Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/5fB5hebqHrK7VCtgji0OnQZD5VE.roa
File: 5fB5hebqHrK7VCtgji0OnQZD5VE.roa (raw, json)
Hash identifier: BlT7Y027OvllsV9UpzsNZdqQ3VO5lXsimw6NnYXo8EM=
Subject key identifier: E5:F0:79:85:E6:EA:1E:B2:BB:54:2B:60:8E:2D:0E:9D:06:43:E5:51
Certificate issuer: /CN=792c5d8c32caa4662316858c65bebe12c861ad67
Certificate serial: 01856FD5071B66283484D1B573653B54E5DD
Authority key identifier: 79:2C:5D:8C:32:CA:A4:66:23:16:85:8C:65:BE:BE:12:C8:61:AD:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eSxdjDLKpGYjFoWMZb6-EshhrWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/5fB5hebqHrK7VCtgji0OnQZD5VE.roa
Signing time: Mon 02 Jan 2023 00:15:09 +0000
ROA not before: Mon 02 Jan 2023 00:15:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49672
IP address blocks: 91.212.178.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:07:1b:66:28:34:84:d1:b5:73:65:3b:54:e5:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=792c5d8c32caa4662316858c65bebe12c861ad67
Validity
Not Before: Jan 2 00:15:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e5f07985e6ea1eb2bb542b608e2d0e9d0643e551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:17:8d:02:c0:a1:a3:5b:10:e5:34:98:b0:d9:
29:3c:92:ea:d4:61:15:ef:b7:37:ee:59:15:8d:03:
62:48:20:21:7f:b2:02:f9:90:c3:26:74:c1:81:44:
fb:59:fc:f6:f7:bf:6d:e7:6a:f8:5c:d9:b6:33:5e:
f5:a8:74:9c:58:07:1f:e7:cf:b5:e0:99:ff:1b:0d:
c4:50:0a:64:2c:d2:7d:96:2e:f5:81:41:cd:2d:18:
c5:9b:30:6c:b5:9f:8a:f0:dd:d4:e9:4f:95:82:ca:
72:c6:a6:b8:a4:77:1d:ba:63:aa:9f:80:71:68:0b:
74:38:4e:d4:66:fd:c1:54:68:c3:15:49:23:a8:8d:
22:36:a5:38:04:09:c1:09:e7:4e:9d:f3:92:71:ec:
a8:ed:7e:e9:e3:d0:6f:59:01:fa:a4:cb:65:f4:29:
a0:06:99:ba:f2:3a:b8:72:bf:63:36:e0:20:84:37:
e9:b6:af:51:22:e6:44:43:70:fb:fa:bf:96:a8:4a:
60:47:99:1d:51:40:7f:2c:b0:46:f1:a9:02:33:7a:
62:64:1d:0c:44:02:b7:4a:3a:4b:c3:d5:c5:66:4f:
74:6f:15:82:73:64:c5:bf:9c:ce:d8:15:92:a2:38:
24:7e:cb:73:94:11:92:00:db:e1:04:0f:2c:cf:0a:
2f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:F0:79:85:E6:EA:1E:B2:BB:54:2B:60:8E:2D:0E:9D:06:43:E5:51
X509v3 Authority Key Identifier:
keyid:79:2C:5D:8C:32:CA:A4:66:23:16:85:8C:65:BE:BE:12:C8:61:AD:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSxdjDLKpGYjFoWMZb6-EshhrWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/5fB5hebqHrK7VCtgji0OnQZD5VE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.178.0/24
Signature Algorithm: sha256WithRSAEncryption
06:15:31:87:f0:62:25:94:40:20:72:7a:3d:65:81:60:af:e5:
fe:bf:14:e5:be:6e:5e:79:c8:9e:6e:2c:3e:e6:69:90:9e:4b:
f1:21:1d:75:e2:91:49:2f:dc:23:81:bc:21:dd:d0:10:40:0c:
7a:f6:77:79:c5:48:0c:28:ca:4d:2c:81:1b:fc:b5:cd:88:10:
e1:e5:10:08:e1:05:00:3a:43:9d:9c:ac:ce:f0:71:13:ec:d2:
d2:ed:a5:ed:78:26:c7:c6:11:df:d1:4c:b5:05:f2:ed:26:d1:
b1:0f:38:d8:39:6d:fd:0b:c2:97:20:09:d7:86:30:7d:86:92:
ff:0b:11:4c:26:a6:3c:56:ec:81:59:df:08:2c:bc:a8:4d:ef:
e5:fa:fc:e8:8a:91:d8:da:ac:7a:a6:3e:f4:54:d2:89:17:19:
77:4d:ea:f4:49:2a:1c:61:91:00:e5:97:fd:5a:bc:2a:88:66:
8c:4f:40:28:f5:45:7b:aa:5f:9f:08:02:27:af:f3:d8:ad:55:
b2:3a:d7:7d:11:72:9c:db:ac:2c:b7:50:25:ff:3f:34:dc:71:
27:51:84:41:00:6c:f0:e1:3e:12:82:91:1e:35:33:64:72:fa:
dd:54:07:69:f2:b7:d5:44:e9:ce:e1:01:26:a3:b7:ab:bb:05:
31:91:b3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:29:48 2025 by rpki-client