Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/s5Qgoo3uM2XEciDKkDw0pkVvadQ.roa
File: s5Qgoo3uM2XEciDKkDw0pkVvadQ.roa (raw, json)
Hash identifier: bO1MUm/EBAEwMIhW66cFeidIcj+bJXEMgyOYn4aHQ68=
Subject key identifier: B3:94:20:A2:8D:EE:33:65:C4:72:20:CA:90:3C:34:A6:45:6F:69:D4
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 018ACCFD26F42F1EB00A3DBF2010EBBA4401
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/s5Qgoo3uM2XEciDKkDw0pkVvadQ.roa
Signing time: Mon 25 Sep 2023 15:37:37 +0000
ROA not before: Mon 25 Sep 2023 15:37:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204104
IP address blocks: 5.57.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cc:fd:26:f4:2f:1e:b0:0a:3d:bf:20:10:eb:ba:44:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Sep 25 15:37:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b39420a28dee3365c47220ca903c34a6456f69d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:46:72:db:86:54:cf:49:cb:c4:2f:d0:bf:a5:
87:bc:68:80:31:ce:0a:91:72:30:43:d4:83:17:5e:
b1:3b:ff:29:e4:8b:64:4d:e9:86:00:24:66:1d:b8:
82:cd:d2:fa:d5:d3:b6:f2:c6:9d:28:f5:f4:17:99:
80:8f:59:03:da:2b:97:83:9d:13:82:47:fd:76:37:
77:06:98:7d:88:37:4e:e5:2e:02:ee:ec:b4:77:e1:
a4:97:87:c0:4a:b2:5c:ac:a4:5d:a4:4e:b6:fd:05:
64:bb:d1:e4:ff:b0:17:1f:1b:29:ef:7e:58:0f:aa:
ea:9e:46:d5:cb:69:0e:b9:67:43:eb:84:6c:14:d4:
25:29:75:90:d8:1f:67:79:5b:a3:82:99:b8:e3:18:
8e:c3:49:9a:8c:76:3c:be:e4:b3:f2:7e:29:33:2b:
73:ed:8f:62:b5:c0:96:3a:02:67:bf:37:a4:79:00:
8c:a3:1f:be:ef:56:6e:b9:e7:e5:bc:cc:6e:31:05:
c0:53:61:0f:47:da:bb:d1:ad:0d:bf:cb:68:7f:5f:
e1:a7:ab:29:9a:dc:50:e5:ac:ac:80:aa:eb:32:61:
ec:78:3a:da:c7:f0:a9:6c:c7:88:94:5f:75:66:5d:
64:d7:96:e9:0a:1d:f0:ca:ec:fc:73:98:fc:30:47:
d8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:94:20:A2:8D:EE:33:65:C4:72:20:CA:90:3C:34:A6:45:6F:69:D4
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/s5Qgoo3uM2XEciDKkDw0pkVvadQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.33.0/24
Signature Algorithm: sha256WithRSAEncryption
19:59:63:3f:55:74:27:c5:2d:91:0b:04:5a:75:48:d2:75:34:
55:eb:8f:a2:d7:fd:6a:e1:a6:04:97:95:c3:aa:b7:5f:d2:02:
1d:67:3e:da:11:3c:e7:a5:d9:6b:86:c5:99:e7:2e:a3:af:6f:
69:61:f6:7e:e7:44:12:a0:46:48:7d:dc:c3:e3:12:89:66:ac:
25:a4:f8:a3:d3:b5:b4:33:f6:16:e7:6d:c1:7a:14:8f:c4:48:
69:e6:9a:d3:e8:b8:93:3e:8e:d9:2c:b7:47:d4:9b:93:15:e2:
bf:28:1f:9e:37:b1:08:f1:11:3e:60:d7:9a:10:ca:39:8c:a4:
2a:24:bd:60:ee:90:5d:fc:39:2f:47:95:7a:3b:25:94:14:fb:
7f:4a:ce:6e:86:94:89:0d:6e:30:54:b5:8b:de:76:f1:c1:a4:
30:79:d1:13:4d:f2:53:0c:15:a2:6d:58:3e:62:bc:9c:b0:c3:
ef:81:06:51:a2:70:2d:cc:09:c3:30:90:f7:95:64:25:27:70:
f4:a6:14:12:3b:c8:0c:df:a6:19:c6:6a:46:6d:6a:f5:ea:31:
55:2d:28:20:94:c7:e0:bc:51:9a:17:46:50:d9:4e:50:91:ee:
ce:fe:ec:a7:78:12:d9:c5:83:1f:98:9e:2c:33:2c:9b:2b:36:
5c:fa:7d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:34:31 2025 by rpki-client