Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/KAxs6vjnnESbj294U7WlVtJgZAw.roa
File: KAxs6vjnnESbj294U7WlVtJgZAw.roa (raw, json)
Hash identifier: HhmWwY02/TXoDCkQim3pNlN5AGC1yr1n2WtUhqXJ3jw=
Subject key identifier: 28:0C:6C:EA:F8:E7:9C:44:9B:8F:6F:78:53:B5:A5:56:D2:60:64:0C
Certificate issuer: /CN=a952d0d266557385836aab7ae3fdced4ca74ad89
Certificate serial: 018859F4A72878614AAB4908DB5730F27CA5
Authority key identifier: A9:52:D0:D2:66:55:73:85:83:6A:AB:7A:E3:FD:CE:D4:CA:74:AD:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/KAxs6vjnnESbj294U7WlVtJgZAw.roa
Signing time: Fri 26 May 2023 21:26:25 +0000
ROA not before: Fri 26 May 2023 21:26:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61424
IP address blocks: 5.35.103.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:59:f4:a7:28:78:61:4a:ab:49:08:db:57:30:f2:7c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a952d0d266557385836aab7ae3fdced4ca74ad89
Validity
Not Before: May 26 21:26:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=280c6ceaf8e79c449b8f6f7853b5a556d260640c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fb:87:08:a8:ae:74:d9:45:c7:d8:9a:b8:7c:
d9:1e:dc:e8:02:47:7f:b0:a4:11:9c:fd:0b:df:11:
13:56:67:63:fc:3d:ae:4a:1e:c2:82:da:41:ed:53:
f2:ef:36:a7:97:94:4d:1f:1c:22:32:75:45:db:c0:
10:62:b1:9d:86:13:b4:c3:45:8e:a9:6a:da:44:6f:
be:7a:1e:70:59:ea:44:69:42:4e:67:0f:c7:44:3c:
16:e8:46:ac:90:02:e3:32:65:76:8b:ed:45:5c:b1:
48:22:34:4d:b4:4c:30:09:18:60:e2:bf:80:e9:57:
d4:72:c7:66:18:62:96:62:35:27:35:4e:12:77:73:
04:63:ca:8a:c9:24:26:f9:ed:2e:ed:64:6e:aa:dd:
2b:4b:d7:4b:a8:50:0c:0a:6d:a9:90:be:66:05:4d:
42:c0:21:6a:02:61:87:fc:04:5a:2a:6d:c6:ca:07:
58:b1:f4:33:e4:f6:a0:0d:7b:5a:94:9a:3c:0f:6a:
fe:56:ba:53:d4:d3:6c:e5:b9:dd:71:fc:40:4f:31:
0f:d4:37:62:f7:46:76:8e:68:c6:50:2a:1d:21:c6:
2b:c1:fa:d7:84:1c:45:30:49:78:69:ee:1f:6e:77:
d5:2d:e1:02:19:96:16:2a:38:42:40:79:4b:da:3a:
76:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:0C:6C:EA:F8:E7:9C:44:9B:8F:6F:78:53:B5:A5:56:D2:60:64:0C
X509v3 Authority Key Identifier:
keyid:A9:52:D0:D2:66:55:73:85:83:6A:AB:7A:E3:FD:CE:D4:CA:74:AD:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/KAxs6vjnnESbj294U7WlVtJgZAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.103.0/24
Signature Algorithm: sha256WithRSAEncryption
32:5f:37:6f:63:42:12:a7:7c:03:05:d5:02:77:df:a3:91:bb:
09:9d:78:b8:4b:35:b7:47:68:e0:b6:6e:af:99:6f:79:5b:55:
f2:c7:71:c1:85:dd:cb:52:5b:57:ac:cc:37:32:4b:8a:c1:20:
d0:d0:49:b3:9e:bd:be:69:33:f2:c7:da:d7:7a:2f:b0:46:60:
15:c3:08:a3:bc:f5:c4:11:d6:17:8f:72:c4:11:58:3a:71:2e:
c7:ff:2a:8b:21:6b:d4:de:a8:93:37:ad:8f:00:50:79:29:95:
ae:45:ad:3a:41:3d:67:3f:3e:8f:86:9c:c6:ef:a3:d5:5e:c6:
be:d1:56:d1:55:ff:7a:32:62:2f:06:4f:ce:91:98:26:88:a1:
14:ce:f9:b1:a3:90:5f:f6:75:68:ba:29:62:33:77:93:3c:c1:
c4:f2:47:d2:6a:fa:f2:53:72:7d:df:21:54:4f:c4:c9:37:4a:
3a:3c:32:d1:36:27:ed:a6:b5:b7:09:5a:3c:06:06:5a:62:9e:
3c:81:c2:50:57:d2:fa:bc:b6:77:18:b4:24:57:33:53:ad:56:
0d:89:c8:88:44:e1:09:0a:10:61:71:63:82:4f:62:96:6f:ad:
a4:f0:64:44:0a:88:42:66:b5:e1:2e:2d:e5:00:b8:5d:ea:b0:
38:c2:95:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:18:38 2025 by rpki-client