Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/S5EhCNm5abXcJpnDopZ4UDrwywM.roa
File: S5EhCNm5abXcJpnDopZ4UDrwywM.roa (raw, json)
Hash identifier: nIfnqxBt75QK60oP+glcpOTIgwHHF/KqkCUapeuJpM4=
Subject key identifier: 4B:91:21:08:D9:B9:69:B5:DC:26:99:C3:A2:96:78:50:3A:F0:CB:03
Certificate issuer: /CN=b40c95867c3084c4c16a2febb46651090f3247e4
Certificate serial: 01856C137566952DC51A9E4C6288E7C509E8
Authority key identifier: B4:0C:95:86:7C:30:84:C4:C1:6A:2F:EB:B4:66:51:09:0F:32:47:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/S5EhCNm5abXcJpnDopZ4UDrwywM.roa
Signing time: Sun 01 Jan 2023 06:44:52 +0000
ROA not before: Sun 01 Jan 2023 06:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50501
IP address blocks: 193.105.85.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:13:75:66:95:2d:c5:1a:9e:4c:62:88:e7:c5:09:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b40c95867c3084c4c16a2febb46651090f3247e4
Validity
Not Before: Jan 1 06:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b912108d9b969b5dc2699c3a29678503af0cb03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:4d:e4:be:9c:3d:23:60:af:da:98:67:eb:c5:
ec:cd:59:82:04:32:81:f4:bf:5b:58:bb:e9:f7:85:
4e:8e:e1:15:1f:bc:8e:79:50:ca:53:62:db:f4:03:
05:a3:4a:02:8a:bd:06:a5:72:76:a3:e3:2d:37:2d:
c3:b4:09:8d:b9:c4:b3:2c:94:53:38:29:e4:03:50:
23:d6:b8:97:e2:30:45:03:60:bc:c5:b6:c5:22:5f:
1d:4a:3c:6d:d9:a2:f9:3e:2c:d3:74:95:83:cb:77:
4d:53:b6:27:df:41:c1:a8:e4:8e:9e:f2:83:10:5f:
ec:d8:29:cf:38:00:a1:05:4c:96:68:3f:e7:ca:d6:
db:51:17:70:32:ac:da:93:4d:8d:cd:32:27:42:24:
ec:b1:cb:e5:22:b6:54:f7:ae:ff:41:ef:c0:41:dc:
3e:bc:7a:85:1c:75:e8:19:a4:26:77:ab:ec:3d:9e:
46:65:8e:45:fe:54:a3:83:ba:6f:6c:2f:e0:34:1f:
15:38:14:96:c6:56:78:26:01:6f:1b:0e:41:4f:15:
51:49:a2:df:e0:19:d6:1a:e4:95:4c:51:a0:02:1a:
01:c0:52:5a:04:9c:85:68:b6:d8:43:00:11:5c:10:
35:fb:ef:ca:b4:49:b0:5d:2e:aa:0a:e4:9b:7e:4f:
61:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:91:21:08:D9:B9:69:B5:DC:26:99:C3:A2:96:78:50:3A:F0:CB:03
X509v3 Authority Key Identifier:
keyid:B4:0C:95:86:7C:30:84:C4:C1:6A:2F:EB:B4:66:51:09:0F:32:47:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/S5EhCNm5abXcJpnDopZ4UDrwywM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.85.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:87:dd:e3:dd:02:34:a2:4a:86:82:b7:e1:a0:38:fd:ff:b3:
c8:b7:db:7b:32:0a:3f:3b:51:54:2d:0d:75:24:60:7d:ad:47:
e5:61:8b:a2:85:09:7c:a0:a4:d0:5e:80:f1:f2:27:df:64:66:
04:86:e3:0c:57:f2:ee:c0:a8:41:75:4f:e0:2c:bb:84:5c:96:
94:da:bc:ee:f6:ae:18:08:56:c7:f5:3e:0c:ac:ab:eb:54:ce:
10:2a:96:93:aa:b0:1a:36:01:38:1f:f8:6f:c3:a9:bd:6e:15:
37:48:0e:c8:00:81:0c:ca:0b:e8:d0:75:2b:f8:7c:e4:09:9a:
d0:53:10:7a:97:50:03:a9:2c:1d:9a:d5:21:64:d1:1f:11:85:
ef:fe:29:1f:6b:96:b0:c3:54:cb:08:92:39:d0:88:81:86:e8:
ac:28:54:33:8d:4f:80:18:72:c4:36:dd:c3:50:6c:15:79:17:
9f:7b:65:85:bf:3b:29:7b:da:05:e2:eb:c8:1d:61:6a:09:23:
6a:6f:85:90:18:0e:52:2c:ac:ef:a3:3f:e0:1f:29:50:e8:82:
c1:c0:9d:49:17:d8:02:e5:56:ab:67:8a:bd:92:98:9c:a2:51:
02:8b:47:37:12:7d:1e:4a:14:ff:8a:b8:b5:ea:df:37:a4:ae:
8a:a4:3d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:07:51 2025 by rpki-client