Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/SDif94N0E_Smx0NZ8ZAB5NdIYJY.roa
File: SDif94N0E_Smx0NZ8ZAB5NdIYJY.roa (raw, json)
Hash identifier: IoRqb1uonaaHiKMEkCgxUgBNU5BqKIxZcMq/7zcJcm4=
Subject key identifier: 48:38:9F:F7:83:74:13:F4:A6:C7:43:59:F1:90:01:E4:D7:48:60:96
Certificate issuer: /CN=44a88637498b188fc0bceae0bbf0681761a49d4b
Certificate serial: 018AB2A7355853F903B4EA1FE52314CED470
Authority key identifier: 44:A8:86:37:49:8B:18:8F:C0:BC:EA:E0:BB:F0:68:17:61:A4:9D:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKiGN0mLGI_AvOrgu_BoF2GknUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/SDif94N0E_Smx0NZ8ZAB5NdIYJY.roa
Signing time: Wed 20 Sep 2023 12:53:37 +0000
ROA not before: Wed 20 Sep 2023 12:53:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 5.133.166.0/24 maxlen: 24
5.133.163.0/24 maxlen: 24
5.133.165.0/24 maxlen: 24
5.133.162.0/24 maxlen: 24
5.133.164.0/24 maxlen: 24
5.133.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b2:a7:35:58:53:f9:03:b4:ea:1f:e5:23:14:ce:d4:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44a88637498b188fc0bceae0bbf0681761a49d4b
Validity
Not Before: Sep 20 12:53:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48389ff7837413f4a6c74359f19001e4d7486096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ba:94:2e:da:4a:eb:80:22:0a:9d:36:1a:1c:
b0:f6:98:67:6f:87:6a:9a:bf:0a:d6:b1:82:4b:67:
58:42:05:60:8e:c2:ee:46:45:b7:b9:ea:b2:df:31:
bb:2e:66:f4:27:07:af:d0:7d:68:e0:ee:a6:d4:36:
a8:fa:18:3c:b9:41:eb:e6:af:46:5d:39:45:5b:aa:
6f:b6:d9:6c:de:19:8c:57:af:81:2c:21:61:b3:db:
bf:0b:1c:71:80:ee:99:1f:93:78:04:33:a4:44:04:
12:18:10:ae:97:0a:1f:4f:51:b3:f8:f1:2a:2c:89:
b6:69:29:8b:0f:1c:bf:ca:96:0a:f1:94:9e:95:66:
05:93:f2:63:fe:ea:e6:9b:7d:94:ea:91:87:bf:89:
ba:bc:f4:18:47:e2:6b:bb:ce:5a:fe:cb:87:82:53:
31:ef:73:53:12:5b:e0:a9:46:c6:34:ca:6d:82:ff:
f0:88:4f:5b:96:a2:bb:87:ba:c5:0c:e0:77:3b:0b:
cf:a5:3e:f6:73:55:6a:7a:e0:92:13:60:ce:10:ec:
dd:7c:8b:07:0d:19:cc:39:45:8d:6a:86:3e:45:03:
42:70:7f:24:c0:c6:3e:93:d3:3e:55:64:d4:ac:70:
44:46:15:50:12:b3:67:8d:39:0c:a2:c5:51:cf:e3:
0d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:38:9F:F7:83:74:13:F4:A6:C7:43:59:F1:90:01:E4:D7:48:60:96
X509v3 Authority Key Identifier:
keyid:44:A8:86:37:49:8B:18:8F:C0:BC:EA:E0:BB:F0:68:17:61:A4:9D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKiGN0mLGI_AvOrgu_BoF2GknUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/SDif94N0E_Smx0NZ8ZAB5NdIYJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.162.0-5.133.167.255
Signature Algorithm: sha256WithRSAEncryption
5a:c9:c6:b8:ce:12:01:14:2a:d3:df:5e:00:80:66:f7:b4:dd:
3d:b8:80:2e:58:fd:e8:0d:13:79:c8:45:a2:6d:12:7f:01:58:
ae:41:84:f8:fb:26:2b:17:5c:a3:36:8f:c9:84:58:5e:3e:d5:
e2:a3:0d:03:14:2b:ac:63:b2:8d:8e:c7:68:c0:a3:5d:22:ec:
b8:ce:17:65:ae:81:01:eb:b4:a3:65:4c:6b:39:88:29:ec:8d:
c1:b9:b8:32:4f:16:e4:0e:e1:a5:01:80:ae:3f:67:2d:3a:1b:
b6:2e:8c:0d:0c:69:56:01:29:3c:6c:a5:c7:53:9d:9b:af:80:
78:27:82:68:40:89:af:be:4a:88:bb:e8:4a:f1:74:71:53:b1:
76:36:a6:5b:e4:4a:2c:e2:ad:91:01:a8:67:11:34:7f:9b:6d:
ba:25:71:88:99:f6:c0:56:5b:4a:11:b4:ce:c0:86:cc:3b:9f:
e4:49:22:2d:59:45:f3:38:b0:82:95:20:2a:3d:6a:91:13:27:
0f:de:2d:c4:7d:0d:0e:1c:8f:31:69:c4:d1:54:59:8d:8a:48:
94:2d:34:9c:6a:fe:e3:88:3b:fa:4b:c8:bc:9a:65:8d:a6:24:
2c:25:cf:3b:1c:1f:50:d8:94:54:33:88:94:d3:08:46:b4:61:
00:97:a3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:34:01 2025 by rpki-client