Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/5XIyuJqeWskv6Oksx4MJ1bPpHKs.roa
File: 5XIyuJqeWskv6Oksx4MJ1bPpHKs.roa (raw, json)
Hash identifier: jd6VA8sVtDsH+ZHX3eUOBQ+AhtkvSE6Q26ywz4GzULI=
Subject key identifier: E5:72:32:B8:9A:9E:5A:C9:2F:E8:E9:2C:C7:83:09:D5:B3:E9:1C:AB
Certificate issuer: /CN=fec6fb5a467974c977a997c6dda1464805ed379f
Certificate serial: 018627711D3487994E09239C9A64FBA8AE61
Authority key identifier: FE:C6:FB:5A:46:79:74:C9:77:A9:97:C6:DD:A1:46:48:05:ED:37:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sb7WkZ5dMl3qZfG3aFGSAXtN58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/5XIyuJqeWskv6Oksx4MJ1bPpHKs.roa
Signing time: Mon 06 Feb 2023 15:56:09 +0000
ROA not before: Mon 06 Feb 2023 15:56:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8075
IP address blocks: 176.116.123.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:27:71:1d:34:87:99:4e:09:23:9c:9a:64:fb:a8:ae:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec6fb5a467974c977a997c6dda1464805ed379f
Validity
Not Before: Feb 6 15:56:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e57232b89a9e5ac92fe8e92cc78309d5b3e91cab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f0:d6:1d:9f:66:32:c1:46:60:a4:ab:fe:bc:
a1:d3:af:f8:44:01:ea:81:bd:a3:16:82:bf:89:b1:
46:d6:ce:ee:54:b2:3f:10:25:06:c4:42:70:00:a2:
67:c8:af:cf:54:a3:a7:29:2e:ce:1e:34:86:68:6e:
e5:4e:7a:c6:e2:c9:5a:b0:a0:b1:a6:20:ca:1e:7e:
ef:41:6a:c7:e9:9a:ec:29:7c:b9:84:64:0c:3c:03:
7d:db:e4:1d:78:89:a2:3d:39:17:8d:6b:a7:45:72:
aa:a5:61:a9:24:e8:7d:4e:01:65:eb:32:37:5e:e8:
60:ca:8f:14:11:64:22:a1:da:43:eb:1a:31:8f:63:
44:8d:66:ff:f1:0a:6e:a0:c9:12:ea:cd:71:87:67:
e1:6c:fc:5b:cc:0c:f4:0c:35:7e:34:5a:50:70:36:
a7:3f:9b:1c:28:3f:fe:ea:33:31:20:dc:c0:5c:45:
c7:ef:54:2e:ee:5a:8e:0e:e1:f4:63:43:7f:f7:2d:
d7:54:24:a6:e9:ee:97:8d:9d:9f:31:6d:5c:26:4b:
95:20:b6:b3:d4:2f:1c:ba:48:96:60:f2:a8:e2:a6:
37:8c:1e:5a:b8:8b:e9:a0:70:38:59:1d:b6:e9:9a:
4b:26:c0:45:c4:e0:12:c4:08:e3:85:56:c8:04:82:
36:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:72:32:B8:9A:9E:5A:C9:2F:E8:E9:2C:C7:83:09:D5:B3:E9:1C:AB
X509v3 Authority Key Identifier:
keyid:FE:C6:FB:5A:46:79:74:C9:77:A9:97:C6:DD:A1:46:48:05:ED:37:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sb7WkZ5dMl3qZfG3aFGSAXtN58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/5XIyuJqeWskv6Oksx4MJ1bPpHKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/_sb7WkZ5dMl3qZfG3aFGSAXtN58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.123.0/24
Signature Algorithm: sha256WithRSAEncryption
02:0b:32:7a:23:8b:d0:2d:17:ea:6c:68:d2:c1:b1:e6:cc:1c:
a9:09:e4:f1:85:16:05:67:0a:b3:0c:02:ee:dd:8f:ec:2a:c1:
9c:5f:9b:97:eb:3f:29:13:e2:43:16:9b:5b:9e:b6:a3:30:a9:
49:94:7d:6b:40:28:d8:05:54:3e:ce:18:8b:04:04:4e:0f:f1:
83:7a:f9:ef:ed:71:0d:b8:28:de:f9:51:be:48:bf:64:cb:3f:
25:ff:c0:ee:dd:87:5d:75:ce:9e:63:b1:30:ed:87:12:95:56:
01:73:0d:f4:b9:6f:92:51:1d:79:fd:df:44:23:f8:1e:69:17:
e2:43:4f:52:b9:63:26:52:58:b6:0e:cd:81:ff:76:d0:a9:c6:
60:c9:20:ca:ae:00:bb:8e:fd:5f:f5:03:29:30:0f:24:43:a2:
76:98:c3:d5:bb:ea:57:2b:80:b0:a1:1c:41:d1:c6:f8:ce:32:
5e:06:a9:a9:43:9a:34:d2:fb:db:e1:a6:b7:3f:18:c3:cc:d2:
4b:4f:81:91:8e:ce:20:e2:bb:a7:84:fd:98:48:76:28:6f:6f:
73:4d:d5:78:b5:76:f8:1b:e9:d5:58:88:6c:7f:c2:42:9a:72:
91:44:64:f5:2d:a1:aa:4b:6e:f2:59:88:90:55:66:b1:47:c3:
c2:93:df:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:23:11 2025 by rpki-client