Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/Sn2peOhMHDaRJWgRpffpYPb61Ik.roa
File: Sn2peOhMHDaRJWgRpffpYPb61Ik.roa (raw, json)
Hash identifier: 3+NmJxBXz+kX0ju4zr6T1XUl+ECmwaYfnpQpgQL5fns=
Subject key identifier: 4A:7D:A9:78:E8:4C:1C:36:91:25:68:11:A5:F7:E9:60:F6:FA:D4:89
Certificate issuer: /CN=7e26b1ef7410072ce96e82d7581be436e639a7c4
Certificate serial: 05BE9DBC
Authority key identifier: 7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/Sn2peOhMHDaRJWgRpffpYPb61Ik.roa
Signing time: Sat 01 Jan 2022 12:03:46 +0000
ROA not before: Sat 01 Jan 2022 12:03:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42745
IP address blocks: 5.252.32.0/24 maxlen: 24
5.252.34.0/24 maxlen: 24
5.252.35.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96378300 (0x5be9dbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e26b1ef7410072ce96e82d7581be436e639a7c4
Validity
Not Before: Jan 1 12:03:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a7da978e84c1c3691256811a5f7e960f6fad489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:65:fa:0e:0b:78:8a:bf:d6:cd:fa:99:21:b7:
47:13:a6:c9:e0:49:f9:35:a8:ea:3e:2c:fc:d0:b8:
e7:08:43:b7:6a:25:15:15:d0:81:cd:63:07:98:70:
bf:c3:da:0f:1b:0e:95:3b:0c:69:32:33:5a:11:22:
db:15:86:7a:4a:1e:99:73:a1:17:94:87:26:7d:75:
9d:db:35:7a:df:84:35:cb:46:a9:e3:a2:ab:c8:87:
43:9a:35:21:ac:94:e3:5a:75:d2:f5:f7:ff:06:6e:
28:77:16:9a:8e:cc:4d:1f:3f:81:a6:c7:d8:25:f1:
cf:09:63:e2:2e:be:8e:52:98:d9:b5:57:06:53:43:
1e:9d:b6:0f:c7:08:ec:df:8a:e5:41:32:f6:be:6c:
6b:f8:cb:8c:d9:d2:82:82:31:4d:6e:d6:96:7c:4e:
b5:f3:31:cd:00:fa:72:c3:ba:99:e9:3b:a6:8f:fc:
78:73:2b:8e:61:ea:36:af:38:a2:0f:57:f3:e6:d5:
9a:ab:b7:e9:41:cd:2d:75:8b:75:79:60:76:89:c2:
cf:ad:f5:ac:32:c4:a7:74:cf:86:fb:32:dc:d3:e3:
78:30:c1:b0:4a:48:c4:87:72:a1:f6:95:15:01:21:
50:09:65:2d:6b:e7:56:18:a9:31:6a:45:14:9d:6e:
17:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:7D:A9:78:E8:4C:1C:36:91:25:68:11:A5:F7:E9:60:F6:FA:D4:89
X509v3 Authority Key Identifier:
keyid:7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/Sn2peOhMHDaRJWgRpffpYPb61Ik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.32.0/24
5.252.34.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:f2:81:ee:85:d1:ad:41:ec:c5:fd:ea:b1:5b:d2:31:c9:69:
0e:58:f2:b6:9a:81:a7:c4:46:05:c6:2c:f4:a2:af:f6:5f:07:
75:e4:3b:cb:7f:8a:51:48:db:8e:b7:fc:8b:6c:f0:45:50:5f:
