Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/i05SfhBLTYwRpyCnCFxl9j4CS_s.roa
File: i05SfhBLTYwRpyCnCFxl9j4CS_s.roa (raw, json)
Hash identifier: 4QEZNCDHMs7n3EQeNJYaHM36eb+ZoTCidEO4CJeJK+4=
Subject key identifier: 8B:4E:52:7E:10:4B:4D:8C:11:A7:20:A7:08:5C:65:F6:3E:02:4B:FB
Certificate issuer: /CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485
Certificate serial: 790875
Authority key identifier: 5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/i05SfhBLTYwRpyCnCFxl9j4CS_s.roa
Signing time: Sat 01 Jan 2022 01:57:15 +0000
ROA not before: Sat 01 Jan 2022 01:57:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42855
IP address blocks: 84.54.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7932021 (0x790875)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485
Validity
Not Before: Jan 1 01:57:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b4e527e104b4d8c11a720a7085c65f63e024bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ab:3e:dc:4f:7f:2f:e8:f3:57:fa:3d:5f:f0:
fe:c8:5b:a1:24:6d:f8:14:5d:05:cf:af:b2:4c:f0:
74:d8:e6:84:e9:5d:ec:1f:e1:38:2a:a2:25:88:43:
a0:b3:e3:94:48:9b:e5:0a:81:74:f4:25:e9:88:18:
a9:68:48:6c:f5:0e:78:76:04:dc:15:62:41:57:6b:
4c:c8:6f:c9:47:1c:1f:a2:e2:57:d6:b4:52:b1:ab:
cc:0f:ad:c6:aa:e9:f9:c1:82:83:6b:dc:75:75:4c:
79:e9:2e:2d:83:72:20:75:ef:55:af:28:e5:05:bf:
a5:df:14:8b:42:73:44:c8:d5:27:65:49:f4:f9:db:
ff:c5:c3:e3:99:8b:4f:3c:d8:01:bb:c6:20:4d:b8:
f1:cc:89:51:34:3b:65:88:26:d5:22:4e:7d:51:45:
2f:e1:70:aa:ce:8c:16:e2:67:09:0d:e4:4d:8b:ea:
81:75:95:60:c0:2e:63:c8:54:60:93:99:99:87:8f:
e5:c7:69:74:3b:3e:65:d0:89:86:c7:84:7a:3a:6c:
3b:2c:75:37:77:46:e2:95:85:d8:67:d1:62:c0:7d:
7a:ba:43:af:aa:d4:3f:d1:71:7d:94:ca:5d:35:32:
ef:c0:a3:0b:dc:0d:ea:4d:92:24:c1:a9:da:95:89:
0e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:4E:52:7E:10:4B:4D:8C:11:A7:20:A7:08:5C:65:F6:3E:02:4B:FB
X509v3 Authority Key Identifier:
keyid:5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/i05SfhBLTYwRpyCnCFxl9j4CS_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.184.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:db:27:b6:1c:ed:b7:03:c1:84:22:cc:6f:94:03:32:f0:1d:
64:c6:cb:1d:d3:c5:89:ae:b9:28:62:f9:14:51:9d:3f:96:be:
24:b7:80:0c:9d:73:11:23:8e:83:33:00:90:36:68:75:c0:ed:
16:3a:d0:3c:51:b3:3b:49:e0:0d:3d:10:ab:4e:8f:43:34:4c:
2c:a0:7a:e9:06:a0:54:4e:61:ac:49:8d:4d:3e:7f:47:31:da:
ec:2a:8e:3e:7b:0f:71:ed:78:95:2a:5d:de:76:bd:5c:d6:eb:
e8:c7:60:14:aa:e5:a3:7a:8e:23:75:d1:50:6e:32:9d:3c:50:
e9:a0:7b:70:cf:d7:4b:f2:38:20:bc:ab:18:8d:2c:3b:04:25:
43:13:9f:1c:91:af:1f:c8:1a:d1:e2:ba:24:aa:33:17:80:61:
71:7f:4c:ac:4b:95:e1:d5:2c:62:cc:ad:b8:47:ba:10:2e:0e:
e7:70:a6:9c:5f:eb:73:d1:ee:27:92:f5:3f:ef:1f:34:88:3c:
ed:4b:6b:ea:56:ab:d8:e4:88:b8:3f:13:30:4b:fa:29:48:0e:
ac:be:eb:c5:b5:8e:40:a5:be:0b:72:d4:4b:65:26:ba:8d:84:
29:1d:8e:18:49:ea:1d:42:95:37:1e:2e:3a:86:02:19:55:85:
eb:f9:71:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:02 2025 by rpki-client