Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/c6apj-5fVnNXgGUbWEGFesT1DQ4.roa
File: c6apj-5fVnNXgGUbWEGFesT1DQ4.roa (raw, json)
Hash identifier: CnZbwm3PkF4YZHu4BChunitwm13loLTMA1mBN5ESflM=
Subject key identifier: 73:A6:A9:8F:EE:5F:56:73:57:80:65:1B:58:41:85:7A:C4:F5:0D:0E
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 018A1296C2EA39FCF7CF55F690E0AFFFBCA0
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/c6apj-5fVnNXgGUbWEGFesT1DQ4.roa
Signing time: Sun 20 Aug 2023 10:56:24 +0000
ROA not before: Sun 20 Aug 2023 10:56:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200436
IP address blocks: 5.57.32.0/24 maxlen: 24
5.57.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:12:96:c2:ea:39:fc:f7:cf:55:f6:90:e0:af:ff:bc:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Aug 20 10:56:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73a6a98fee5f56735780651b5841857ac4f50d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5b:e6:ac:84:4b:dd:64:35:c3:d3:6f:1b:2d:
35:1e:7c:48:c3:6f:f6:89:6f:4b:f2:47:b3:34:54:
b3:f3:2a:be:c7:c9:2f:9e:2c:13:6b:82:b5:bb:21:
8e:b4:e9:e8:ea:af:07:1e:e9:68:61:3a:9b:bd:d8:
14:07:94:4e:6f:02:e6:51:5f:a9:b4:a7:5e:ad:2d:
d5:8a:93:22:9c:ec:83:e5:8c:49:0f:af:6c:f5:ba:
48:88:ec:bf:6e:4d:48:ae:c8:8d:2e:dc:d9:af:0e:
e6:79:88:0a:38:a1:d3:6a:8d:7b:e7:d4:58:2d:cc:
f6:62:44:86:e5:11:1c:71:b1:fb:0c:4c:da:de:d8:
55:44:bd:39:d1:af:75:fe:49:12:2b:48:de:a8:b8:
4b:e6:03:7b:a5:04:4d:35:ef:0d:9a:09:d4:30:60:
72:11:ab:68:c0:81:c0:dd:20:27:5e:dc:72:e0:93:
74:25:83:39:76:9e:ac:87:41:90:03:a0:82:e2:73:
a8:eb:97:18:54:4e:47:82:5f:55:e2:8b:88:6c:9e:
34:d8:31:a2:29:8a:50:58:10:20:70:00:9a:4e:47:
ed:d5:87:85:86:76:c2:de:97:b5:25:78:59:c5:51:
32:1a:cb:42:a7:be:c6:01:56:32:ba:09:1d:ad:cc:
62:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A6:A9:8F:EE:5F:56:73:57:80:65:1B:58:41:85:7A:C4:F5:0D:0E
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/c6apj-5fVnNXgGUbWEGFesT1DQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.32.0/24
5.57.39.0/24
Signature Algorithm: sha256WithRSAEncryption
17:d7:98:1b:c4:b7:bb:b3:6f:bd:ca:cf:c5:3d:66:9e:72:21:
79:d7:38:61:48:bf:9e:0f:33:60:5c:1f:f7:18:8d:56:ee:22:
a4:12:e7:9d:19:ee:75:e5:ab:f7:f1:b4:af:3d:24:65:f4:fb:
d0:f1:1d:b0:13:75:b4:0f:9f:71:0e:71:e8:75:9f:3e:ee:df:
c7:fc:8c:b0:38:05:6b:42:ad:87:9d:dc:85:55:9b:ea:de:dd:
6d:89:c9:34:a3:f4:1c:52:3b:51:ea:73:52:04:57:3d:81:bd:
4b:1c:5d:5e:2c:d7:af:2c:26:d7:39:13:28:c4:64:84:c5:54:
3e:3b:c3:ad:cb:e2:c9:fe:8b:6c:b8:95:c6:66:9a:03:d7:6d:
1c:dd:91:e3:a6:5b:07:b1:d3:69:8f:24:d6:16:2c:4f:0c:ae:
b2:84:94:df:58:af:8e:3b:dd:a7:10:a9:68:b1:23:7d:93:2d:
db:8d:1e:ce:7c:dd:67:e6:85:7d:aa:4d:78:31:50:7d:56:5d:
7e:1a:69:13:11:d9:a3:f2:95:69:ad:2f:bf:60:fe:41:c4:10:
3f:6c:b5:91:46:ff:0d:a0:87:45:21:fc:63:1c:21:14:a5:10:
1a:2c:8c:b3:b4:ee:e6:4b:04:32:a7:74:f4:72:b5:33:3a:20:
9b:99:47:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:30:13 2025 by rpki-client