Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/5MGh-xD5T17C6RfmcykwD1pW2T8.roa
File: 5MGh-xD5T17C6RfmcykwD1pW2T8.roa (raw, json)
Hash identifier: 2ToqqI1SB8RpennJZQA50CsxUtPacMWnurWEmzk5nK4=
Subject key identifier: E4:C1:A1:FB:10:F9:4F:5E:C2:E9:17:E6:73:29:30:0F:5A:56:D9:3F
Certificate issuer: /CN=8b8af6af57ddfc5c7aa828cf225f98dce95904a0
Certificate serial: 01872D4B6928EDC01AC2CCE948A6C4A0FBCA
Authority key identifier: 8B:8A:F6:AF:57:DD:FC:5C:7A:A8:28:CF:22:5F:98:DC:E9:59:04:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/5MGh-xD5T17C6RfmcykwD1pW2T8.roa
Signing time: Wed 29 Mar 2023 12:15:29 +0000
ROA not before: Wed 29 Mar 2023 12:15:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207282
IP address blocks: 193.135.20.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2d:4b:69:28:ed:c0:1a:c2:cc:e9:48:a6:c4:a0:fb:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b8af6af57ddfc5c7aa828cf225f98dce95904a0
Validity
Not Before: Mar 29 12:15:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4c1a1fb10f94f5ec2e917e67329300f5a56d93f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ff:a4:16:b4:41:2a:c3:d1:5f:5b:07:07:83:
1f:19:2e:10:b6:ed:6a:b0:0b:62:1d:c4:99:de:c5:
2a:5c:8b:90:4f:de:ae:9e:e8:7a:41:39:44:4d:68:
9c:5b:5f:ea:c2:30:c5:c5:2f:3c:d0:8d:0c:f7:9b:
49:55:55:78:89:b4:bb:2e:38:a1:38:97:fd:5f:9f:
1f:81:f7:d3:7d:42:94:fd:8c:10:79:a0:e3:f4:16:
6a:b9:4b:95:89:b7:c9:a5:fa:cd:a3:16:8a:a4:86:
3a:9e:b7:3f:18:fa:fb:a9:7c:51:dd:8a:83:8f:31:
8e:5e:16:85:04:57:8b:c4:76:ab:09:ac:37:b5:0c:
ca:35:43:46:90:1b:74:cf:3a:cd:e3:fa:c6:dc:9e:
1b:cd:52:2d:28:bc:fd:98:de:d1:7f:54:fe:a2:ed:
85:d5:5e:5f:23:4f:93:2f:41:4e:5f:9d:aa:8b:38:
37:c8:74:39:1a:cd:51:bf:c0:2d:81:04:55:9c:b1:
23:df:f8:2f:46:c0:f9:86:84:b1:3f:01:8b:8d:f9:
f0:6a:31:ad:0b:11:49:f2:b9:2e:de:9c:26:48:76:
d8:a4:42:3d:ac:8b:3f:b7:c8:f9:fe:a3:a5:fa:41:
11:5c:96:ca:0d:01:f9:91:6e:95:5a:94:b7:3e:96:
ee:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C1:A1:FB:10:F9:4F:5E:C2:E9:17:E6:73:29:30:0F:5A:56:D9:3F
X509v3 Authority Key Identifier:
keyid:8B:8A:F6:AF:57:DD:FC:5C:7A:A8:28:CF:22:5F:98:DC:E9:59:04:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/5MGh-xD5T17C6RfmcykwD1pW2T8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.135.20.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:58:a3:f1:33:23:e8:c3:66:f5:ce:ed:24:cd:34:4c:8a:af:
5e:97:b4:29:75:b9:f1:e5:32:79:ae:81:b3:41:2a:0f:f7:94:
34:da:f3:e7:70:dd:6b:86:ab:b5:c5:bc:62:f3:75:43:de:89:
9b:85:0a:e8:a6:74:cf:d7:60:27:ad:63:e4:60:bd:ab:12:2d:
26:92:f7:76:ed:91:77:de:43:2d:76:df:0f:07:99:5b:29:75:
1c:5d:bb:ec:1f:59:12:04:ed:be:f5:db:26:85:bc:b2:a6:5f:
4b:93:15:58:ae:3d:e9:af:c3:6d:ac:20:e7:a8:b3:c8:b5:f2:
28:54:5a:d2:70:20:f2:a0:56:a4:b3:81:b0:fa:49:f2:b4:8e:
ab:96:68:69:87:94:00:4a:97:30:97:01:cd:0b:52:a5:d5:8a:
65:69:98:4d:0d:bd:1d:6e:00:a0:42:f4:81:23:0b:62:49:9a:
af:3d:2e:1a:39:78:d3:c2:af:ff:df:29:2e:4e:ab:ea:fa:0b:
48:47:51:aa:72:93:bf:38:61:c9:dc:2e:4d:bc:dd:5d:e2:9c:
68:e2:5b:02:e2:e5:49:2e:2b:61:40:2a:d4:07:c7:89:72:0b:
03:36:df:98:e1:e2:9d:2c:d4:4c:bc:9d:73:0b:24:56:0e:09:
81:1b:6b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:01:10 2025 by rpki-client