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/5TxHnyJ23vFUw69BMLmpFpdit-s.roa
File: 5TxHnyJ23vFUw69BMLmpFpdit-s.roa (raw, json)
Hash identifier: JNA2qwkIyKlODych8nFLKll4sB9Gt+pfVbB13uEMpcw=
Subject key identifier: E5:3C:47:9F:22:76:DE:F1:54:C3:AF:41:30:B9:A9:16:97:62:B7:EB
Certificate issuer: /CN=25a553794223e6b4c632779b51371dc4e7d70705
Certificate serial: 04FA1A42
Authority key identifier: 25:A5:53:79:42:23:E6:B4:C6:32:77:9B:51:37:1D:C4:E7:D7:07:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JaVTeUIj5rTGMnebUTcdxOfXBwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/5TxHnyJ23vFUw69BMLmpFpdit-s.roa
Signing time: Mon 27 Jun 2022 12:09:00 +0000
ROA not before: Mon 27 Jun 2022 12:09:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3064
IP address blocks: 84.40.16.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83499586 (0x4fa1a42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a553794223e6b4c632779b51371dc4e7d70705
Validity
Not Before: Jun 27 12:09:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e53c479f2276def154c3af4130b9a9169762b7eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e0:dc:ba:f5:4a:e3:b3:d5:41:c0:be:05:8c:
f2:fb:cf:a1:61:fd:e4:f0:04:fc:d2:ad:23:c0:c6:
0c:5c:35:2c:5c:59:59:4e:70:5c:73:b4:2f:9b:fc:
ff:06:d2:ab:db:0a:10:f0:3e:19:52:48:4a:9e:a7:
08:e5:5f:21:f0:1c:16:34:c3:2d:b1:06:20:b1:5b:
64:c2:17:e0:dd:84:2f:85:46:91:cf:ab:26:b9:ac:
9f:ad:fd:f7:a9:cd:4a:00:7c:5a:0f:45:e8:55:3c:
7e:e0:53:73:04:91:aa:02:1b:71:be:50:3d:ad:4b:
dd:3d:38:d8:6b:6e:cf:5f:9b:f4:d7:db:e4:7c:e8:
82:69:19:de:13:d2:5a:d5:f2:6d:23:1f:93:69:22:
b5:03:4a:e9:89:ba:0e:a0:13:8b:37:e1:7b:ee:79:
f9:30:f7:c6:b2:9a:45:14:80:6f:ac:df:a2:91:b4:
4d:ab:84:57:af:46:08:7d:f4:05:2e:c2:1b:d0:40:
88:02:7a:73:e0:37:f7:52:66:cc:f8:c8:53:7a:08:
e7:4f:b9:ac:a1:d7:db:0e:de:68:44:fe:10:63:42:
02:75:cd:83:b7:2c:90:eb:33:9f:83:81:d1:16:36:
54:c8:0d:d7:64:93:ad:a7:1d:64:8c:2f:26:11:10:
f0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:3C:47:9F:22:76:DE:F1:54:C3:AF:41:30:B9:A9:16:97:62:B7:EB
X509v3 Authority Key Identifier:
keyid:25:A5:53:79:42:23:E6:B4:C6:32:77:9B:51:37:1D:C4:E7:D7:07:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaVTeUIj5rTGMnebUTcdxOfXBwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/5TxHnyJ23vFUw69BMLmpFpdit-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/JaVTeUIj5rTGMnebUTcdxOfXBwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.40.16.0/20
Signature Algorithm: sha256WithRSAEncryption
1d:a2:01:ca:98:ca:9a:68:45:e0:f2:bb:df:d4:13:1b:4f:8d:
a1:07:d9:11:2f:ec:9e:3b:00:e5:32:4d:98:49:3a:2d:67:d6:
1e:e6:29:a5:14:31:e5:38:63:f8:4a:9d:15:01:d1:cc:06:59:
de:97:ce:03:5a:45:32:56:89:79:ab:3c:04:26:d3:4c:e9:c4:
a8:2c:3d:bd:a2:2c:76:a8:41:55:9b:bd:9f:48:ad:5d:91:3b:
3f:86:af:78:21:ee:19:09:ef:51:5f:d8:93:b4:7c:d5:6a:a9:
32:9f:20:4a:9f:98:4c:cf:ef:75:f9:70:7f:80:20:7e:ab:12:
43:af:8d:56:be:56:bd:dc:d9:f3:92:b6:ae:8b:74:43:e1:ca:
a7:9d:c8:0e:92:33:7b:cf:dd:e2:22:f2:d7:0b:9f:60:df:42:
9f:26:81:3f:c9:92:63:fb:23:52:f3:3e:3b:e5:f1:af:25:90:
5d:ef:8f:4d:f0:30:45:b2:df:a0:56:b9:66:f9:db:86:2e:5e:
c6:b4:a5:65:28:03:dd:35:96:2a:0b:96:0b:65:aa:24:fd:19:
6c:9f:0b:b8:b4:16:ec:6e:15:c5:94:6e:bc:b7:41:66:57:a7:
fb:e5:0a:d0:9b:57:bb:05:9d:1f:8f:90:3f:12:66:f6:bb:98:
c8:4b:4f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:51 2025 by rpki-client