Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/dfeb10-9524-41a5-bbd3-0769aa6271e6/1/EnGl8FsMmnkvgOl11YMrpGeNhQI.roa
File: EnGl8FsMmnkvgOl11YMrpGeNhQI.roa (raw, json)
Hash identifier: cy+rru0q6rfHP3CqUZ+iJVHOvBGSB2F9AAKPGRpHWlg=
Subject key identifier: 12:71:A5:F0:5B:0C:9A:79:2F:80:E9:75:D5:83:2B:A4:67:8D:85:02
Certificate issuer: /CN=20a0c5400e023f93f518e43004c33bc79d2f6b21
Certificate serial: 08E374C3
Authority key identifier: 20:A0:C5:40:0E:02:3F:93:F5:18:E4:30:04:C3:3B:C7:9D:2F:6B:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IKDFQA4CP5P1GOQwBMM7x50vayE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/dfeb10-9524-41a5-bbd3-0769aa6271e6/1/EnGl8FsMmnkvgOl11YMrpGeNhQI.roa
Signing time: Sat 01 Jan 2022 14:57:07 +0000
ROA not before: Sat 01 Jan 2022 14:57:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35202
IP address blocks: 5.180.116.0/22 maxlen: 24
2a0a:6400::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149124291 (0x8e374c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20a0c5400e023f93f518e43004c33bc79d2f6b21
Validity
Not Before: Jan 1 14:57:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1271a5f05b0c9a792f80e975d5832ba4678d8502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e4:b4:70:9e:d0:1b:5c:93:8e:42:d0:1e:86:
7e:0f:d8:a9:98:36:db:15:f7:74:0b:52:39:05:78:
83:e5:25:cc:06:22:c7:4b:43:28:1f:01:4b:f8:46:
6a:c5:d1:9b:66:c3:85:99:dd:38:d3:46:a2:e5:43:
d4:d8:df:fc:a7:96:12:4f:55:1f:db:ae:6e:8d:36:
e2:b6:87:2f:0b:30:a6:40:fa:34:c5:58:3b:76:9f:
e7:e3:66:a6:bc:2d:f1:9b:38:b5:28:df:f8:e6:9e:
cf:62:13:99:c4:36:ef:b7:77:17:35:47:e9:18:eb:
65:1a:ae:bb:59:98:1b:cd:ee:8f:9d:ee:e4:6b:9a:
6b:00:43:81:25:95:60:4b:89:3e:92:7c:71:0b:fe:
31:7f:c2:17:6c:4f:23:29:ca:ce:57:59:31:5f:fd:
fb:79:94:e6:a9:98:b7:3b:47:1f:35:d5:59:01:39:
42:8f:33:ff:43:91:3d:8f:b1:1b:58:d1:82:f4:b3:
1e:bf:70:fb:db:3d:92:e9:67:d3:03:4f:e3:3e:64:
be:c3:bd:4f:95:60:2c:8f:06:8a:a0:c7:03:b2:56:
f8:2f:f1:a4:cb:53:30:d3:73:3c:cb:15:57:40:ca:
2f:a6:f3:87:ea:e6:ce:28:26:59:a2:44:65:8d:6f:
74:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:71:A5:F0:5B:0C:9A:79:2F:80:E9:75:D5:83:2B:A4:67:8D:85:02
X509v3 Authority Key Identifier:
keyid:20:A0:C5:40:0E:02:3F:93:F5:18:E4:30:04:C3:3B:C7:9D:2F:6B:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IKDFQA4CP5P1GOQwBMM7x50vayE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dfeb10-9524-41a5-bbd3-0769aa6271e6/1/EnGl8FsMmnkvgOl11YMrpGeNhQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dfeb10-9524-41a5-bbd3-0769aa6271e6/1/IKDFQA4CP5P1GOQwBMM7x50vayE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.116.0/22
IPv6:
2a0a:6400::/29
Signature Algorithm: sha256WithRSAEncryption
1a:ca:56:8a:b1:dd:e7:37:32:ae:87:bb:d7:d3:c0:da:12:5b:
d8:08:61:c7:7c:3c:16:0c:cb:f4:04:80:b1:ba:42:f8:f2:51:
dc:34:bb:cf:c2:a4:53:77:c0:ea:c9:84:97:08:74:03:af:4d:
23:7a:5b:3a:3c:9a:d9:a4:a1:28:ce:1b:02:cc:60:61:81:e4:
57:ae:2c:34:46:73:ed:99:8d:fc:c9:70:53:c5:92:7c:16:8b:
7b:db:09:0b:8b:64:b1:b6:79:63:95:17:8c:e1:02:b8:27:9b:
e9:69:0e:b6:9e:93:51:ef:36:95:f0:f0:d0:0e:6d:3f:b7:57:
af:42:63:26:0e:a4:94:75:6e:05:a3:c2:94:f6:9c:76:74:41:
06:2f:10:20:db:15:d1:b0:36:97:83:c6:78:59:05:87:b3:67:
0e:03:0e:d0:ba:68:36:c0:4e:fe:5a:12:a0:0d:c0:12:29:2c:
bb:70:07:f0:48:b4:fa:61:37:74:73:d9:89:02:4c:b4:5c:54:
9d:5c:f6:d7:02:a9:26:5e:6f:ec:af:7f:03:3c:15:75:65:58:
8f:5d:5e:c5:15:b2:b8:fa:02:1f:d3:55:04:3c:ca:8f:05:ea:
65:8e:3d:cf:d8:4e:a1:39:f0:56:a4:87:7f:d4:a2:92:d8:80:
9e:b9:13:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:42:24 2025 by rpki-client