Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/056RA_agtdf1EzzGo8bh4to-TD4.roa
File: 056RA_agtdf1EzzGo8bh4to-TD4.roa (raw, json)
Hash identifier: Jh5ui/RWq/EH0vqmWzDU5R6OshIz7KbtqFZJoBMQihs=
Subject key identifier: D3:9E:91:03:F6:A0:B5:D7:F5:13:3C:C6:A3:C6:E1:E2:DA:3E:4C:3E
Certificate issuer: /CN=a2f516bf42214086db39847f9f563b4cf4a0ff43
Certificate serial: 0185729EE4A00C0700AAD092C2AD6FC54B30
Authority key identifier: A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/056RA_agtdf1EzzGo8bh4to-TD4.roa
Signing time: Mon 02 Jan 2023 13:14:53 +0000
ROA not before: Mon 02 Jan 2023 13:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5610
IP address blocks: 195.5.186.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9e:e4:a0:0c:07:00:aa:d0:92:c2:ad:6f:c5:4b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2f516bf42214086db39847f9f563b4cf4a0ff43
Validity
Not Before: Jan 2 13:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d39e9103f6a0b5d7f5133cc6a3c6e1e2da3e4c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:66:d2:29:fe:80:f9:58:eb:19:b7:7a:96:90:
64:9f:65:1c:75:37:85:9f:56:e9:c4:a0:10:72:06:
89:50:ae:06:28:1e:ba:01:a4:8f:78:82:5c:2c:79:
a7:4a:e4:a7:36:91:7c:0a:1b:fc:3f:a6:3b:e3:3c:
63:43:17:de:5c:bf:6a:4b:fa:9a:e3:d8:6a:41:5b:
78:0e:78:9a:9b:58:f7:4c:43:3e:5e:c8:b2:9a:d3:
b2:72:a2:4a:97:95:40:30:05:9a:f0:17:60:e8:c1:
48:c2:be:9e:8d:e3:17:c1:77:6c:6a:2c:48:44:42:
85:95:61:22:a6:46:fb:b4:de:5c:e5:20:ca:76:26:
ca:16:92:e2:83:ab:62:fb:25:03:f4:1d:94:be:46:
be:ce:3a:e2:04:82:a7:b4:88:36:b5:ac:8d:09:0c:
7e:80:77:4b:7c:8a:6f:5e:56:1b:fe:c8:b2:41:c5:
41:78:cb:e9:92:d2:02:ad:c4:24:b0:56:75:be:2c:
83:1e:19:75:6d:9c:96:46:aa:f2:a7:33:9a:ec:9b:
b6:5e:6e:de:80:c3:3f:dd:b0:37:d8:53:a2:bd:c3:
cc:d5:ba:b5:8e:f2:aa:aa:69:78:3e:4a:6d:47:82:
5a:3c:a0:6d:e6:be:8b:af:0f:e4:a0:15:0d:f5:37:
1b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:9E:91:03:F6:A0:B5:D7:F5:13:3C:C6:A3:C6:E1:E2:DA:3E:4C:3E
X509v3 Authority Key Identifier:
keyid:A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/056RA_agtdf1EzzGo8bh4to-TD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.5.186.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:e7:3b:fe:34:83:a2:34:05:6b:ce:95:74:bd:eb:5e:ba:21:
1c:21:74:b9:a0:d1:b1:2d:01:9c:d9:ab:75:f4:b7:7a:94:3b:
a5:df:8c:4d:c6:3a:75:7e:3f:1a:be:df:d2:d9:30:53:b4:8f:
53:2d:63:7d:eb:ca:45:3f:c3:ed:c2:ea:e4:69:5c:5f:ad:72:
98:64:10:74:c3:30:0c:d6:a4:fa:ff:61:32:80:05:ce:23:9c:
24:69:b7:d7:09:a0:50:61:dc:e4:96:92:3d:d4:01:ec:38:bb:
4f:b7:bc:f6:5f:9e:68:e7:08:80:81:63:a6:e0:e1:81:ca:9b:
96:58:93:22:16:c5:bc:a7:ee:2a:4d:49:fa:0e:77:68:47:44:
c4:a5:9d:f0:e6:43:7b:6c:5a:60:8e:72:74:f9:86:3e:49:32:
b7:ef:d0:0b:5b:e9:2b:21:95:ea:f7:10:8b:fa:53:bf:bf:80:
17:36:5d:bb:68:d0:d1:60:b4:c6:b9:04:b8:f2:a6:2c:bd:97:
7a:dc:64:05:67:fd:23:37:86:44:11:9e:4b:c1:57:62:03:66:
c7:ef:46:2d:92:39:cb:56:0e:34:7f:54:80:21:12:ed:41:ce:
75:13:cc:8e:7a:b7:b5:bd:85:78:6c:59:85:2d:d9:76:85:09:
27:58:49:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:55 2025 by rpki-client