Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/EHuxJl9nCzc31X2lRsSFiUiz8Xw.roa
File: EHuxJl9nCzc31X2lRsSFiUiz8Xw.roa (raw, json)
Hash identifier: YxBwZCfQY6xDObJPXlITmoBfGrlVHYtq2MD6/997IOw=
Subject key identifier: 10:7B:B1:26:5F:67:0B:37:37:D5:7D:A5:46:C4:85:89:48:B3:F1:7C
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01856E8B4803F35557D2AB0D50BF49378097
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/EHuxJl9nCzc31X2lRsSFiUiz8Xw.roa
Signing time: Sun 01 Jan 2023 18:14:59 +0000
ROA not before: Sun 01 Jan 2023 18:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48678
IP address blocks: 5.180.49.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:48:03:f3:55:57:d2:ab:0d:50:bf:49:37:80:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 18:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=107bb1265f670b3737d57da546c4858948b3f17c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ec:a7:27:28:c6:36:f5:da:3b:5e:00:c2:9c:
6f:10:24:c0:ed:d9:d4:94:0d:c9:6a:6f:b1:31:2c:
ce:30:98:68:ef:0f:ae:df:07:39:80:04:0c:0d:8f:
47:47:d0:5c:1a:d9:1a:a3:61:e4:bf:ab:7b:74:41:
d9:7c:08:16:50:e8:24:fa:f1:b3:2a:b6:9c:dc:61:
3f:b9:79:1c:8a:37:6e:8e:f1:d8:46:15:e0:67:50:
f2:78:cb:20:da:b4:59:6e:91:7d:86:9d:c9:64:32:
83:10:6d:1d:1c:9b:02:1e:02:cd:f9:eb:09:e6:48:
72:d4:6d:7d:fb:b0:90:03:7b:95:14:d1:b1:ae:e1:
46:b7:85:f6:09:34:08:3d:b6:4d:1d:05:d5:5f:ad:
60:de:cc:82:54:8a:a2:e4:ae:32:9a:e3:6d:4f:f0:
9e:45:f8:f1:60:d8:5c:a5:e4:0e:3b:2b:fd:cd:3a:
e1:23:f3:34:b9:2b:9a:4c:a5:dc:2b:d5:25:ad:ff:
6f:b4:a5:ab:b0:7f:b9:80:6e:29:8d:21:60:16:e1:
c5:4f:fe:26:05:11:8c:45:2f:6b:55:d8:07:e6:32:
bf:3f:cc:35:53:52:fe:79:64:68:97:98:52:8c:3a:
90:f1:6a:84:9d:e7:2e:d2:ae:ae:94:33:76:93:af:
93:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:7B:B1:26:5F:67:0B:37:37:D5:7D:A5:46:C4:85:89:48:B3:F1:7C
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/EHuxJl9nCzc31X2lRsSFiUiz8Xw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.49.0/24
Signature Algorithm: sha256WithRSAEncryption
85:e4:42:93:d5:a6:3b:4c:e6:97:89:88:5a:19:89:d4:44:01:
8a:9f:58:a2:a6:e2:22:2c:be:77:25:af:5d:48:06:f7:39:32:
2f:5b:20:9c:99:03:54:79:41:d8:91:75:5d:aa:ba:dc:a0:af:
6d:6b:5e:89:c3:7c:ea:0a:d5:79:79:36:e2:db:2c:41:e4:01:
88:e5:b3:94:9e:ab:09:5a:4d:94:6c:ea:5c:d9:3e:07:ed:44:
b0:b5:0d:ca:39:9d:f4:4f:fc:cd:86:b0:d6:f6:60:56:4d:b2:
ca:aa:ee:12:d0:9d:9a:14:a6:b8:fe:b4:fc:f3:fa:80:ca:92:
9f:e6:06:39:0a:45:d5:d0:11:b7:f5:4b:32:7e:cd:3d:92:a1:
c0:cd:8c:c5:db:b7:6b:0d:ad:52:ab:8b:77:b3:24:c2:6c:c2:
86:b3:c0:07:99:63:f3:c6:5a:64:94:9d:f2:21:6b:38:80:e7:
5c:b6:84:2c:1f:02:b9:65:c4:90:ee:df:1e:41:6c:2a:f1:3c:
1d:59:db:e6:b7:8f:04:52:f2:dd:07:5e:b8:62:14:9c:7d:bc:
98:29:10:30:82:38:17:b0:a6:73:02:9c:90:c4:31:ff:69:cc:
8b:cb:89:ca:9d:ec:fc:b4:56:7f:1c:97:a2:52:10:f5:ad:4b:
1d:7c:b7:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:18:27 2025 by rpki-client