Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/cVIuj99eONa2cU3iVOazi2cjBmY.roa
File: cVIuj99eONa2cU3iVOazi2cjBmY.roa (raw, json)
Hash identifier: zUXQLgYqTzey8OzF2HsYIvcaPF0Rppl3rFXIj5maAYc=
Subject key identifier: 71:52:2E:8F:DF:5E:38:D6:B6:71:4D:E2:54:E6:B3:8B:67:23:06:66
Certificate issuer: /CN=86b22303de4b0a870fcfe7b6556c024f75c76a34
Certificate serial: 018A65C55D916F49C627A7E85E7FA68785BE
Authority key identifier: 86:B2:23:03:DE:4B:0A:87:0F:CF:E7:B6:55:6C:02:4F:75:C7:6A:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hrIjA95LCocPz-e2VWwCT3XHajQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/cVIuj99eONa2cU3iVOazi2cjBmY.roa
Signing time: Tue 05 Sep 2023 14:35:47 +0000
ROA not before: Tue 05 Sep 2023 14:35:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25591
IP address blocks: 92.118.200.0/22 maxlen: 22
5.183.68.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:65:c5:5d:91:6f:49:c6:27:a7:e8:5e:7f:a6:87:85:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86b22303de4b0a870fcfe7b6556c024f75c76a34
Validity
Not Before: Sep 5 14:35:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=71522e8fdf5e38d6b6714de254e6b38b67230666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:37:93:7d:25:d5:83:72:5d:14:e6:c1:c7:e2:
a4:f4:ee:7a:1e:cb:d5:17:6e:f0:05:2b:0c:53:1e:
bf:f2:a4:0c:54:81:b0:f2:85:04:c5:c7:a0:6e:06:
ae:0e:fc:70:f0:92:62:59:e6:4d:92:bc:46:4d:60:
eb:5e:a6:0a:e6:3d:36:7a:c8:0a:a9:56:8c:9e:38:
56:8c:04:0e:19:c5:37:0d:c4:5d:d5:eb:23:9f:fa:
94:0d:d6:1c:f3:b3:8d:ac:8e:2d:fd:ac:0e:42:df:
19:f7:ae:43:1d:50:65:7c:ff:9c:16:74:fe:2a:ab:
2b:da:84:4b:dd:05:8a:00:40:3f:46:3f:a7:5f:5a:
79:9c:3b:73:df:0f:5f:58:66:f4:1e:1f:7e:f4:da:
79:28:3a:a2:b1:15:15:5f:ec:fc:4b:e5:3f:c6:d9:
f7:b0:e2:68:04:6f:4c:80:7b:41:62:fc:9c:c0:c5:
04:46:52:10:a6:8c:3f:d5:39:69:db:9d:20:08:3c:
fc:7c:95:f5:38:13:98:e6:ca:90:60:b5:dd:88:2b:
87:75:79:75:52:3b:f4:81:f3:4e:30:76:fd:23:47:
07:93:f5:14:3b:59:81:3f:a3:a4:e6:8b:64:f9:28:
76:78:8b:33:09:1f:1e:06:6c:fa:dd:50:3c:e1:a2:
22:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:52:2E:8F:DF:5E:38:D6:B6:71:4D:E2:54:E6:B3:8B:67:23:06:66
X509v3 Authority Key Identifier:
keyid:86:B2:23:03:DE:4B:0A:87:0F:CF:E7:B6:55:6C:02:4F:75:C7:6A:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hrIjA95LCocPz-e2VWwCT3XHajQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/cVIuj99eONa2cU3iVOazi2cjBmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.68.0/22
92.118.200.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:c0:c4:a3:6f:a7:e9:ec:87:d8:e5:84:3e:19:9b:33:4e:5c:
31:8a:db:b0:a9:4c:34:bd:ed:02:eb:20:64:d8:34:1b:e0:62:
08:59:82:71:56:95:23:be:e7:cb:11:e1:18:7c:93:1f:b0:57:
f6:d4:57:9c:80:cc:20:1b:67:d4:f4:f8:d8:7a:cd:b6:b7:5a:
12:6c:9e:41:33:f6:83:3e:83:56:16:3b:bc:16:5a:d5:27:c1:
13:ca:6c:82:f3:23:92:0d:34:24:1d:90:c8:18:ce:6d:ca:8d:
8c:c3:9e:7a:2d:ea:3b:e9:5f:46:af:7a:81:b6:95:9b:d0:af:
36:6b:ab:ab:b0:0c:ab:13:53:41:05:74:dd:11:db:65:29:46:
f4:76:10:b2:a0:c4:6a:f5:c0:14:3d:18:93:5b:98:4c:c7:bd:
55:7b:b5:25:85:8b:d8:5b:2c:ee:25:20:a3:fa:18:6d:26:43:
a1:11:ab:ff:51:e1:f3:58:00:a8:04:c3:2d:12:b1:e6:75:8b:
56:a2:fc:7f:77:d2:6a:20:1c:bc:67:3f:95:2d:0c:f0:63:7a:
d1:0f:12:04:cb:23:f7:0d:7f:51:e2:0e:e8:8a:9f:f0:ce:a3:
0c:16:6f:bd:ef:11:a1:f1:46:39:77:ff:ee:d7:4d:0a:70:2e:
35:7e:ba:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:44:34 2025 by rpki-client