Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/n-5ua0e7G8yk7ztXDIKEkzwd-LU.roa
File: n-5ua0e7G8yk7ztXDIKEkzwd-LU.roa (raw, json)
Hash identifier: 8ZVp7ByBPNhupspttbONROBNhS7OhJWXa42cDRD5VmA=
Subject key identifier: 9F:EE:6E:6B:47:BB:1B:CC:A4:EF:3B:57:0C:82:84:93:3C:1D:F8:B5
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018570F09D38765F7E2D58F2E4018F235095
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/n-5ua0e7G8yk7ztXDIKEkzwd-LU.roa
Signing time: Mon 02 Jan 2023 05:24:54 +0000
ROA not before: Mon 02 Jan 2023 05:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30816
IP address blocks: 88.220.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:9d:38:76:5f:7e:2d:58:f2:e4:01:8f:23:50:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 2 05:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9fee6e6b47bb1bcca4ef3b570c8284933c1df8b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e6:cb:d6:c4:d2:f1:e2:1c:11:9a:b6:16:8b:
45:a6:1f:ac:2f:e6:55:a2:29:83:21:fe:f6:7a:91:
6d:0a:40:41:0f:26:b3:24:de:f7:0e:05:0c:9c:bb:
e2:98:bc:c3:4a:d7:63:37:f2:09:72:0b:70:a7:1b:
66:3a:0e:8b:ca:37:8a:c6:b5:df:35:95:31:3a:46:
17:20:90:ab:f0:0e:b0:92:ba:f3:dc:c3:cb:11:b3:
22:64:b2:f3:7f:20:df:b0:8b:d6:99:5a:38:5d:e4:
d7:4e:43:4a:f0:4b:aa:ed:ba:84:e4:5a:ab:0c:b5:
d9:18:51:a5:ca:9f:cd:ef:68:40:14:14:4b:72:47:
c8:f2:cf:8d:48:6a:2a:38:ff:d5:b2:0c:bc:7f:e9:
7b:bf:fd:86:40:07:a0:57:5e:14:84:26:9b:8e:fe:
c6:40:37:dd:8c:1b:aa:66:46:ac:36:1d:27:1b:24:
b8:57:11:9c:59:53:a5:c5:0f:72:b9:89:35:ff:50:
3d:3b:f1:fd:95:28:a7:76:8c:ec:1c:15:7d:0a:46:
5a:89:e3:ee:4c:e2:69:e3:91:e5:4a:d7:5f:17:12:
aa:8a:4a:3b:45:f1:a3:14:07:5e:4f:0d:79:71:97:
08:46:b4:3b:4c:1e:26:0e:d0:34:34:af:d1:d4:49:
f1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:EE:6E:6B:47:BB:1B:CC:A4:EF:3B:57:0C:82:84:93:3C:1D:F8:B5
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/n-5ua0e7G8yk7ztXDIKEkzwd-LU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.220.139.0/24
Signature Algorithm: sha256WithRSAEncryption
be:b5:29:fc:e6:b4:b0:14:6c:c8:bb:9c:7e:03:d7:6a:02:f1:
58:c2:c0:8c:4f:2c:a9:13:ce:f1:cd:21:00:07:b6:ca:dd:bf:
d8:ec:3f:a4:20:07:af:1e:1d:94:02:94:21:4d:68:a0:cc:49:
fc:59:4b:fc:da:13:7b:49:9b:a7:1f:96:d3:16:69:c6:3c:ab:
aa:47:20:84:56:76:93:b3:d5:59:3e:24:cd:10:1f:f8:1d:c4:
38:b5:50:90:27:21:fb:64:68:d1:8a:b1:80:2c:07:ae:7d:d3:
80:d5:07:56:53:85:aa:37:1d:46:2b:25:ee:be:f8:fd:a9:83:
74:24:8b:52:0f:c0:01:7a:6f:a5:75:b2:9a:5b:03:14:b8:8c:
5c:09:8e:e2:c4:a3:41:07:5b:8e:bb:a8:81:b4:f4:3f:f0:a5:
30:e5:c1:0c:b1:8d:ae:08:bc:40:42:c0:bb:e8:b9:df:7b:a6:
d5:08:71:2d:a3:aa:ca:36:c9:39:19:a2:3f:fd:34:fc:2f:aa:
bd:e2:01:56:73:b5:ee:41:af:52:29:7c:10:3f:68:77:06:a7:
5e:cb:26:12:75:e4:9a:4b:06:c1:b6:4d:72:3f:68:15:04:02:
1b:dd:33:b8:17:d8:1d:44:4f:ed:ca:ee:e4:e4:67:85:e3:37:
b2:c9:49:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:28 2025 by rpki-client