Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/9xLUVCJEDYN6JSQ6ZNpjp43V6Rs.roa
File: 9xLUVCJEDYN6JSQ6ZNpjp43V6Rs.roa (raw, json)
Hash identifier: LZx3ITQl1V05myKVGAtlTniZrHbYMdKlCJRPvJdIMm4=
Subject key identifier: F7:12:D4:54:22:44:0D:83:7A:25:24:3A:64:DA:63:A7:8D:D5:E9:1B
Certificate issuer: /CN=1e4a2020b82d0294e90a2d6b2c0f28d1173b6465
Certificate serial: 01856FE6EF398D350687B2B3BC4317371837
Authority key identifier: 1E:4A:20:20:B8:2D:02:94:E9:0A:2D:6B:2C:0F:28:D1:17:3B:64:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkogILgtApTpCi1rLA8o0Rc7ZGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/9xLUVCJEDYN6JSQ6ZNpjp43V6Rs.roa
Signing time: Mon 02 Jan 2023 00:34:43 +0000
ROA not before: Mon 02 Jan 2023 00:34:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47692
IP address blocks: 5.132.159.0/24 maxlen: 24
5.132.157.0/24 maxlen: 24
5.132.160.0/24 maxlen: 24
5.132.191.0/24 maxlen: 24
2a03:3180:f::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:e6:ef:39:8d:35:06:87:b2:b3:bc:43:17:37:18:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e4a2020b82d0294e90a2d6b2c0f28d1173b6465
Validity
Not Before: Jan 2 00:34:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f712d45422440d837a25243a64da63a78dd5e91b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7e:9c:3c:de:17:d7:82:79:84:b2:2d:10:52:
7c:2e:74:d3:73:c9:b5:90:23:cb:6b:3e:1c:ca:41:
8f:c9:65:52:45:9a:fd:89:f5:53:41:f1:3c:d1:f2:
a0:e1:a2:8f:a8:32:0f:93:cc:b9:a9:46:b4:1d:5c:
19:90:7c:5c:f1:57:7e:55:58:8c:91:c0:ec:72:5f:
d8:33:39:61:26:1c:2d:6b:2e:74:c5:c2:e7:7f:be:
c2:2d:d7:95:9d:9a:72:3c:bb:e3:77:96:39:bd:a0:
17:16:e5:da:05:e7:b8:4c:32:f0:45:6b:86:eb:68:
04:a2:fe:b1:36:a3:ac:b7:e8:bb:15:58:73:f0:c4:
21:5c:05:a8:5c:6e:47:7b:a2:a0:ff:cc:02:89:c7:
ce:c6:1f:c7:23:1a:35:b8:ef:e0:8e:f5:b4:77:df:
e4:2f:8a:e3:4d:bd:1a:81:2a:29:8c:26:c8:a7:a2:
dd:30:40:96:67:3e:42:3b:26:45:fb:c6:ab:86:16:
88:63:99:21:7a:24:5c:ad:e6:ef:2d:83:9e:00:00:
28:ef:3b:5b:7f:88:9f:5f:82:6c:2d:3b:c0:2c:a7:
49:6e:0b:6c:a2:41:c1:75:68:3c:3e:4b:78:a7:60:
a0:cd:a5:2b:f8:10:ca:98:44:cc:51:70:a8:cc:b8:
d3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:12:D4:54:22:44:0D:83:7A:25:24:3A:64:DA:63:A7:8D:D5:E9:1B
X509v3 Authority Key Identifier:
keyid:1E:4A:20:20:B8:2D:02:94:E9:0A:2D:6B:2C:0F:28:D1:17:3B:64:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkogILgtApTpCi1rLA8o0Rc7ZGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/9xLUVCJEDYN6JSQ6ZNpjp43V6Rs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.132.157.0/24
5.132.159.0-5.132.160.255
5.132.191.0/24
IPv6:
2a03:3180:f::/48
Signature Algorithm: sha256WithRSAEncryption
9c:bb:30:42:cc:19:dc:2c:02:f8:5c:cc:0d:18:36:4d:2a:04:
33:94:32:9b:4d:cc:7d:47:c9:2f:bf:ec:75:38:dc:db:7c:41:
08:b5:a5:1d:fd:f0:28:8d:5b:f6:84:d6:6c:ba:cc:bd:a3:14:
2a:68:48:47:a3:21:f0:4f:a5:01:63:ee:2d:a5:03:26:c5:ce:
77:80:40:60:5a:08:5c:2d:c2:61:3a:6e:b8:c2:61:8d:84:c1:
fc:ba:b2:0c:7f:c8:58:b2:62:1f:47:a2:af:b1:3c:e4:74:2a:
43:26:e2:77:55:3e:15:ab:fb:e5:73:59:65:64:d5:59:4f:d2:
4b:f3:f2:4c:ed:97:dc:a2:14:03:76:74:d1:2b:15:bd:38:90:
58:e0:43:f9:e2:aa:65:52:9b:0f:c5:bc:0a:22:f9:41:53:23:
22:f5:50:de:30:34:1a:fd:1b:a9:31:f6:fe:bf:d8:85:80:8d:
08:ab:21:2b:f1:42:f5:0e:7c:4e:fb:9a:d8:90:07:17:50:60:
8b:29:a7:9b:e6:cb:99:1f:59:5c:a1:62:1f:93:1c:fa:fe:d8:
ce:f0:16:69:37:dd:77:67:71:7a:9b:33:39:ec:f2:35:78:7d:
ef:28:0c:e9:b2:4b:92:04:a4:84:00:3c:47:dd:35:42:8d:39:
05:2d:35:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:27 2025 by rpki-client