Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/5XQ4UlK0LohIDlxYau7mgIjSNL0.roa
File: 5XQ4UlK0LohIDlxYau7mgIjSNL0.roa (raw, json)
Hash identifier: jEDlGAbnIYQO07qJxeOznfNjUq0NQJF7VfK41/vHAHM=
Subject key identifier: E5:74:38:52:52:B4:2E:88:48:0E:5C:58:6A:EE:E6:80:88:D2:34:BD
Certificate issuer: /CN=95a904ac6093e1e229a074c50506ffecda010ccf
Certificate serial: 018570E75A55C47D8DC3E09BCE08AEA285DB
Authority key identifier: 95:A9:04:AC:60:93:E1:E2:29:A0:74:C5:05:06:FF:EC:DA:01:0C:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/5XQ4UlK0LohIDlxYau7mgIjSNL0.roa
Signing time: Mon 02 Jan 2023 05:14:48 +0000
ROA not before: Mon 02 Jan 2023 05:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50689
IP address blocks: 195.210.0.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:5a:55:c4:7d:8d:c3:e0:9b:ce:08:ae:a2:85:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a904ac6093e1e229a074c50506ffecda010ccf
Validity
Not Before: Jan 2 05:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e574385252b42e88480e5c586aeee68088d234bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c8:cf:ca:8f:09:5e:b9:84:ff:86:9b:66:5b:
8e:0f:1b:e5:b4:6d:61:9f:03:16:ce:7d:fa:f7:5e:
fe:5c:d2:bb:66:0c:c9:a8:dc:b0:00:8e:e7:81:62:
be:04:bc:91:92:58:65:e8:09:f5:d1:fe:29:79:e6:
51:b9:6c:32:a5:1f:0b:ec:b8:ac:a2:2e:61:96:0d:
8f:da:8d:97:3e:49:1f:97:da:5d:4d:01:93:4d:d8:
15:1f:23:ec:fe:72:03:af:e8:1e:13:40:36:50:47:
3c:12:8b:5c:f6:b9:cb:a4:d7:48:b1:93:62:ad:38:
dc:79:12:c2:a8:a5:40:a6:05:0d:8c:34:ab:f2:73:
4b:88:a3:6b:98:3c:54:01:47:5d:6f:34:90:8e:60:
59:39:b0:65:ed:c9:93:27:1f:b7:97:1b:2e:46:90:
44:d4:d4:06:93:89:13:ec:3c:8b:a8:59:4f:0e:5a:
6b:58:b6:a6:84:37:32:2b:65:d4:12:72:25:81:aa:
1e:44:45:60:fe:05:41:0e:bb:f3:f5:4a:48:03:48:
78:7a:4c:d1:31:af:96:2c:ac:1a:2f:e1:8d:08:2b:
51:d4:c8:ed:6a:80:4e:a9:2a:b2:63:91:eb:0a:a9:
27:56:3b:cc:23:1c:44:54:fa:c3:ee:e6:4d:4b:d2:
ae:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:74:38:52:52:B4:2E:88:48:0E:5C:58:6A:EE:E6:80:88:D2:34:BD
X509v3 Authority Key Identifier:
keyid:95:A9:04:AC:60:93:E1:E2:29:A0:74:C5:05:06:FF:EC:DA:01:0C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/5XQ4UlK0LohIDlxYau7mgIjSNL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.210.0.0/23
Signature Algorithm: sha256WithRSAEncryption
58:84:2a:35:31:3a:9a:55:23:4b:2e:f2:1c:d6:32:fc:09:2c:
44:41:14:88:86:67:54:f1:04:cb:bc:fb:0a:f2:cd:12:46:4f:
7b:ac:95:98:8b:e6:18:02:93:e4:c9:5c:5d:64:63:d0:17:a8:
ea:28:f4:9c:99:26:22:a9:8d:c0:f2:04:76:7a:c4:dc:90:a6:
37:12:29:12:d2:bb:d1:c5:da:83:9e:86:3d:3c:48:8c:11:36:
80:2f:5d:a7:07:65:1c:c9:f4:48:ff:cf:06:df:72:29:f7:f4:
b5:d1:81:08:9e:81:75:9e:a4:6a:16:40:86:4c:09:a7:99:55:
14:8f:ea:d9:c5:f0:c7:1b:52:e9:98:9c:83:1c:e7:6c:03:eb:
0f:53:fc:6b:98:65:fb:47:34:25:e6:de:79:45:1c:b9:4f:9e:
f2:f2:17:e6:e4:47:cb:91:3e:1d:55:4a:d9:83:40:0b:db:10:
cc:47:e5:f4:b3:7e:b0:c1:3f:0a:be:ae:8b:37:92:ae:db:46:
dd:95:64:2f:df:00:27:dd:9a:42:0e:a5:fe:df:bc:cc:52:cf:
34:1a:be:bd:8c:34:8c:dc:38:da:38:96:7d:4e:d1:97:de:a9:
8d:36:65:50:a1:6b:bc:6a:ab:33:e4:b8:53:4d:27:1b:3f:09:
2d:1f:50:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:19 2025 by rpki-client