Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/5zWH88sLEKW46ITSEg_TAqDvwpM.roa
File: 5zWH88sLEKW46ITSEg_TAqDvwpM.roa (raw, json)
Hash identifier: ENgvr49FSNOnmwWrXS+Csniwg/xw3Sddv+xCyn+yob0=
Subject key identifier: E7:35:87:F3:CB:0B:10:A5:B8:E8:84:D2:12:0F:D3:02:A0:EF:C2:93
Certificate issuer: /CN=4801a5b816158f07a8ca8acb37e97e2f20b06911
Certificate serial: 047EB50C
Authority key identifier: 48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/5zWH88sLEKW46ITSEg_TAqDvwpM.roa
Signing time: Sat 01 Jan 2022 09:02:04 +0000
ROA not before: Sat 01 Jan 2022 09:02:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206388
IP address blocks: 185.186.243.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75412748 (0x47eb50c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4801a5b816158f07a8ca8acb37e97e2f20b06911
Validity
Not Before: Jan 1 09:02:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e73587f3cb0b10a5b8e884d2120fd302a0efc293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9e:c7:ea:d8:a2:4d:db:55:3d:23:2c:c2:a3:
f9:0c:d0:a8:25:52:42:64:81:96:4f:0b:72:a6:b1:
2b:8e:cd:b8:90:f9:eb:ff:af:df:a2:9c:4e:a5:f6:
f4:6a:f7:6a:c0:14:ed:25:1a:5e:ee:0f:da:93:94:
23:c7:5d:97:e7:5e:31:a8:41:87:d7:5f:be:e1:91:
ec:2f:c1:33:20:c0:01:1a:45:c6:66:19:c4:17:0c:
7b:11:aa:b8:94:27:0f:e1:b1:4f:19:e2:38:bf:16:
5c:a9:46:0d:de:4c:27:a3:c1:43:c2:fd:6b:82:4e:
9e:9f:8e:60:ae:82:8d:b4:d2:20:68:6e:61:bf:42:
5e:62:56:f2:8d:8f:40:d2:0a:c9:60:b4:ec:5a:2a:
d0:40:a0:7e:58:8a:47:df:6b:1d:fd:cc:a5:03:94:
2a:89:01:f3:c3:36:4a:d5:94:ea:a6:5f:22:2f:3f:
6d:0f:3a:2c:5d:a4:cc:d0:f5:cd:4e:fd:4f:49:9a:
f8:0b:57:4b:88:a0:98:7d:ee:2a:74:68:71:60:3e:
22:a5:e6:f0:7f:ef:b5:b5:67:cf:a3:b8:64:94:66:
a9:a2:e5:cd:76:b7:2b:14:14:af:67:e4:50:c5:23:
08:e6:44:70:76:1a:6f:24:1f:de:f0:37:e5:53:ee:
cd:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:35:87:F3:CB:0B:10:A5:B8:E8:84:D2:12:0F:D3:02:A0:EF:C2:93
X509v3 Authority Key Identifier:
keyid:48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/5zWH88sLEKW46ITSEg_TAqDvwpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.243.0/24
Signature Algorithm: sha256WithRSAEncryption
93:33:4d:9a:f0:c0:95:8d:5b:48:06:9a:aa:ab:6d:9d:91:35:
0b:b7:91:08:98:10:92:2f:84:84:cf:f4:05:da:3e:09:37:e4:
eb:50:e0:0f:f9:0c:30:60:b9:72:de:8e:83:e8:20:7e:05:77:
33:64:5e:93:01:2f:6f:1a:e7:dd:a4:85:16:9b:f2:39:6e:68:
06:2e:e6:34:4c:66:75:53:f1:4b:97:76:14:4e:24:5c:4d:84:
ed:71:57:83:5f:8b:e5:5f:fe:d9:75:f3:69:6a:da:22:48:ed:
f9:b8:48:5f:eb:d6:05:ac:0b:7c:d5:be:69:52:fd:d1:0a:14:
d5:a1:e0:d8:a6:62:43:97:26:05:43:d2:8c:98:e3:a7:f6:90:
68:62:dd:a7:2a:86:5d:fe:9a:8b:9c:b4:f6:57:92:3d:24:b7:
89:27:28:20:ae:b1:02:c6:b9:0f:06:04:2e:10:af:84:fe:5d:
34:92:44:20:95:1d:b9:15:d7:93:b8:f2:ce:f5:58:4a:46:d5:
80:6a:ef:dd:d1:65:eb:ac:98:4c:50:c7:fa:df:fc:44:49:6d:
cf:3e:2f:a3:3d:f0:6b:3c:3b:a3:75:c6:87:97:5e:8c:ca:4a:
b5:f4:c4:45:de:95:b7:7c:e9:10:36:57:0b:c7:88:20:91:a6:
7e:95:0d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:18:02 2025 by rpki-client