Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/y5QNvZk-9J2GUAfwFxU2VnzTniM.roa
File: y5QNvZk-9J2GUAfwFxU2VnzTniM.roa (raw, json)
Hash identifier: q/CCS2BOPaoRmdvzSsNnhB5y8wqj0M5ETopLXARbTM8=
Subject key identifier: CB:94:0D:BD:99:3E:F4:9D:86:50:07:F0:17:15:36:56:7C:D3:9E:23
Certificate issuer: /CN=ef583686464c533d4152bca2edf3a01b487eea92
Certificate serial: 087D4416
Authority key identifier: EF:58:36:86:46:4C:53:3D:41:52:BC:A2:ED:F3:A0:1B:48:7E:EA:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/y5QNvZk-9J2GUAfwFxU2VnzTniM.roa
Signing time: Sat 01 Jan 2022 00:59:15 +0000
ROA not before: Sat 01 Jan 2022 00:59:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21263
IP address blocks: 5.154.178.0/24 maxlen: 24
5.154.177.0/24 maxlen: 24
2a0e:1d00::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142427158 (0x87d4416)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef583686464c533d4152bca2edf3a01b487eea92
Validity
Not Before: Jan 1 00:59:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cb940dbd993ef49d865007f0171536567cd39e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:39:5d:c0:28:87:67:aa:74:7f:a4:e7:1d:7a:
bf:59:9c:3e:0c:5a:64:2a:4f:3b:06:3f:a0:bc:24:
56:16:4a:35:0a:df:39:68:7d:83:31:a5:85:de:00:
48:f3:64:17:c1:5a:d1:86:0c:91:08:e0:dc:cc:e2:
1d:ce:78:9d:4d:f7:8d:ac:a7:a7:9b:70:49:55:dd:
5c:ea:28:c4:4c:63:81:6d:18:17:8d:ba:ac:0d:5a:
3a:07:b8:4b:e1:c5:b7:bd:ab:bd:bd:ef:24:d8:b5:
f6:94:07:2b:59:26:52:58:20:d1:93:0c:ea:80:ac:
ff:27:d3:ee:4b:85:9c:bb:dd:7d:dc:ab:24:8d:bb:
77:38:cf:a6:33:18:07:cb:92:89:4b:f3:49:aa:2b:
c0:3d:78:d4:0d:eb:14:d9:3c:8f:88:e8:ca:3b:19:
19:53:97:eb:65:1c:43:14:96:d1:e2:5f:a6:55:8e:
42:45:7e:18:3e:b4:f9:d4:e8:cb:34:0b:88:5d:ce:
22:2f:3b:0c:5d:a2:d6:74:37:83:1b:2c:c5:e2:e5:
fd:9d:b0:4c:e0:d8:84:78:f6:3d:01:ac:0e:ba:88:
8a:a5:f5:a3:e6:6c:7e:4b:49:3a:1d:46:96:95:31:
12:82:4a:8d:d6:59:af:6b:58:80:45:a1:8d:1d:a4:
27:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:94:0D:BD:99:3E:F4:9D:86:50:07:F0:17:15:36:56:7C:D3:9E:23
X509v3 Authority Key Identifier:
keyid:EF:58:36:86:46:4C:53:3D:41:52:BC:A2:ED:F3:A0:1B:48:7E:EA:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/y5QNvZk-9J2GUAfwFxU2VnzTniM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.177.0-5.154.178.255
IPv6:
2a0e:1d00::/32
Signature Algorithm: sha256WithRSAEncryption
9a:62:87:21:47:ad:bd:92:7d:49:9a:c5:3d:42:63:b0:10:ad:
72:65:18:5f:95:9f:45:d3:a6:fe:2d:fb:29:ff:5b:28:83:8a:
16:2b:fe:34:8d:ea:81:44:59:7f:56:81:4c:c1:9a:f4:17:af:
41:1e:8a:66:c9:dd:bd:53:6f:55:55:f3:40:9d:aa:82:1d:ad:
38:2c:c6:0c:97:0f:a3:5d:0b:55:fc:07:78:94:65:1b:e5:b1:
55:5f:d8:67:32:22:40:7b:b9:67:1c:05:1d:e6:00:89:fe:5a:
b5:77:94:25:76:ef:06:f6:51:21:d8:a8:90:ae:fc:82:8a:a9:
e7:29:93:db:60:07:7e:fe:82:c7:32:5a:cf:13:39:d4:9e:3d:
37:bb:9d:d9:6d:bf:a5:8b:e4:d2:c0:9e:66:af:1e:96:ee:88:
7b:de:e4:98:23:e4:25:08:99:52:13:8c:0a:c3:38:e2:c4:f6:
59:71:16:0d:5a:be:d5:87:da:af:0c:6a:13:fd:2a:c0:bf:03:
fe:5c:44:60:96:1e:d8:ea:76:bd:a6:10:3e:61:f2:3e:c2:75:
9e:c0:05:29:f0:c2:39:0a:70:f0:6b:ca:1b:e8:e8:5c:76:b1:
be:ec:93:29:50:37:d3:a8:0f:d8:36:9c:d4:56:9e:3a:28:08:
c4:2d:68:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:47:44 2025 by rpki-client