Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/5vTTMKMAS0iEF4W7PJaM1JqCRV8.roa
File: 5vTTMKMAS0iEF4W7PJaM1JqCRV8.roa (raw, json)
Hash identifier: beyuAEdHrN7ccijh9Qcviu6/KzcbkeSx97Z+asQP4oA=
Subject key identifier: E6:F4:D3:30:A3:00:4B:48:84:17:85:BB:3C:96:8C:D4:9A:82:45:5F
Certificate issuer: /CN=ee4c3fc0122d831fbea8abb20a4e9b65c54039b2
Certificate serial: 01856F1DA3DC699E7827D71A9682F4C14113
Authority key identifier: EE:4C:3F:C0:12:2D:83:1F:BE:A8:AB:B2:0A:4E:9B:65:C5:40:39:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kw_wBItgx--qKuyCk6bZcVAObI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/5vTTMKMAS0iEF4W7PJaM1JqCRV8.roa
Signing time: Sun 01 Jan 2023 20:54:51 +0000
ROA not before: Sun 01 Jan 2023 20:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2119
IP address blocks: 138.14.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:a3:dc:69:9e:78:27:d7:1a:96:82:f4:c1:41:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee4c3fc0122d831fbea8abb20a4e9b65c54039b2
Validity
Not Before: Jan 1 20:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6f4d330a3004b48841785bb3c968cd49a82455f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:29:76:a8:fc:b0:87:94:e1:b5:0c:15:0d:fd:
08:3b:4f:1d:ce:1c:f2:b4:ce:78:99:c5:af:ba:da:
11:33:c0:cc:c1:35:2f:32:cc:34:8e:90:c5:bb:9d:
5b:77:a8:68:58:2d:75:88:f4:af:55:31:4c:b2:c4:
45:47:98:57:c5:1b:41:1b:56:48:b6:e9:1b:1d:be:
51:3d:cc:33:a9:61:96:e5:fe:fd:55:e0:80:6f:df:
d0:17:c9:fb:87:86:dd:01:cd:bd:23:07:d6:ed:fe:
36:51:20:af:03:e6:88:70:66:a9:ee:36:fc:8a:ac:
ca:a0:7f:2d:00:39:2e:ac:05:04:c0:18:7b:46:e3:
4a:45:5c:1d:e4:74:79:73:99:b9:17:2d:44:95:64:
f4:e7:67:63:d3:2a:46:d7:88:86:bd:a5:53:33:24:
53:3d:6d:0a:98:c1:fc:09:d0:3e:4e:9f:c0:46:af:
86:72:a3:ac:dd:94:18:eb:47:9b:cf:5f:67:dd:0f:
96:8c:b0:6a:eb:d5:01:93:8c:5a:68:01:36:10:1c:
a2:55:d9:99:2e:35:06:e5:cb:33:d3:fd:ad:0f:b5:
b0:fc:55:cc:4a:5e:fd:d7:6f:82:3c:f0:a7:cf:84:
bf:3d:e7:d4:c3:24:6a:da:3f:75:68:d2:58:30:d3:
8a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F4:D3:30:A3:00:4B:48:84:17:85:BB:3C:96:8C:D4:9A:82:45:5F
X509v3 Authority Key Identifier:
keyid:EE:4C:3F:C0:12:2D:83:1F:BE:A8:AB:B2:0A:4E:9B:65:C5:40:39:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kw_wBItgx--qKuyCk6bZcVAObI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/5vTTMKMAS0iEF4W7PJaM1JqCRV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/7kw_wBItgx--qKuyCk6bZcVAObI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.14.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4a:d4:72:96:8f:98:f9:6d:6c:86:43:d2:ad:84:e1:b6:90:e7:
8d:f5:c7:3a:9f:07:81:28:18:88:1d:f1:6a:09:9a:d6:69:76:
3b:ec:13:ce:7a:6a:56:20:46:a8:32:1b:07:80:ee:79:3d:7d:
36:5c:5e:78:74:98:8a:85:95:10:a3:0e:de:d4:8b:31:69:ba:
0a:2e:fe:b8:ea:2a:ff:d5:c3:db:f4:b5:9e:82:2f:10:c4:cc:
9d:48:ea:fe:88:59:ea:4b:3f:c6:cd:27:74:2c:79:fe:8f:3b:
d5:55:30:87:ed:8f:83:e1:50:54:1e:54:f3:a7:5e:f6:6a:ce:
f3:9f:79:6e:b5:4e:87:b9:7f:94:67:67:2b:fd:d6:f4:0e:d3:
5c:8b:b1:02:1f:98:0c:4d:2f:6f:f7:fa:7a:93:fe:51:c6:04:
2b:80:6b:5a:9a:a6:06:dd:18:6d:5c:d9:fc:65:64:2a:cb:77:
6d:69:50:bf:27:4f:85:d2:25:a7:41:5c:6c:6f:b7:ec:11:94:
9e:a3:5e:0d:21:e8:6f:eb:6a:46:ee:c3:e0:41:f1:0d:93:c6:
3b:91:b1:a1:2c:54:ea:74:c6:70:84:ea:eb:08:8c:bf:39:4c:
66:9d:8c:36:a1:24:e6:c0:33:4a:c2:73:2b:1d:f8:3f:dc:e7:
36:19:da:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 12:23:36 2025 by rpki-client