Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/z3DZFbbz2e5nkQhN0wbNPcjwoyg.roa
File: z3DZFbbz2e5nkQhN0wbNPcjwoyg.roa (raw, json)
Hash identifier: +jjSvnOaeGR4BGwvHsGdlDh7mU/kDdzB0JOS/wFTp9U=
Subject key identifier: CF:70:D9:15:B6:F3:D9:EE:67:91:08:4D:D3:06:CD:3D:C8:F0:A3:28
Certificate issuer: /CN=72f47539f19f0f5a13b0b69bc796278f0bf4aea4
Certificate serial: 01856D5D12D2647F34D3648BA471C2C063AE
Authority key identifier: 72:F4:75:39:F1:9F:0F:5A:13:B0:B6:9B:C7:96:27:8F:0B:F4:AE:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/z3DZFbbz2e5nkQhN0wbNPcjwoyg.roa
Signing time: Sun 01 Jan 2023 12:44:54 +0000
ROA not before: Sun 01 Jan 2023 12:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44381
IP address blocks: 5.145.152.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:5d:12:d2:64:7f:34:d3:64:8b:a4:71:c2:c0:63:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f47539f19f0f5a13b0b69bc796278f0bf4aea4
Validity
Not Before: Jan 1 12:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf70d915b6f3d9ee6791084dd306cd3dc8f0a328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:44:6c:7d:3c:2c:b9:ee:69:8e:24:27:cb:3c:
6b:ac:04:74:41:b9:a8:76:74:28:83:32:5c:c7:24:
24:cf:f6:28:b9:4f:f5:14:e1:c1:0d:da:25:0c:d7:
ae:5c:51:0b:9b:ed:36:ed:66:e7:3b:09:dd:1a:1c:
1c:4c:4c:7c:d4:d9:cd:41:c9:0f:69:91:6f:80:1b:
2d:fa:16:f0:72:cb:4a:9c:58:d0:c7:45:28:b7:b2:
af:f3:3e:6e:87:5e:78:3c:ed:f6:ad:13:77:33:11:
6a:58:ef:2f:54:25:8d:9e:ad:7e:dc:61:f5:f5:32:
76:95:a2:b7:92:57:8e:82:13:ab:d2:13:93:ce:7d:
3a:d4:bd:be:b4:e1:08:ec:61:10:7b:ed:e3:6f:d2:
39:f2:43:ca:c9:06:d9:2a:bf:aa:b7:3a:c5:ef:f2:
69:35:bd:9d:a9:78:c9:53:2b:56:b1:45:59:bb:2b:
81:56:a5:00:88:46:de:68:c8:bf:de:a9:33:a2:11:
8c:c9:a8:85:1f:55:72:1e:18:be:37:ec:61:25:5a:
cb:b2:4e:32:03:23:67:2c:07:f5:02:77:9f:8e:6c:
80:63:9e:cc:bd:a8:81:25:f1:ac:78:87:cd:00:c6:
d0:ec:94:87:f5:f6:85:f3:98:db:5b:cb:2f:f7:63:
89:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:70:D9:15:B6:F3:D9:EE:67:91:08:4D:D3:06:CD:3D:C8:F0:A3:28
X509v3 Authority Key Identifier:
keyid:72:F4:75:39:F1:9F:0F:5A:13:B0:B6:9B:C7:96:27:8F:0B:F4:AE:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/z3DZFbbz2e5nkQhN0wbNPcjwoyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.145.152.0/21
Signature Algorithm: sha256WithRSAEncryption
31:28:45:f6:3c:fc:12:4e:c7:f8:19:24:2c:e3:2a:ff:b6:49:
b7:c5:07:cc:dd:d5:1d:68:b1:cf:e2:02:db:7e:b6:c8:27:dd:
04:06:c9:4e:1b:67:e7:30:18:0b:b5:f6:4d:20:c5:17:f1:42:
90:ee:6f:28:71:f4:c0:4d:26:0d:ba:92:f0:2b:57:94:7a:4b:
36:4a:5c:72:a4:72:0e:7d:9e:de:8e:5f:80:e2:14:71:90:ef:
e4:08:22:5e:34:42:ee:62:8f:29:ac:40:28:7f:7f:eb:91:2d:
01:08:7b:e1:fa:e0:7f:5a:1a:c9:c0:66:09:e3:0b:65:57:8c:
78:26:80:a5:cf:20:dd:0d:b5:39:ba:ca:8a:c5:e2:33:b7:47:
16:01:31:99:a1:1b:fe:c1:8e:fe:bf:4e:c8:f1:43:8c:03:81:
cb:56:9e:ca:6e:4f:a3:bc:ce:4f:68:fd:f0:81:10:b9:95:b1:
46:96:fc:7a:63:a6:23:c5:b7:6c:88:34:2f:7d:be:fe:e6:15:
fd:69:5c:92:cb:cc:a4:59:5d:d2:ee:01:eb:8e:76:0c:7c:e7:
f2:f0:7a:37:22:96:d5:5c:ec:d1:5e:d8:8b:6a:79:a6:37:c4:
47:ca:be:36:c3:9b:fb:3a:fd:ae:5f:68:a3:cf:06:8d:7b:17:
1e:b5:d5:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:18:26 2025 by rpki-client