Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/tSQOdkcN2lse3hyaQ2hy8fhhcAk.roa
File: tSQOdkcN2lse3hyaQ2hy8fhhcAk.roa (raw, json)
Hash identifier: PdJjqUfLR+lpp22TLgdMvZjr8O4v9MVWWARjyrS04+8=
Subject key identifier: B5:24:0E:76:47:0D:DA:5B:1E:DE:1C:9A:43:68:72:F1:F8:61:70:09
Certificate issuer: /CN=43594e55dc96cb9b980a52aa637e48a8d87389c0
Certificate serial: 0185711E6F932F06C1D6CCD8BEA56F78F452
Authority key identifier: 43:59:4E:55:DC:96:CB:9B:98:0A:52:AA:63:7E:48:A8:D8:73:89:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1lOVdyWy5uYClKqY35IqNhzicA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/tSQOdkcN2lse3hyaQ2hy8fhhcAk.roa
Signing time: Mon 02 Jan 2023 06:14:58 +0000
ROA not before: Mon 02 Jan 2023 06:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35193
IP address blocks: 5.145.120.0/21 maxlen: 21
85.239.160.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:6f:93:2f:06:c1:d6:cc:d8:be:a5:6f:78:f4:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43594e55dc96cb9b980a52aa637e48a8d87389c0
Validity
Not Before: Jan 2 06:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5240e76470dda5b1ede1c9a436872f1f8617009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9a:78:70:52:78:29:60:22:6f:0b:7a:23:c0:
17:eb:9f:a5:38:ab:74:2e:87:24:c8:a6:b7:dd:7b:
ce:e1:a1:ed:56:0d:90:7c:c8:5a:7a:81:d9:5f:2c:
87:0f:d0:1c:55:be:d1:bf:46:68:32:cd:80:f4:78:
30:fa:a7:be:0a:30:32:d6:ec:ee:f6:9e:b6:36:81:
0e:4f:eb:18:45:10:67:7e:5c:29:a6:46:e4:73:5d:
a5:39:66:45:8e:8a:1a:bd:6f:ab:dc:70:84:95:90:
ca:4f:ed:05:6d:8e:08:9a:2c:77:08:7b:20:14:9c:
3f:4c:29:a3:23:65:16:36:84:0c:56:30:65:7a:e5:
b9:b4:5f:1f:df:c0:6a:47:87:0d:2b:63:bb:f2:79:
30:a9:a1:6e:3c:25:17:2d:9d:42:80:12:70:38:0b:
35:cf:f9:89:3e:58:d9:dc:e2:e1:50:c1:dc:fa:a3:
39:ef:03:e2:ec:47:c8:f2:a9:f9:97:03:83:c4:bb:
6c:e6:62:8a:66:d9:cd:80:bf:3c:94:b0:c0:33:a7:
df:a2:d4:5b:06:18:c6:23:e1:7f:04:86:24:53:b3:
67:5c:37:3e:16:39:79:13:18:85:ed:aa:ce:1d:22:
48:ca:ef:82:1e:32:27:9e:2a:b7:f3:68:23:66:0c:
d5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:24:0E:76:47:0D:DA:5B:1E:DE:1C:9A:43:68:72:F1:F8:61:70:09
X509v3 Authority Key Identifier:
keyid:43:59:4E:55:DC:96:CB:9B:98:0A:52:AA:63:7E:48:A8:D8:73:89:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1lOVdyWy5uYClKqY35IqNhzicA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/tSQOdkcN2lse3hyaQ2hy8fhhcAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.145.120.0/21
85.239.160.0/19
Signature Algorithm: sha256WithRSAEncryption
42:d3:aa:f7:1b:cb:5d:58:3f:47:2b:65:60:83:79:b0:a7:10:
66:2a:71:49:e1:50:c4:67:05:1e:63:d3:93:99:69:55:b2:ae:
11:84:94:4c:af:7b:92:a7:5a:85:42:62:48:b4:5b:3f:8b:4c:
1a:10:b0:7f:ec:ff:65:bb:e2:c2:ed:89:f3:b6:e4:5c:2c:80:
e3:39:88:4a:ca:8a:55:ad:60:d1:02:ab:65:e2:9c:a2:59:18:
1e:f1:5c:16:2b:ac:e4:38:ce:b5:82:f9:34:43:19:78:ac:91:
08:fd:76:c4:12:52:41:67:4e:57:bc:6b:1a:f4:26:e2:a6:a7:
df:8b:2c:b6:30:d9:ef:c4:cd:21:58:3d:20:8d:9a:b2:6e:84:
85:0a:3d:a8:a1:c7:fb:f0:a6:fc:b1:a3:d5:bc:3f:74:81:8c:
1c:64:b5:54:0b:6a:c2:7b:d5:34:aa:03:fc:c4:47:f1:bb:12:
e5:d7:98:00:86:f9:7c:40:8e:5f:58:f6:5f:15:ab:dd:c2:32:
16:a9:14:ba:66:58:e1:82:ee:41:1a:f5:5d:c6:9e:dc:1a:0d:
2b:fa:d9:7f:0a:d4:b0:2a:de:86:48:e4:69:61:84:da:e2:37:
ab:1f:ed:de:b4:c9:44:b8:94:05:04:07:c4:4b:57:04:d6:25:
5f:84:d1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:07:16 2025 by rpki-client