Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e62089-b98a-4fdd-9c4e-62789182a0f3/1/SMV_0ThzLvVs9xSxlb2wi77SesM.roa
File: SMV_0ThzLvVs9xSxlb2wi77SesM.roa (raw, json)
Hash identifier: kdpZzMxnOPhbxSARVyKZwUc7uKuccAiodlATAkqlmFE=
Subject key identifier: 48:C5:7F:D1:38:73:2E:F5:6C:F7:14:B1:95:BD:B0:8B:BE:D2:7A:C3
Certificate issuer: /CN=5dab0b08e51f818224629fb3a211d83d5be35440
Certificate serial: 0187DC7895E4E1A48A25EDAF0979D867D929
Authority key identifier: 5D:AB:0B:08:E5:1F:81:82:24:62:9F:B3:A2:11:D8:3D:5B:E3:54:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XasLCOUfgYIkYp-zohHYPVvjVEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e62089-b98a-4fdd-9c4e-62789182a0f3/1/SMV_0ThzLvVs9xSxlb2wi77SesM.roa
Signing time: Tue 02 May 2023 12:38:22 +0000
ROA not before: Tue 02 May 2023 12:38:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198951
IP address blocks: 194.56.174.0/23 maxlen: 24
194.56.176.0/22 maxlen: 24
2001:678:518::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:dc:78:95:e4:e1:a4:8a:25:ed:af:09:79:d8:67:d9:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dab0b08e51f818224629fb3a211d83d5be35440
Validity
Not Before: May 2 12:38:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48c57fd138732ef56cf714b195bdb08bbed27ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d6:d5:67:ed:c5:2c:d0:db:81:f6:67:4c:a6:
fb:55:c5:71:90:46:44:e8:72:fe:b6:ed:44:af:a0:
64:df:2f:51:46:3b:cf:be:46:24:a3:a1:83:8a:e9:
8a:30:c8:5b:6a:6c:46:a3:1c:ff:50:90:c6:78:b7:
36:03:a4:30:72:a1:e5:c9:f3:6a:55:51:27:eb:97:
39:5c:ff:08:9a:6b:98:6f:55:e1:e5:59:42:c0:fd:
ed:d4:3b:0b:24:36:99:30:d8:87:78:19:3d:32:04:
4b:60:1f:7c:05:d6:2b:aa:b1:21:7d:0f:90:72:90:
c5:12:b0:b5:d7:38:a5:58:f3:82:82:bc:2b:6c:c3:
4f:51:1f:aa:2b:4e:5e:6e:92:08:30:dd:1a:fa:1f:
da:35:43:30:46:f2:c1:2e:54:c9:1b:54:51:6e:0e:
48:51:9c:d2:61:76:4e:e5:c5:80:b0:37:76:6d:a2:
6b:bf:c5:dd:ce:b0:37:56:6b:9d:9e:07:12:27:b4:
18:4f:e1:63:91:93:8d:7d:84:aa:a8:84:c2:f5:53:
bc:34:a5:7c:03:5e:ea:60:05:2d:a5:bc:2c:0e:58:
be:0c:89:d5:92:9a:28:46:44:e3:a0:e8:9a:8b:05:
76:15:11:eb:49:d3:ea:db:32:45:d7:41:1c:26:20:
dc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C5:7F:D1:38:73:2E:F5:6C:F7:14:B1:95:BD:B0:8B:BE:D2:7A:C3
X509v3 Authority Key Identifier:
keyid:5D:AB:0B:08:E5:1F:81:82:24:62:9F:B3:A2:11:D8:3D:5B:E3:54:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XasLCOUfgYIkYp-zohHYPVvjVEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e62089-b98a-4fdd-9c4e-62789182a0f3/1/SMV_0ThzLvVs9xSxlb2wi77SesM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e62089-b98a-4fdd-9c4e-62789182a0f3/1/XasLCOUfgYIkYp-zohHYPVvjVEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.174.0-194.56.179.255
IPv6:
2001:678:518::/48
Signature Algorithm: sha256WithRSAEncryption
2b:9b:1e:9e:7f:0b:0c:d7:1a:db:c8:13:2e:4d:0c:e2:d2:f1:
3b:01:4d:74:91:44:d5:60:d6:31:3a:a7:38:7e:c0:12:09:21:
81:4b:42:26:18:25:9b:eb:b0:0f:3a:3a:91:9e:24:f8:01:ec:
53:cc:5f:fe:1c:0c:81:96:78:ee:21:cc:8e:4b:11:a7:58:f6:
04:4b:ed:bf:4e:45:32:86:62:3c:60:f0:57:69:42:c8:df:5c:
ce:a1:b6:e6:0a:bd:de:0b:98:df:1e:09:86:5f:58:e1:69:54:
45:f3:21:a8:a1:16:8a:db:8d:c8:a1:49:58:48:c9:03:75:8d:
de:d2:d4:c9:fb:f1:98:1d:f9:96:ef:b4:4b:8d:e8:bb:79:97:
20:37:00:ef:66:40:d1:03:fd:75:92:6d:57:3d:84:84:5c:20:
73:36:3c:d2:12:17:85:bc:41:df:11:b1:d2:38:f1:84:70:fd:
5f:24:ef:5e:20:7b:44:8b:b4:3e:4a:b6:ab:f3:04:f2:dc:e8:
0d:cc:eb:d3:5e:d7:e6:10:66:29:81:8b:09:e1:23:bf:27:f5:
5d:bf:3e:a9:f7:94:60:5d:e3:99:57:3e:38:56:e4:d3:1e:02:
41:8e:8d:c6:e6:8d:a7:8b:a0:d9:43:47:63:d7:5f:92:1a:37:
59:20:cb:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 11:20:38 2025 by rpki-client