Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/5SldUeZZyx7SF91EnjCZ0OKzSX4.roa
File: 5SldUeZZyx7SF91EnjCZ0OKzSX4.roa (raw, json)
Hash identifier: ab6nPcIFpkvflTTCxz42HUFcjV3fHHAD94TC68+ijYc=
Subject key identifier: E5:29:5D:51:E6:59:CB:1E:D2:17:DD:44:9E:30:99:D0:E2:B3:49:7E
Certificate issuer: /CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Certificate serial: 018BD2AA9805B683534814644D29884EDF15
Authority key identifier: 37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/5SldUeZZyx7SF91EnjCZ0OKzSX4.roa
Signing time: Wed 15 Nov 2023 11:07:57 +0000
ROA not before: Wed 15 Nov 2023 11:07:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48883
IP address blocks: 2a0e:46c4:1400::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d2:aa:98:05:b6:83:53:48:14:64:4d:29:88:4e:df:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Validity
Not Before: Nov 15 11:07:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e5295d51e659cb1ed217dd449e3099d0e2b3497e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:05:7c:93:15:96:cd:70:90:cf:f3:59:ae:8b:
ea:01:0d:6c:71:51:7f:6f:c7:87:17:05:5e:61:01:
c7:67:d9:9e:2d:b0:2f:0f:44:b7:ce:4b:da:ca:1e:
1d:bb:37:a0:11:4c:9b:1c:0d:95:2b:4a:1b:37:eb:
b8:97:e1:79:e9:0c:95:78:88:f8:61:65:c0:94:02:
91:70:ce:0a:64:d3:d7:a6:bd:2e:ab:73:b2:84:49:
ee:09:0c:61:73:8e:38:36:de:ec:1f:3f:bb:55:0b:
ea:17:86:6d:9e:68:56:d3:25:93:20:b2:0a:5f:7b:
2c:04:ab:0d:26:c7:55:c0:12:ce:e0:25:a3:65:9e:
be:9e:20:ae:a0:7f:39:98:9c:f9:7c:6b:9f:f1:1c:
bb:18:0d:ce:aa:3d:29:c1:1b:25:7c:c8:87:86:9b:
ac:87:07:e2:a2:ce:1d:92:29:90:49:d3:15:d6:53:
b6:5f:4c:d0:40:34:c7:90:eb:37:32:34:dc:89:31:
52:ef:e0:db:3e:45:f7:53:0a:2c:db:2c:0c:f6:35:
2f:72:f6:d5:c5:45:e0:ed:15:a9:0b:56:31:65:06:
bc:fd:4e:b8:84:12:f2:33:a9:88:5b:d1:9d:42:6b:
a9:41:ca:16:86:17:a8:f3:67:b6:91:6c:b1:ea:57:
39:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:29:5D:51:E6:59:CB:1E:D2:17:DD:44:9E:30:99:D0:E2:B3:49:7E
X509v3 Authority Key Identifier:
keyid:37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/5SldUeZZyx7SF91EnjCZ0OKzSX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:46c4:1400::/40
Signature Algorithm: sha256WithRSAEncryption
9d:06:75:6a:53:33:0a:71:88:3e:d1:7e:b8:95:7a:c2:bf:44:
cc:93:ba:fe:9e:0c:f0:82:02:29:ea:43:5c:18:c7:3e:6c:89:
ce:ad:21:a2:1f:6a:7c:85:14:78:14:b0:e9:eb:eb:11:f1:ca:
6f:69:af:47:8d:88:b5:5a:9d:35:75:ca:92:83:1b:e2:17:21:
b9:52:0a:75:bd:d1:43:7b:0d:4e:c2:06:a2:ed:e1:ce:87:cd:
ad:5c:9c:e6:49:8e:2c:db:3b:86:9a:71:f2:60:ca:f5:13:08:
72:0b:d0:40:36:00:45:3e:39:39:9b:e6:31:b1:86:18:0c:04:
1d:b0:ca:b2:29:cf:66:85:53:68:5d:50:47:d5:3b:e6:ac:fc:
3c:4f:1d:57:a8:c3:ed:3e:01:4e:18:21:0c:33:e6:31:0d:e8:
af:fa:07:c4:07:56:6f:41:d6:87:b0:91:49:78:7b:4f:ef:41:
e7:1a:06:1d:2d:1a:0d:cb:ab:0d:a3:72:e7:40:6f:c5:d2:df:
ae:3e:d4:41:f7:46:36:6e:52:fa:22:33:46:eb:3a:96:b6:44:
4e:73:ca:43:69:1b:99:4f:1f:8c:32:ad:f4:b5:0f:18:15:66:
9e:3e:de:45:05:40:e3:f1:fe:13:17:73:cf:8d:8b:49:cf:9c:
3e:60:be:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:25 2025 by rpki-client