Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/1pmniJ0NKJ9f4p-zafd8ii2UyZw.roa
File: 1pmniJ0NKJ9f4p-zafd8ii2UyZw.roa (raw, json)
Hash identifier: t0RpS63dJ7Bw6OGd3msOllw1OzC+RVB0mPPwDHx7lz4=
Subject key identifier: D6:99:A7:88:9D:0D:28:9F:5F:E2:9F:B3:69:F7:7C:8A:2D:94:C9:9C
Certificate issuer: /CN=1759436869089cd9c7e6d02028f24a2fe49b86d5
Certificate serial: 34B09D1D
Authority key identifier: 17:59:43:68:69:08:9C:D9:C7:E6:D0:20:28:F2:4A:2F:E4:9B:86:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/1pmniJ0NKJ9f4p-zafd8ii2UyZw.roa
Signing time: Wed 29 Jun 2022 07:45:02 +0000
ROA not before: Wed 29 Jun 2022 07:45:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59457
IP address blocks: 5.149.69.0/24 maxlen: 24
5.149.70.0/24 maxlen: 24
5.149.71.0/24 maxlen: 24
5.149.65.0/24 maxlen: 24
5.149.66.0/24 maxlen: 24
5.149.67.0/24 maxlen: 24
5.149.68.0/24 maxlen: 24
5.149.76.0/24 maxlen: 24
5.149.77.0/24 maxlen: 24
5.149.78.0/24 maxlen: 24
5.149.72.0/24 maxlen: 24
5.149.73.0/24 maxlen: 24
5.149.74.0/24 maxlen: 24
5.149.75.0/24 maxlen: 24
5.149.83.0/24 maxlen: 24
5.149.79.0/24 maxlen: 24
5.149.81.0/24 maxlen: 24
5.149.82.0/24 maxlen: 24
5.149.92.0/24 maxlen: 24
5.149.93.0/24 maxlen: 24
5.149.94.0/24 maxlen: 24
5.149.95.0/24 maxlen: 24
5.149.64.0/24 maxlen: 24
5.149.64.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 883989789 (0x34b09d1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1759436869089cd9c7e6d02028f24a2fe49b86d5
Validity
Not Before: Jun 29 07:45:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d699a7889d0d289f5fe29fb369f77c8a2d94c99c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fb:e2:44:7c:2e:86:a6:15:1e:25:7c:59:9a:
4a:51:6b:26:2c:9e:b8:86:1a:af:30:f9:df:2c:7e:
9e:7f:ab:f4:1b:c8:76:bd:9f:bf:ed:bd:6b:16:3f:
3f:68:ef:b1:1d:09:3f:69:a1:e6:91:b1:4a:ec:88:
e0:bb:5d:03:a5:c6:26:9b:28:8b:2e:66:d9:53:70:
92:b9:c0:1b:73:62:8d:4a:43:b5:54:a8:0d:8c:6c:
cb:20:4e:a8:62:fd:e1:30:d9:dc:64:da:ab:1c:0e:
5d:35:45:a1:0c:2e:1d:e7:35:22:3a:67:d4:85:73:
07:d4:3b:cd:9f:db:fe:ef:03:87:e4:38:65:56:39:
5a:76:c2:55:e2:81:33:b3:3a:ea:26:45:01:e9:86:
e7:99:63:3b:24:fc:20:2e:f1:1e:fe:e1:ec:d0:7d:
7c:b2:d3:d8:f4:f3:2e:2f:79:e1:0e:dd:c6:ce:7c:
d1:22:3e:97:79:44:c7:3b:4a:09:fe:31:6a:c2:78:
cf:10:d1:d9:8c:ad:76:03:28:a7:bf:58:19:82:dd:
74:bc:61:c6:9a:31:52:33:19:5e:6e:ca:68:92:51:
50:3a:b6:9d:d7:e6:66:4d:9b:99:4b:73:c7:34:60:
22:d3:3c:c5:47:2a:93:f1:95:bf:09:84:39:19:bc:
4a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:99:A7:88:9D:0D:28:9F:5F:E2:9F:B3:69:F7:7C:8A:2D:94:C9:9C
X509v3 Authority Key Identifier:
keyid:17:59:43:68:69:08:9C:D9:C7:E6:D0:20:28:F2:4A:2F:E4:9B:86:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/1pmniJ0NKJ9f4p-zafd8ii2UyZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.64.0/20
5.149.81.0-5.149.83.255
5.149.92.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:c7:24:5a:c2:97:02:be:4d:78:54:ba:9b:f1:05:ac:99:43:
6f:52:91:69:f8:d9:9d:a1:53:2e:d8:0e:66:8a:f0:d9:cd:49:
41:f2:db:c2:1d:3b:e9:cd:16:59:87:29:db:61:bb:cc:19:32:
08:7d:5f:e0:ef:6e:ef:70:e9:6f:6e:50:a8:6a:30:1e:ba:89:
c1:66:96:d0:30:be:6d:e0:a1:2c:bb:b9:10:09:60:5d:40:71:
17:3b:9a:0c:7f:8b:1a:f4:69:71:fe:21:8c:d3:6f:8b:c7:74:
a0:16:6d:37:e3:c4:c9:5c:bd:ae:15:a0:a1:17:97:b3:ae:a5:
ff:ce:5e:98:cb:cf:b9:69:12:a4:19:8c:58:b9:a0:8f:be:6c:
41:5b:e4:5e:03:7d:02:fa:26:a6:26:b5:26:7c:a2:c1:58:b0:
00:06:96:76:64:7a:d6:ab:29:5c:cb:fc:8c:be:da:ce:cc:91:
bf:f7:30:d8:a4:ef:fa:fe:34:69:29:58:cd:3d:ed:53:19:a8:
8d:98:6f:f8:bc:ac:24:ce:65:b8:a6:0c:b3:ec:d4:be:69:1e:
e9:51:83:f9:42:a2:4e:79:f3:57:a7:22:d3:0e:86:57:c2:4b:
74:2f:71:04:56:9e:14:d3:9f:a7:42:fe:0a:07:cb:5f:bb:3b:
e0:06:82:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:39 2025 by rpki-client