Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/1-iMA183mwFnaf_qnt9MpHs6M_No.roa
File: 1-iMA183mwFnaf_qnt9MpHs6M_No.roa (raw, json)
Hash identifier: ZwT1TrFrPGKsPeOnF2PVqx+/1t5U4aBQD2LBLRejW3M=
Subject key identifier: FA:23:00:D7:CD:E6:C0:59:DA:7F:FA:A7:B7:D3:29:1E:CE:8C:FC:DA
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018878891D7B364FDD4443245E39EA93C0D9
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/1-iMA183mwFnaf_qnt9MpHs6M_No.roa
Signing time: Thu 01 Jun 2023 19:57:11 +0000
ROA not before: Thu 01 Jun 2023 19:57:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398465
IP address blocks: 5.180.82.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:78:89:1d:7b:36:4f:dd:44:43:24:5e:39:ea:93:c0:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jun 1 19:57:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa2300d7cde6c059da7ffaa7b7d3291ece8cfcda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:10:4e:36:f2:7b:f8:33:69:e6:78:38:ff:f7:
1a:9d:d1:e9:e8:45:99:58:e1:bf:73:09:da:e2:ee:
55:90:64:3d:bd:a0:d6:48:87:e8:0f:08:91:5f:d1:
09:72:26:83:02:c3:ce:1c:7c:2e:0f:26:5a:e2:e1:
e8:ea:c4:90:dd:31:0e:1f:61:31:01:3f:66:3e:c7:
fa:04:1f:61:27:17:d8:5f:02:1f:68:8f:20:73:5d:
8e:14:13:eb:29:65:b3:9e:47:ee:de:44:17:ea:34:
f2:f9:46:ce:6c:b0:c0:f4:4f:cb:84:be:d7:90:e6:
71:11:35:f7:75:9e:39:eb:1c:a5:98:f8:9c:28:b4:
fa:69:d3:c7:7e:53:f2:c8:44:40:cf:97:16:f6:54:
ce:88:b4:b6:ae:2b:fe:5b:74:ce:63:75:f5:cb:36:
a5:49:d9:2d:13:76:f8:43:d0:e8:ca:bc:bd:97:23:
3d:47:66:df:93:2c:a1:c3:be:dc:0a:e6:3e:30:3a:
1c:ab:21:e6:ce:b2:d5:b7:f7:fa:e0:20:12:f8:c5:
84:2d:e0:f8:2f:3d:8d:ef:e1:59:22:2c:df:a7:0f:
1a:21:04:03:1b:1e:a7:dd:3b:ac:e8:bc:12:0d:55:
e6:96:5b:01:24:f4:03:0c:ab:50:13:02:58:54:55:
40:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:23:00:D7:CD:E6:C0:59:DA:7F:FA:A7:B7:D3:29:1E:CE:8C:FC:DA
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/1-iMA183mwFnaf_qnt9MpHs6M_No.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.82.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:a0:af:91:f1:72:38:4c:60:c0:85:ef:41:6e:3d:8f:b9:7a:
0b:93:51:af:f8:f2:fc:ed:db:7d:22:5f:6b:5c:70:4e:a9:04:
33:c2:a6:8c:b7:bc:4e:1f:bf:ce:f5:06:34:b9:8d:b8:0a:fd:
50:5a:d5:13:b8:f8:4c:a1:d4:10:bf:52:20:5d:35:b6:f7:c0:
4b:55:92:07:25:87:bb:3e:28:83:c9:35:b2:85:f1:10:74:96:
15:3d:4f:cf:83:7c:11:da:af:01:88:7d:be:c6:59:aa:69:16:
64:5c:3a:c5:ae:26:11:81:88:3f:f0:9e:27:dc:6b:4f:ec:33:
f0:b0:e7:75:51:5d:0f:a8:54:be:28:68:77:c0:4d:cb:88:b2:
02:dc:c6:84:df:42:ec:22:b2:74:ae:7c:19:56:77:59:5f:71:
af:5a:13:61:30:38:f6:80:ed:e4:8a:73:d4:b2:0f:0c:b8:27:
ed:36:a3:ce:d1:9f:8b:ff:83:7e:80:46:88:ea:78:50:24:8f:
e0:35:d7:62:0f:80:ef:9c:6a:8c:6c:c5:b2:1b:2c:06:6a:42:
25:80:19:a5:b6:dd:76:88:a3:2a:44:ff:ad:cf:56:f4:76:ff:
a9:63:97:8f:cc:dd:d1:6b:b0:dc:5e:3a:eb:5c:16:32:e5:39:
5c:30:e4:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:11 2025 by rpki-client