eb:04:12:77:71:bd:78:69:42:46:e8:c6:21:c4:53:c6:4e:14:
f9:67:e3:88:eb:60:e2:ee:1c:fd:58:0a:8a:04:ed:b5:23:2d:
a9:64:ea:d8:c0:b1:37:b5:a4:16:cf:b4:a7:2a:f8:5d:04:ef:
56:6b:f2:a5:10:85:cd:4e:82:e2:be:5b:9f:64:5d:c9:3b:f4:
ad:76:51:85:6a:6f:db:a6:f0:cd:70:fa:b4:8f:63:ad:a5:8d:
22:fe:cc:40:0d:f2:80:45:83:08:a3:d0:55:83:93:3c:9c:a0:
55:9f:3e:b1:4e:b9:9a:ad:38:90:a8:aa:22:ed:c0:9e:f8:19:
f4:e4:74:ef:87:16:85:77:95:c5:ee:0a:af:8e:89:37:aa:6a:
d2:20:e7:53:83:41:6e:4d:7e:71:00:6e:e5:21:da:c3:ab:0a:
a9:80:7c:3c:d8:21:0f:8c:ab:3f:38:4e:b6:39:78:fd:29:bd:
0c:4d:b4:ae:19:07:84:9f:ab:b8:8a:79:a0:32:a6:9f:39:a1:
61:87:4b:6a
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEBb6dvDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
ZTI2YjFlZjc0MTAwNzJjZTk2ZTgyZDc1ODFiZTQzNmU2MzlhN2M0MB4XDTIyMDEw
MTEyMDM0NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGE3ZGE5NzhlODRj
MWMzNjkxMjU2ODExYTVmN2U5NjBmNmZhZDQ4OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKll+g4LeIq/1s36mSG3RxOmyeBJ+TWo6j4s/NC45whDt2ol
FRXQgc1jB5hwv8PaDxsOlTsMaTIzWhEi2xWGekoemXOhF5SHJn11nds1et+ENctG
qeOiq8iHQ5o1IayU41p10vX3/wZuKHcWmo7MTR8/gabH2CXxzwlj4i6+jlKY2bVX
BlNDHp22D8cI7N+K5UEy9r5sa/jLjNnSgoIxTW7WlnxOtfMxzQD6csO6mek7po/8
eHMrjmHqNq84og9X8+bVmqu36UHNLXWLdXlgdonCz631rDLEp3TPhvsy3NPjeDDB
sEpIxIdyofaVFQEhUAllLWvnVhipMWpFFJ1uF0sCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBRKfal46EwcNpElaBGl9+lg9vrUiTAfBgNVHSMEGDAWgBR+JrHvdBAHLOlu
gtdYG+Q25jmnxDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2ZpYXg3M1FRQnl6cGJvTFhXQnZrTnVZNXA4US5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWUvY2FjNjNjLTU1ZTUtNDE1NC04ODc2LThjMzJjMzUxZWU3MC8x
L1NuMnBlT2hNSERhUkpXZ1JwZmZwWVBiNjFJay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWUv
Y2FjNjNjLTU1ZTUtNDE1NC04ODc2LThjMzJjMzUxZWU3MC8xL2ZpYXg3M1FRQnl6
cGJvTFhXQnZrTnVZNXA4US5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAAX8IAMEAQX8IjANBgkqhkiG9w0B
AQsFAAOCAQEAP/KB7oXRrUHsxf3qsVvSMclpDljytpqBp8RGBcYs9KKv9l8HdeQ7
y3+KUUjbjrf8i2zwRVBf6wQSd3G9eGlCRujGIcRTxk4U+WfjiOtg4u4c/VgKigTt
tSMtqWTq2MCxN7WkFs+0pyr4XQTvVmvypRCFzU6C4r5bn2RdyTv0rXZRhWpv26bw
zXD6tI9jraWNIv7MQA3ygEWDCKPQVYOTPJygVZ8+sU65mq04kKiqIu3AnvgZ9OR0
74cWhXeVxe4Kr46JN6pq0iDnU4NBbk1+cQBu5SHaw6sKqYB8PNghD4yrPzhOtjl4
/Sm9DE20rhkHhJ+ruIp5oDKmnzmhYYdLag==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:23 2025 by rpki-client