Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/HTqoTMwbh5_qLeUejCQd5A9Gv04.roa
File: HTqoTMwbh5_qLeUejCQd5A9Gv04.roa (raw, json)
Hash identifier: DhCx/n8WHT9CWW91fkaY/3owYrTf7wkBBc3m3P1NS2A=
Subject key identifier: 1D:3A:A8:4C:CC:1B:87:9F:EA:2D:E5:1E:8C:24:1D:E4:0F:46:BF:4E
Certificate issuer: /CN=beb12ce6a91030e27d5abad146df27bc2880652b
Certificate serial: 018BFC40B88DF2D3D7E10609AA910A9C217D
Authority key identifier: BE:B1:2C:E6:A9:10:30:E2:7D:5A:BA:D1:46:DF:27:BC:28:80:65:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/HTqoTMwbh5_qLeUejCQd5A9Gv04.roa
Signing time: Thu 23 Nov 2023 12:56:21 +0000
ROA not before: Thu 23 Nov 2023 12:56:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 5.11.23.0/24 maxlen: 24
5.11.20.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fc:40:b8:8d:f2:d3:d7:e1:06:09:aa:91:0a:9c:21:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beb12ce6a91030e27d5abad146df27bc2880652b
Validity
Not Before: Nov 23 12:56:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1d3aa84ccc1b879fea2de51e8c241de40f46bf4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6d:6f:f1:44:3c:e3:4d:8a:ad:9d:b1:7c:44:
db:fd:05:8f:27:42:09:9d:9b:03:3c:a9:b6:88:2c:
45:35:4a:09:27:20:12:e2:a0:3b:70:20:5f:1f:13:
cf:7f:0c:43:1e:24:b1:fc:08:a4:71:37:01:a4:8b:
00:66:71:ee:fd:65:34:66:51:b9:cf:b1:96:51:99:
c2:6f:78:b9:c7:30:4d:7e:11:ca:b4:08:87:8b:20:
e4:2c:4f:cc:02:4c:d0:0b:cb:b3:74:85:1c:b8:43:
1a:55:49:91:0f:3b:98:f3:8e:d2:62:56:5f:5c:ab:
ed:31:fd:d2:00:66:9b:e7:31:20:25:08:97:47:50:
6e:12:c7:e3:02:23:f9:08:53:98:49:6a:ba:b5:b7:
c9:6c:e0:c2:31:95:f4:17:91:90:c0:28:a2:c1:e7:
a7:cb:8a:ea:b0:88:fc:5d:b2:b8:f0:82:da:31:76:
47:98:34:bc:2d:ce:42:90:c0:0d:ce:0f:56:3f:8d:
68:2d:4d:df:89:b2:cc:f1:f8:03:fc:e6:bf:06:a7:
7d:45:68:72:06:70:7f:00:48:f1:58:75:c9:f4:10:
26:30:a0:7d:8d:1e:61:be:de:09:74:dd:e7:b1:d4:
29:01:77:cc:02:1e:87:2c:e7:ae:37:92:07:93:d7:
e3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:3A:A8:4C:CC:1B:87:9F:EA:2D:E5:1E:8C:24:1D:E4:0F:46:BF:4E
X509v3 Authority Key Identifier:
keyid:BE:B1:2C:E6:A9:10:30:E2:7D:5A:BA:D1:46:DF:27:BC:28:80:65:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/HTqoTMwbh5_qLeUejCQd5A9Gv04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.11.20.0/24
5.11.23.0/24
Signature Algorithm: sha256WithRSAEncryption
64:6f:c8:c6:c4:f8:c7:a6:17:06:50:a0:62:8e:3d:fd:2e:af:
f1:f7:c5:70:37:b4:31:6f:70:d9:35:cd:17:44:51:1b:1d:c5:
a9:57:e3:23:d0:3c:94:59:c6:59:e8:db:f5:3d:58:15:4d:c3:
18:78:11:16:d8:5f:06:78:3a:b8:3b:d0:ad:3b:23:35:49:e5:
01:9c:05:99:6b:82:4b:4f:d3:f5:f1:3a:c8:1c:72:e1:b4:95:
a8:c2:14:8c:90:81:e2:f5:67:45:83:05:18:b4:dc:ed:70:e4:
ba:bb:e8:35:1f:9e:b5:41:84:de:bf:13:48:ee:82:01:d8:56:
4c:39:32:67:5f:5c:89:f0:40:07:43:99:c7:5f:c6:1a:db:ca:
72:cc:30:81:e5:be:68:59:ee:dc:0c:2c:e4:f5:96:d9:ab:ac:
3f:40:81:bd:bc:57:f0:fd:5f:15:37:4a:fd:4e:f9:e2:6c:a7:
9c:f2:1a:39:23:4f:4b:e8:ab:0e:0c:35:ff:cc:f7:ad:9b:4d:
1d:69:34:1f:c5:8a:e8:8e:36:5c:b0:fb:d7:84:3f:f7:12:eb:
92:14:6d:49:c4:17:39:ac:1a:0f:a6:1c:b9:5c:49:65:b1:cf:
79:f8:ca:60:20:f6:ba:f0:a8:65:c2:ed:d8:9b:03:ff:75:46:
75:06:00:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:19 2025 by rpki-client