Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/5IncUPCYc42UoP8RLibgQsvuH5Q.roa
File: 5IncUPCYc42UoP8RLibgQsvuH5Q.roa (raw, json)
Hash identifier: Y573M/TVp+npDHEIkdD0YfZqAYT9DrTxOb4M27ga1Bo=
Subject key identifier: E4:89:DC:50:F0:98:73:8D:94:A0:FF:11:2E:26:E0:42:CB:EE:1F:94
Certificate issuer: /CN=b06551937efc96e145e33a1ebca24492dc120ecb
Certificate serial: 09DE39BE
Authority key identifier: B0:65:51:93:7E:FC:96:E1:45:E3:3A:1E:BC:A2:44:92:DC:12:0E:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/5IncUPCYc42UoP8RLibgQsvuH5Q.roa
Signing time: Sat 01 Jan 2022 15:01:41 +0000
ROA not before: Sat 01 Jan 2022 15:01:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9121
IP address blocks: 93.184.144.0/24 maxlen: 24
93.184.145.0/24 maxlen: 24
93.184.150.0/24 maxlen: 24
93.184.151.0/24 maxlen: 24
93.184.152.0/24 maxlen: 24
93.184.146.0/24 maxlen: 24
93.184.147.0/24 maxlen: 24
93.184.148.0/24 maxlen: 24
93.184.149.0/24 maxlen: 24
93.184.157.0/24 maxlen: 24
93.184.158.0/24 maxlen: 24
93.184.159.0/24 maxlen: 24
93.184.153.0/24 maxlen: 24
93.184.155.0/24 maxlen: 24
93.184.156.0/24 maxlen: 24
185.168.152.0/24 maxlen: 24
185.168.154.0/23 maxlen: 23
185.168.153.0/24 maxlen: 24
185.168.154.0/24 maxlen: 24
185.168.155.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165558718 (0x9de39be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b06551937efc96e145e33a1ebca24492dc120ecb
Validity
Not Before: Jan 1 15:01:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e489dc50f098738d94a0ff112e26e042cbee1f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:46:60:5e:29:bb:1e:08:29:7f:d7:06:26:84:
65:44:61:23:67:ec:a8:a7:6f:bd:a4:aa:25:62:77:
d0:03:cb:d1:c1:1b:c9:2d:f2:2a:2f:e8:37:2a:ca:
4f:64:81:c7:68:e1:9d:4e:1f:af:c4:74:9d:f1:45:
43:2f:35:62:75:54:47:2f:39:89:08:ca:ab:bf:dd:
a3:77:8d:83:e9:1a:5f:d1:0f:c6:4b:c0:86:c6:e9:
b5:00:b5:34:3a:12:bc:c6:aa:29:ee:a5:42:76:ac:
35:11:bd:0b:de:e0:07:36:bc:76:c7:8b:99:ae:7d:
12:b6:50:bf:35:1e:e4:e0:e0:67:29:bc:3b:bc:c4:
26:ce:d7:fb:8c:3c:7e:8a:7d:09:0c:34:3e:5e:d3:
69:64:92:14:be:7c:6e:9a:4f:1a:49:32:af:fb:02:
67:9a:aa:45:e9:f2:7a:6a:25:2b:a7:b7:a8:14:e1:
1d:73:2e:ad:db:08:da:7e:b2:24:78:a6:a7:d3:37:
88:05:00:a3:3b:f7:58:e0:24:0c:90:3e:f6:78:b7:
ce:3a:07:13:2b:c6:db:ab:6a:db:79:b2:a0:cd:10:
fa:32:6e:4b:63:e9:cd:b0:27:3e:2e:d1:3f:ce:f5:
40:51:9c:39:9a:14:65:ea:7f:aa:29:4e:46:95:de:
77:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:89:DC:50:F0:98:73:8D:94:A0:FF:11:2E:26:E0:42:CB:EE:1F:94
X509v3 Authority Key Identifier:
keyid:B0:65:51:93:7E:FC:96:E1:45:E3:3A:1E:BC:A2:44:92:DC:12:0E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/5IncUPCYc42UoP8RLibgQsvuH5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.184.144.0-93.184.153.255
93.184.155.0-93.184.159.255
185.168.152.0/22
Signature Algorithm: sha256WithRSAEncryption
32:bf:8d:4d:0e:43:db:41:b3:ea:17:44:64:cd:06:62:54:ea:
86:2c:d9:71:2f:b3:cb:55:27:bf:84:97:52:64:fa:b8:f9:62:
c9:4a:c6:96:ff:5a:10:2b:32:2e:05:f8:c7:f3:e1:9d:84:35:
4c:b4:d9:4b:ae:65:b0:8c:72:8b:0d:c7:8d:1e:30:1d:52:be:
e2:06:c5:16:7e:55:da:b4:b0:6c:3f:d3:4a:b1:86:70:ba:3c:
26:67:2f:86:76:5b:4c:d4:36:39:2c:7b:41:3b:41:cb:78:01:
fa:85:47:3a:4a:58:85:0d:3e:7f:16:75:46:60:0d:72:ef:29:
0b:c4:ff:e1:94:96:03:db:ce:53:da:61:9a:bc:6f:92:db:76:
37:78:e9:34:02:4e:a3:3a:72:51:7a:f5:cb:c8:34:4d:6f:d7:
3a:a2:2e:ee:a0:99:72:d9:be:01:7c:e7:d0:48:2b:d7:05:bc:
d5:d7:2c:aa:ba:dc:29:d3:0a:7d:4f:2d:02:dc:67:43:a9:c3:
01:3a:52:36:d2:3d:5a:78:b4:da:3a:80:69:31:03:00:a1:d5:
65:32:da:9f:8f:6d:8b:0e:8f:8e:60:d5:26:01:da:0f:2e:2a:
78:79:34:20:70:6e:18:4b:e3:69:0a:99:00:d7:14:0d:a5:1e:
72:a1:77:cc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 18 19:18:16 2025 by rpki-client