Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/iM0g0Mx5pCUXARCjOMKc8Z4vWKU.roa
File: iM0g0Mx5pCUXARCjOMKc8Z4vWKU.roa (raw, json)
Hash identifier: H32Hw9LXSE6KihIfvwh36HpDLemf3e1UwAscgCiLGaA=
Subject key identifier: 88:CD:20:D0:CC:79:A4:25:17:01:10:A3:38:C2:9C:F1:9E:2F:58:A5
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01856E8B405AE8C0E0E3D91752EC6B1E25AF
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/iM0g0Mx5pCUXARCjOMKc8Z4vWKU.roa
Signing time: Sun 01 Jan 2023 18:14:57 +0000
ROA not before: Sun 01 Jan 2023 18:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6939
IP address blocks: 5.180.83.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:40:5a:e8:c0:e0:e3:d9:17:52:ec:6b:1e:25:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 18:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88cd20d0cc79a425170110a338c29cf19e2f58a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:dc:17:40:13:07:a7:30:c5:5e:17:e9:21:ac:
1c:59:95:fc:c8:06:c3:a1:6e:57:70:8f:d1:42:bb:
e2:91:7d:45:a7:a3:9a:d3:1c:c0:65:06:6b:82:d1:
be:16:76:80:68:b8:9e:99:35:d0:ef:8f:dd:95:d0:
a5:7a:04:80:a3:c4:2f:a4:57:29:6d:25:dc:d9:b0:
0a:9e:d6:ca:a5:68:aa:69:47:18:50:bb:b5:63:7f:
15:c0:3c:2f:70:6a:47:14:28:a9:23:68:a6:40:e5:
db:68:aa:81:c1:7f:3f:22:83:80:dd:06:43:69:89:
02:84:81:5d:13:f5:89:c3:b3:85:74:f1:a8:ee:4a:
aa:68:9d:b2:b4:b4:61:e5:eb:8c:42:52:3e:cf:14:
77:b1:39:f1:5a:d4:89:2b:0d:65:2c:41:24:f6:16:
ec:e9:64:70:8e:89:e9:53:ce:0d:81:15:dc:62:c9:
43:1b:38:ac:1e:3b:c8:09:16:f8:58:2d:cd:65:a2:
df:f5:d9:c8:0d:68:aa:4a:61:cf:85:ae:b1:cc:33:
33:69:3c:3f:f3:33:74:db:80:14:be:03:53:b4:12:
7f:d2:70:cf:f1:ba:05:93:e9:a4:45:b8:d4:f3:b6:
94:69:eb:86:24:5a:c5:99:48:53:f4:96:97:c4:0d:
97:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:CD:20:D0:CC:79:A4:25:17:01:10:A3:38:C2:9C:F1:9E:2F:58:A5
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/iM0g0Mx5pCUXARCjOMKc8Z4vWKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.83.0/24
Signature Algorithm: sha256WithRSAEncryption
be:9d:f3:b5:ab:bf:c9:ee:0a:2f:b8:57:3a:9a:9c:b4:4a:ae:
a4:cc:4e:e2:01:f2:6d:3f:4e:f5:20:04:04:df:7e:a3:cb:de:
12:ca:e8:97:b3:f2:8a:74:cd:c6:97:f7:e6:45:73:5f:0d:ef:
1d:67:41:a9:c1:cb:da:be:5c:e4:74:e2:31:b3:2e:71:e1:bc:
1c:1d:ef:d1:1a:fe:9f:5f:17:4c:2d:eb:26:3c:6f:eb:b9:aa:
70:9e:3a:7a:20:a6:6d:04:90:ed:48:7b:4f:af:da:dd:95:bc:
66:2a:e4:71:2a:ce:87:5a:bb:f7:dc:9f:f8:80:d3:9f:8f:c9:
81:a6:a5:78:5c:b7:a4:fa:53:91:7d:e8:5b:8d:32:1f:4b:63:
19:66:d7:cf:0d:82:70:e3:25:d6:ba:ef:a8:a2:77:8d:0c:1d:
6a:9b:6e:74:60:33:af:93:2b:7b:d7:6e:0a:b4:a4:ba:1e:6b:
4d:77:53:5a:18:69:6c:f1:5e:41:09:1a:16:c8:4d:0b:db:92:
f2:f6:4d:aa:a0:5a:6b:5d:c7:11:42:59:90:de:f7:39:28:92:
d2:08:32:67:cd:cc:c9:74:28:74:7f:82:7f:7e:e5:91:de:4d:
80:30:12:31:18:df:90:b0:70:d8:24:a3:ab:1f:e7:38:60:ff:
0d:e3:fa:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:34:47 2025 by rpki-client