Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/5ZAmK0VPHHrUOFs8rIM2DpyEhD4.roa
File: 5ZAmK0VPHHrUOFs8rIM2DpyEhD4.roa (raw, json)
Hash identifier: uCJDHNRvKdLmLKQQ/9mY5kPma26HWzaWVUkFJjcy+rI=
Subject key identifier: E5:90:26:2B:45:4F:1C:7A:D4:38:5B:3C:AC:83:36:0E:9C:84:84:3E
Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Certificate serial: 018920DA650C67DE9FA3F5856D7FB7163E2D
Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/5ZAmK0VPHHrUOFs8rIM2DpyEhD4.roa
Signing time: Tue 04 Jul 2023 12:22:10 +0000
ROA not before: Tue 04 Jul 2023 12:22:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.25.104.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:20:da:65:0c:67:de:9f:a3:f5:85:6d:7f:b7:16:3e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Validity
Not Before: Jul 4 12:22:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e590262b454f1c7ad4385b3cac83360e9c84843e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:82:5e:f3:45:a6:92:b8:82:1d:46:b3:c4:d8:
9c:79:18:b5:11:11:9c:66:94:d0:4e:76:99:79:84:
6c:4e:a1:e4:7b:48:46:32:fd:e7:f7:58:cf:b8:26:
f9:48:f8:f7:4f:c4:1d:60:cf:a8:94:c4:14:51:01:
5f:69:e2:ec:a5:57:3e:4f:6a:ff:e8:4c:0a:41:0c:
c8:2b:f3:e3:1b:a0:cc:a8:20:2a:3d:5b:cf:90:d6:
7e:d9:bb:90:5e:a4:0a:15:f6:f8:a5:a4:25:71:40:
03:2a:71:89:b8:81:cd:33:af:e1:16:bf:4e:77:d3:
cb:0b:bf:40:29:02:54:80:c5:af:4f:4b:39:58:5d:
c9:91:74:7d:81:b6:0a:c2:ce:e9:1e:15:8f:c1:b6:
8c:06:10:b0:a7:78:ed:e6:f7:09:08:2e:de:2c:83:
04:ca:ff:de:06:e3:7c:5b:57:02:e9:8b:c9:3c:61:
f9:0a:7c:73:8b:cd:e8:5a:a6:c0:17:17:d0:09:e8:
ca:81:88:08:33:35:08:7a:8e:7b:b6:9d:52:48:50:
ef:99:50:1f:a3:b4:42:37:23:bc:ae:92:a1:54:8a:
7a:f5:5d:e3:b9:76:e0:d3:2c:9a:03:bd:35:42:87:
21:a7:22:36:e9:2c:d5:7a:d4:87:cb:0b:af:a0:e7:
47:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:90:26:2B:45:4F:1C:7A:D4:38:5B:3C:AC:83:36:0E:9C:84:84:3E
X509v3 Authority Key Identifier:
keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/5ZAmK0VPHHrUOFs8rIM2DpyEhD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.104.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:7c:a0:51:8f:da:b5:fa:90:ce:ac:e5:55:d7:61:48:e1:54:
ef:97:e7:0c:6f:68:94:6a:a0:78:41:1f:c7:a3:e3:c6:8a:90:
a1:98:8d:82:77:cd:9b:fb:9c:72:97:b4:5b:a2:a3:de:c7:e6:
06:5d:79:ff:f5:10:b0:a3:2f:be:37:3f:c2:2f:6d:da:4a:c1:
30:1e:83:57:24:71:ec:e6:37:dd:98:4d:dd:f6:74:73:f2:a3:
82:77:ce:48:78:46:76:c2:55:15:c0:38:bd:f9:4c:2a:30:9c:
ae:7f:f7:26:2f:54:31:a9:ce:c0:dc:1d:5a:2f:5d:69:8c:df:
94:8a:aa:02:35:11:78:a7:9d:73:59:a2:5c:a1:c0:d0:b1:ef:
02:bd:0c:c0:e8:2a:9f:cb:8f:a4:f5:15:55:db:77:6f:3d:f2:
23:93:9e:91:dd:1d:9c:90:2e:0c:1c:3e:89:f4:26:cb:c5:22:
31:21:d0:39:23:f9:25:f7:11:4c:a2:a5:97:2b:1d:4f:1c:86:
86:d1:f8:79:69:30:1f:c7:3a:fd:6c:f3:81:21:47:56:d8:c3:
37:fd:08:57:16:73:56:4a:65:8f:33:9e:9d:66:76:7e:7a:fc:
95:72:5a:5c:b2:62:81:8d:29:6f:d5:ea:85:08:8c:62:2e:5c:
37:ec:1d:6f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYkg2mUMZ96fo/WFbX+3Fj4tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZTE0YmY3NmY0MmRhNGYyYWMwMDNhNmM2OWQ2MWMyMzIw
ZTJjZDgwHhcNMjMwNzA0MTIyMjEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTkwMjYyYjQ1NGYxYzdhZDQzODViM2NhYzgzMzYwZTljODQ4NDNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YJe80WmkriCHUazxNiceRi1ERGc
ZpTQTnaZeYRsTqHke0hGMv3n91jPuCb5SPj3T8QdYM+olMQUUQFfaeLspVc+T2r/
6EwKQQzIK/PjG6DMqCAqPVvPkNZ+2buQXqQKFfb4paQlcUADKnGJuIHNM6/hFr9O
d9PLC79AKQJUgMWvT0s5WF3JkXR9gbYKws7pHhWPwbaMBhCwp3jt5vcJCC7eLIME
yv/eBuN8W1cC6YvJPGH5Cnxzi83oWqbAFxfQCejKgYgIMzUIeo57tp1SSFDvmVAf
o7RCNyO8rpKhVIp69V3juXbg0yyaA701QochpyI26SzVetSHywuvoOdHHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOWQJitFTxx61DhbPKyDNg6chIQ+MB8GA1UdIwQY
MBaAFEnhS/dvQtpPKsADpsadYcIyDizYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2VGTDkyOUMyazhxd0FPbXhwMWh3aklPTE5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC81NjE2N2YtNTMyNy00Yzg4LWI0ZWEt
M2JlY2NhYWUzMzZkLzEvNVpBbUswVlBISHJVT0ZzOHJJTTJEcHlFaEQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC81NjE2N2YtNTMyNy00Yzg4LWI0ZWEtM2JlY2NhYWUzMzZk
LzEvU2VGTDkyOUMyazhxd0FPbXhwMWh3aklPTE5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRloMA0G
CSqGSIb3DQEBCwUAA4IBAQA+fKBRj9q1+pDOrOVV12FI4VTvl+cMb2iUaqB4QR/H
o+PGipChmI2Cd82b+5xyl7RboqPex+YGXXn/9RCwoy++Nz/CL23aSsEwHoNXJHHs
5jfdmE3d9nRz8qOCd85IeEZ2wlUVwDi9+UwqMJyuf/cmL1Qxqc7A3B1aL11pjN+U
iqoCNRF4p51zWaJcocDQse8CvQzA6Cqfy4+k9RVV23dvPfIjk56R3R2ckC4MHD6J
9CbLxSIxIdA5I/kl9xFMoqWXKx1PHIaG0fh5aTAfxzr9bPOBIUdW2MM3/QhXFnNW
SmWPM56dZnZ+evyVclpcsmKBjSlv1eqFCIxiLlw37B1v
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:24:14 2025 by rpki-client