Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/5m3tJdzkqEhLKiH7Msno1NqGvGg.roa
File: 5m3tJdzkqEhLKiH7Msno1NqGvGg.roa (raw, json)
Hash identifier: nkEf5AiUDfGj8VeX9vd3g+Si+uV6Yex91TS7//xb5qk=
Subject key identifier: E6:6D:ED:25:DC:E4:A8:48:4B:2A:21:FB:32:C9:E8:D4:DA:86:BC:68
Certificate issuer: /CN=1474b6fc67b6b90db311c61fc0e3a9c752833c56
Certificate serial: 01856CC169DF34354C0CEF537FB7F35AF669
Authority key identifier: 14:74:B6:FC:67:B6:B9:0D:B3:11:C6:1F:C0:E3:A9:C7:52:83:3C:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/5m3tJdzkqEhLKiH7Msno1NqGvGg.roa
Signing time: Sun 01 Jan 2023 09:54:52 +0000
ROA not before: Sun 01 Jan 2023 09:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 38999
IP address blocks: 185.127.183.0/24 maxlen: 24
185.127.183.0/26 maxlen: 26
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:c1:69:df:34:35:4c:0c:ef:53:7f:b7:f3:5a:f6:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1474b6fc67b6b90db311c61fc0e3a9c752833c56
Validity
Not Before: Jan 1 09:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e66ded25dce4a8484b2a21fb32c9e8d4da86bc68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2f:2e:3e:44:bb:00:d6:1b:a7:60:0c:1f:e2:
da:6a:b2:1c:90:a6:ec:5c:3f:3c:5a:3f:e4:16:43:
90:73:26:fd:a6:6d:86:9f:1b:ca:b6:e8:ef:3d:10:
1e:28:76:48:4e:f7:95:70:1d:b4:76:5e:99:01:1e:
8e:77:d4:e7:06:3e:48:7c:cd:15:8b:69:b3:7d:bb:
a0:74:bf:05:65:9d:87:92:87:dd:34:1d:98:23:1b:
1c:16:86:c1:f1:b9:15:fe:88:71:ea:e2:94:19:7f:
f3:94:8e:60:6b:86:91:62:71:9e:f6:5b:2c:18:98:
d8:36:35:53:7d:c8:e7:2e:b0:f1:8f:b6:77:1a:8a:
a6:f8:a7:1c:b6:21:6e:53:16:be:07:bf:fd:e7:36:
75:c1:38:dc:76:e3:9f:19:f0:fd:36:27:79:0a:df:
98:16:ac:9f:b5:b3:c6:31:44:ac:f3:24:86:22:de:
64:05:6b:6e:3e:ab:14:0d:f4:1a:5f:79:cc:da:b9:
c7:bf:11:91:12:f0:1e:69:4a:e2:7d:d4:01:11:86:
ed:4c:3a:1b:4a:de:c3:5d:0f:bf:21:5b:c1:d2:8d:
65:42:7c:f1:2c:00:5b:1c:a3:5d:2d:7e:88:fe:0c:
1c:79:c1:f1:6e:10:c1:63:69:37:63:05:d4:51:96:
bf:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:6D:ED:25:DC:E4:A8:48:4B:2A:21:FB:32:C9:E8:D4:DA:86:BC:68
X509v3 Authority Key Identifier:
keyid:14:74:B6:FC:67:B6:B9:0D:B3:11:C6:1F:C0:E3:A9:C7:52:83:3C:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/5m3tJdzkqEhLKiH7Msno1NqGvGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.183.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:f1:68:c8:20:e6:67:f5:0c:c6:4c:42:ab:ad:96:52:63:47:
7d:77:06:63:bb:da:4f:cd:ae:79:42:81:36:7c:19:2f:bc:6e:
97:97:ee:18:1d:d9:dc:85:97:c4:a7:7a:3b:3f:ce:38:02:c6:
9a:af:dd:02:2e:23:9a:2b:43:b3:e8:e5:56:c0:a1:a5:1c:ac:
35:28:af:fb:08:a9:1c:0c:46:82:81:0f:5e:93:6b:cd:16:23:
c4:3e:f5:a0:c8:c1:b7:e0:53:1e:09:e3:eb:47:d6:54:21:6b:
c2:7d:05:ec:fb:62:9c:67:af:01:58:5a:31:7e:ee:1d:23:3b:
f1:04:12:0d:92:11:eb:89:dc:81:a2:8d:6d:fb:7e:fb:67:60:
cc:23:cf:44:6d:44:fb:db:fb:88:6c:b7:87:ba:22:a2:ec:44:
a9:37:c0:1b:c3:ea:e5:ba:fb:ba:96:fd:59:e1:3e:10:46:e0:
af:67:23:75:f5:8a:6d:8c:c1:16:3d:68:5b:62:eb:88:2a:98:
88:34:c0:14:eb:c7:49:42:5d:e3:ac:6f:64:4d:44:55:17:04:
a0:32:e6:0d:ca:5f:7a:f1:57:fc:5f:00:43:2b:48:3a:d7:11:
6c:55:a6:a0:b9:dd:d1:a0:07:74:f4:12:38:c6:19:ea:21:26:
55:4e:81:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:14:14 2025 by rpki-client