Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/5Rs-R84AVUeBy8A5vB1CDlds1pY.roa
File: 5Rs-R84AVUeBy8A5vB1CDlds1pY.roa (raw, json)
Hash identifier: RlZy/xhNclwvEwctVATobuytIpC8ds7MO1vxjPC3rnM=
Subject key identifier: E5:1B:3E:47:CE:00:55:47:81:CB:C0:39:BC:1D:42:0E:57:6C:D6:96
Certificate issuer: /CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Certificate serial: 01856F0242B3619708A96A4F18766B849EC3
Authority key identifier: 29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/5Rs-R84AVUeBy8A5vB1CDlds1pY.roa
Signing time: Sun 01 Jan 2023 20:24:57 +0000
ROA not before: Sun 01 Jan 2023 20:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59847
IP address blocks: 94.250.21.0/24 maxlen: 24
94.250.20.0/24 maxlen: 24
94.250.23.0/24 maxlen: 24
94.250.22.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:42:b3:61:97:08:a9:6a:4f:18:76:6b:84:9e:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Validity
Not Before: Jan 1 20:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e51b3e47ce00554781cbc039bc1d420e576cd696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2c:81:1e:fd:91:37:26:f5:73:b6:5e:77:7c:
47:84:ef:bd:a8:8e:8c:2b:c2:68:bb:98:8f:95:86:
45:82:d0:8a:be:2d:70:e5:5e:92:47:76:e3:d4:1e:
b2:f1:34:7e:c2:ca:70:14:d3:0f:3b:f3:15:a4:6c:
13:bb:96:e3:f0:60:69:a0:00:27:35:00:c1:19:88:
16:d7:15:86:e4:47:9c:14:6c:ae:8d:b9:98:5b:ad:
d1:6e:33:99:c7:ae:e2:12:e1:40:a7:0b:3f:d7:0e:
39:a0:15:83:e8:43:a4:68:3e:09:61:6f:fd:40:7e:
08:1b:ad:25:f0:3f:30:fc:7d:64:86:6f:fc:84:3a:
ae:3e:2b:e2:95:1d:4d:59:54:3d:04:e4:c7:8f:5d:
3e:51:71:b7:01:a2:0c:c5:63:d9:ca:ec:fe:19:06:
7c:fb:e6:1a:4a:1c:a6:c5:de:1e:9f:fc:05:2a:4f:
8c:5f:ac:f4:f5:30:13:2a:46:a1:72:a8:49:af:2d:
af:3e:bb:e3:5c:15:24:19:80:9e:8b:58:f9:64:e5:
a7:af:a4:72:a0:3b:30:77:19:f6:43:4b:86:8b:88:
f5:d9:79:4c:fe:35:77:1b:8d:77:1d:c5:a8:95:08:
92:89:b5:9c:07:3c:7f:87:cd:cc:0d:db:3e:b9:be:
77:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:1B:3E:47:CE:00:55:47:81:CB:C0:39:BC:1D:42:0E:57:6C:D6:96
X509v3 Authority Key Identifier:
keyid:29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/5Rs-R84AVUeBy8A5vB1CDlds1pY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.250.20.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:db:68:4a:ff:cb:a0:f3:06:ca:2b:e0:e2:8e:58:60:45:4f:
36:69:7a:8d:d8:42:79:f3:1d:64:2a:37:e5:9f:40:85:49:c2:
de:3e:49:47:e0:22:1a:c7:38:63:c7:cf:7f:72:97:fe:36:df:
f5:e1:e6:a2:a1:34:87:e5:9a:d8:50:24:94:e6:e7:dc:1f:60:
d8:f8:4c:f1:0e:d2:97:9a:02:81:c6:0c:38:c6:ff:cd:86:fa:
43:a4:62:91:fc:28:d2:1e:d3:65:d5:8e:48:57:cc:94:66:f1:
4f:1b:b3:18:a3:73:ce:8e:3b:c6:cd:f9:d7:03:21:59:9f:cc:
d0:26:6c:43:96:a1:22:af:bf:61:08:32:e0:7a:dc:dc:d1:34:
d2:bb:5c:99:4e:e1:50:63:a2:3e:cb:b7:1d:af:a9:41:e7:82:
fb:be:5d:e5:22:ce:da:0a:77:a4:e3:91:99:5d:70:e0:38:db:
66:07:31:b0:f0:70:04:e8:46:e1:c8:bc:c8:cf:cc:08:56:8c:
ad:80:87:d5:8b:0b:bf:e0:13:d0:6c:1f:b0:43:21:c6:48:cc:
9f:dc:13:4f:b2:95:1a:5c:ba:90:cb:7e:ae:22:1f:34:3e:e5:
79:57:2a:0b:f9:d1:c8:f5:74:30:14:30:27:6e:51:71:61:b6:
4c:66:2f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:41:20 2025 by rpki-client