Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/5LoIrgUeK12smpsLSXDTY26i6wI.roa
File: 5LoIrgUeK12smpsLSXDTY26i6wI.roa (raw, json)
Hash identifier: Tbsw/4Jzj0GV0QSNLKrQCva5a63qNhXPx9Hd8smMxXE=
Subject key identifier: E4:BA:08:AE:05:1E:2B:5D:AC:9A:9B:0B:49:70:D3:63:6E:A2:EB:02
Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Certificate serial: 44F34437
Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/5LoIrgUeK12smpsLSXDTY26i6wI.roa
Signing time: Thu 26 May 2022 16:05:15 +0000
ROA not before: Thu 26 May 2022 16:05:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203000
IP address blocks: 176.65.255.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1156793399 (0x44f34437)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Validity
Not Before: May 26 16:05:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e4ba08ae051e2b5dac9a9b0b4970d3636ea2eb02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0e:79:a8:6c:46:4b:53:d7:53:dd:a8:90:6b:
37:37:c0:7d:0e:bb:19:29:c7:4c:50:0b:26:1e:2b:
85:97:72:29:28:88:7c:ce:09:7d:75:4f:c9:0c:f3:
0e:15:10:55:57:eb:27:2b:65:af:b7:bc:ac:e1:78:
87:72:ff:47:aa:cf:4c:93:87:a2:30:3d:cc:b9:c0:
3e:67:7e:ad:c4:a7:9d:fb:63:30:01:6e:73:3e:54:
e0:93:35:9d:c6:e8:e8:1a:43:62:32:d5:f2:c7:8c:
6b:81:7e:e0:64:4e:00:ae:be:2f:a1:db:17:54:1e:
75:29:63:d1:7a:62:e5:c1:39:f9:09:b7:a5:b6:4e:
5a:d8:b0:96:15:fc:71:a8:fe:24:c6:f7:1c:d4:3d:
14:d8:8d:85:4f:9f:b3:6c:dc:97:43:87:2e:d7:81:
1b:b6:ee:40:38:4d:59:54:3f:8b:c8:6e:61:40:49:
74:f4:bf:b5:f3:3f:fd:34:b2:04:c4:b0:c3:dc:ac:
9c:d9:e6:e0:6f:57:85:ea:cd:91:dd:64:71:3c:f4:
b1:87:17:32:b8:72:f9:a5:3a:20:f0:41:bd:9e:18:
05:41:28:f6:53:f7:e5:c9:6d:c9:64:9f:30:a0:93:
4d:ed:62:56:a3:62:3a:0c:93:6d:43:d8:84:c7:17:
58:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:BA:08:AE:05:1E:2B:5D:AC:9A:9B:0B:49:70:D3:63:6E:A2:EB:02
X509v3 Authority Key Identifier:
keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/5LoIrgUeK12smpsLSXDTY26i6wI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.65.255.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:01:5c:61:8f:17:a5:40:c9:f1:4e:21:95:ca:d9:4c:86:02:
22:aa:16:3b:57:c0:7a:50:c5:e1:cb:7e:37:c0:55:4c:09:d5:
cd:f4:e5:d1:9f:4d:80:f0:b3:07:e6:ad:2b:3d:57:a7:9f:c4:
be:86:9e:b1:a5:c6:bd:4d:7e:1f:f2:39:71:ca:aa:e9:fc:19:
38:b0:83:9a:eb:9e:8d:36:7d:91:66:f6:18:76:7b:04:2a:16:
d4:18:7b:56:e1:5e:ab:11:c2:44:a1:c4:13:b0:7d:ca:a5:f4:
62:78:37:7b:b2:5e:44:c2:d5:1c:a1:75:af:88:65:aa:d5:a9:
1b:88:97:73:65:7d:16:2f:8a:8d:31:44:84:b8:0d:d9:3c:d1:
10:52:27:66:aa:63:fd:8c:6a:3a:77:18:53:fa:c1:62:4c:23:
f6:c8:19:3c:ab:d8:d3:89:35:94:08:13:bc:95:b2:60:53:fe:
4f:3c:fa:3e:03:2a:a5:97:3b:ee:4f:f4:c9:d2:7a:a5:89:ca:
f1:96:7c:26:a8:c9:d9:03:03:00:7a:2e:f5:4a:40:0e:d2:06:
0d:e7:d5:44:30:98:eb:32:23:e8:df:b7:38:01:4e:df:8a:79:
34:6f:94:95:dc:44:90:30:c3:31:b6:92:e8:1e:04:22:6b:57:
af:c7:20:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:45:37 2025 by rpki-client