Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/a5MF1LMxd_-D7kuXYQz_3YoMRbo.roa
File: a5MF1LMxd_-D7kuXYQz_3YoMRbo.roa (raw, json)
Hash identifier: yAvLrWdMWxwib2Xkfg+kL1vfTQ8BF52qgSOwfAXdbzU=
Subject key identifier: 6B:93:05:D4:B3:31:77:FF:83:EE:4B:97:61:0C:FF:DD:8A:0C:45:BA
Certificate issuer: /CN=b262bf21de51385859416c4c608001e2025a5d25
Certificate serial: 018BA439D82DF8316F0F12B2B288D01DD53B
Authority key identifier: B2:62:BF:21:DE:51:38:58:59:41:6C:4C:60:80:01:E2:02:5A:5D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/smK_Id5ROFhZQWxMYIAB4gJaXSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/a5MF1LMxd_-D7kuXYQz_3YoMRbo.roa
Signing time: Mon 06 Nov 2023 10:42:16 +0000
ROA not before: Mon 06 Nov 2023 10:42:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57793
IP address blocks: 185.19.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a4:39:d8:2d:f8:31:6f:0f:12:b2:b2:88:d0:1d:d5:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b262bf21de51385859416c4c608001e2025a5d25
Validity
Not Before: Nov 6 10:42:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b9305d4b33177ff83ee4b97610cffdd8a0c45ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:fb:35:63:78:ea:ab:04:b8:bf:94:d3:5e:04:
53:58:72:6d:2d:54:94:d0:53:5a:b5:17:0b:25:7f:
e9:56:c0:7c:8f:fa:5f:25:d0:ba:75:47:7a:6b:a1:
a8:44:14:82:44:09:a4:34:74:20:a3:79:a4:1f:b2:
9a:04:45:b4:1b:d8:27:4a:ba:f6:06:9b:94:e9:d6:
ae:58:bf:05:9c:83:6c:30:9b:3b:56:5b:8b:f5:24:
6a:03:97:05:2f:5d:a3:33:e8:92:6e:70:d0:3c:48:
42:13:92:8a:e6:b3:6c:b1:b0:32:dc:3c:65:c2:17:
3a:b3:c7:70:10:3a:99:f8:57:22:7e:7d:aa:21:4c:
ee:7b:e0:59:3f:e2:2e:12:a2:24:78:af:42:6b:c5:
09:84:50:44:bd:f0:a9:5e:76:ed:e1:92:08:5c:bd:
ba:0d:ff:f1:8e:fb:34:0c:37:3d:1a:db:9d:0a:3c:
0b:47:09:ca:35:a5:dd:c6:e8:86:a2:c5:0c:bd:e6:
b9:34:d6:25:ec:5a:fa:0b:6f:e4:84:35:84:9e:0e:
cc:55:ff:e2:82:54:84:3d:a6:2a:c8:66:8e:50:8e:
00:ef:a3:e5:44:05:58:2a:5b:27:ed:16:cb:9b:ec:
f5:98:0e:05:d0:10:87:6f:5d:2a:80:fb:cf:b4:44:
14:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:93:05:D4:B3:31:77:FF:83:EE:4B:97:61:0C:FF:DD:8A:0C:45:BA
X509v3 Authority Key Identifier:
keyid:B2:62:BF:21:DE:51:38:58:59:41:6C:4C:60:80:01:E2:02:5A:5D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smK_Id5ROFhZQWxMYIAB4gJaXSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/a5MF1LMxd_-D7kuXYQz_3YoMRbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.19.150.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:a1:32:aa:c7:73:04:6f:f4:58:2c:7e:32:5a:07:76:21:14:
6c:a2:bc:68:10:c6:64:54:78:48:16:11:ca:4e:0f:59:56:55:
89:e1:38:19:c2:0d:0e:84:51:68:62:9f:b6:66:53:02:37:1f:
59:88:ef:d4:13:6b:d3:ae:84:92:7d:3b:fb:2f:b1:35:34:3c:
9a:38:e2:7b:5c:08:af:24:03:84:c2:39:bc:b9:ab:72:cd:57:
5f:1e:dd:9d:60:f4:7d:9d:2a:c8:44:9a:a5:be:d4:e1:3d:64:
66:1f:a5:47:5c:bd:f8:93:c4:d4:e9:54:c0:17:8c:bb:e8:ad:
60:82:37:5f:fb:d1:7e:de:fc:15:13:d6:9a:72:8f:d7:63:5d:
87:71:8e:22:97:9b:3b:66:a6:cd:67:c3:b1:3e:cb:b9:aa:20:
5f:27:51:30:3a:74:1b:40:5e:73:16:c2:3e:5a:65:3a:09:4e:
5d:40:53:3a:b4:63:ee:27:30:00:f4:f0:73:75:2c:cb:93:90:
56:aa:45:90:de:f1:9d:0e:0b:d8:8c:b5:75:5a:15:e7:70:53:
4f:18:b1:7f:74:8e:bb:ab:8d:6e:86:9f:5f:b9:80:6e:f4:df:
6e:24:97:e3:33:25:23:b5:4b:c0:08:2e:a6:f5:74:33:e0:b2:
fe:e3:b4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:53 2025 by rpki-client