Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/5cs08ggrZih3a7RcNBku7TZUMwA.roa
File: 5cs08ggrZih3a7RcNBku7TZUMwA.roa (raw, json)
Hash identifier: ZcpldqBswUH2yHMrwqhgEn+LAkW4S9x3CjcuzKb3wqY=
Subject key identifier: E5:CB:34:F2:08:2B:66:28:77:6B:B4:5C:34:19:2E:ED:36:54:33:00
Certificate issuer: /CN=8d983a07e6db8bc494c88dfbd1317ba810d2d27a
Certificate serial: 01857169BB3C9326F1A5CCBED6352B3E02F4
Authority key identifier: 8D:98:3A:07:E6:DB:8B:C4:94:C8:8D:FB:D1:31:7B:A8:10:D2:D2:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jZg6B-bbi8SUyI370TF7qBDS0no.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/5cs08ggrZih3a7RcNBku7TZUMwA.roa
Signing time: Mon 02 Jan 2023 07:37:12 +0000
ROA not before: Mon 02 Jan 2023 07:37:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212606
IP address blocks: 185.178.49.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:bb:3c:93:26:f1:a5:cc:be:d6:35:2b:3e:02:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d983a07e6db8bc494c88dfbd1317ba810d2d27a
Validity
Not Before: Jan 2 07:37:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e5cb34f2082b6628776bb45c34192eed36543300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:de:df:9a:37:e7:fa:43:83:ac:46:8d:72:77:
40:fd:b2:26:f9:5c:15:98:c6:c9:51:65:2e:4e:31:
9e:9a:3e:ab:f6:5f:b3:54:cf:d4:10:90:a6:df:4a:
30:8c:8a:fc:dd:03:5b:e5:49:2e:0d:7f:cc:36:56:
82:a4:42:3f:67:ed:8f:67:6b:05:5f:3c:1f:74:eb:
64:9c:ac:62:91:e2:d9:9c:12:c9:95:7c:7e:9f:57:
79:52:b5:c9:aa:17:82:fc:b0:07:2a:90:ce:5c:c9:
40:08:12:ae:f3:b5:69:bd:95:91:82:bc:ff:29:9e:
6b:dd:bd:53:f8:57:5d:6a:c5:ef:17:7a:80:21:5f:
92:cb:aa:9d:74:88:b0:f6:87:e4:7d:a5:55:01:0f:
8b:c5:a6:82:f3:6f:e5:54:e1:d8:0a:35:dc:c2:7d:
c6:0e:5a:01:ad:10:65:bb:3c:23:c3:8e:f4:e8:cd:
f4:d4:ba:51:35:15:e7:91:84:7a:56:e0:49:a0:73:
54:1c:39:ab:45:36:b5:ff:5d:0a:ab:c6:30:dc:dd:
c7:25:1c:54:2b:de:34:2d:6a:99:0b:e9:56:6a:f6:
5b:91:52:6e:83:f2:e7:25:de:29:f1:d2:78:59:a7:
af:b8:3d:bf:1c:f0:7a:c9:a0:8d:9e:ad:37:e7:6e:
10:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:CB:34:F2:08:2B:66:28:77:6B:B4:5C:34:19:2E:ED:36:54:33:00
X509v3 Authority Key Identifier:
keyid:8D:98:3A:07:E6:DB:8B:C4:94:C8:8D:FB:D1:31:7B:A8:10:D2:D2:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZg6B-bbi8SUyI370TF7qBDS0no.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/5cs08ggrZih3a7RcNBku7TZUMwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.178.49.0/24
Signature Algorithm: sha256WithRSAEncryption
76:53:76:bf:b5:b8:46:67:30:02:d1:44:d1:05:7e:7a:b4:d0:
86:fa:3d:73:5b:07:9e:6a:0c:5e:81:6e:8c:3c:9a:cb:a4:44:
4e:2a:3e:fe:21:85:59:a6:4d:05:63:d7:68:06:07:80:5f:ee:
94:4d:27:35:de:9a:cd:69:b9:43:10:d9:46:a2:fd:14:a3:fc:
39:c6:30:c5:eb:05:7c:dc:21:85:ca:0b:13:6d:21:7f:c6:2a:
a1:e2:75:96:be:32:81:70:50:e7:29:56:25:74:47:06:8c:b8:
29:a0:69:cf:60:ea:bb:e3:fb:85:8e:a3:ef:1d:ab:d3:86:67:
10:c9:cc:92:ab:d9:b9:21:ac:ed:03:9b:00:12:71:12:41:fb:
eb:98:3e:4c:bb:11:21:45:c4:72:1c:53:67:a4:bd:65:2a:5e:
18:b2:ee:5b:43:2b:8e:61:0d:b3:b7:e7:c0:be:0f:4d:eb:5e:
08:3a:e4:2f:67:38:4f:d2:cf:db:80:9c:0d:27:c0:67:9e:ca:
b6:0b:5d:9a:49:65:28:f8:3c:b4:64:c7:c3:b7:b2:3f:19:a7:
a1:a1:ea:f8:36:cb:66:78:20:f9:1b:56:37:f7:16:84:2e:88:
1a:6b:ab:78:ea:c8:f6:be:9a:fd:1d:98:cc:05:b6:cf:5d:a3:
61:62:6e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:26:17 2025 by rpki-client