Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/x0QeGwzf21E3nJWGPIpI6X-cvLk.roa
File: x0QeGwzf21E3nJWGPIpI6X-cvLk.roa (raw, json)
Hash identifier: edH8RupNWmz3+4xl9GWoof2XmcTPbzHVqc0NbV7ET1s=
Subject key identifier: C7:44:1E:1B:0C:DF:DB:51:37:9C:95:86:3C:8A:48:E9:7F:9C:BC:B9
Certificate issuer: /CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba
Certificate serial: 0189308FFDCE5FE5B204C9B35C802F556953
Authority key identifier: E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/x0QeGwzf21E3nJWGPIpI6X-cvLk.roa
Signing time: Fri 07 Jul 2023 13:34:50 +0000
ROA not before: Fri 07 Jul 2023 13:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198187
IP address blocks: 5.252.214.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:30:8f:fd:ce:5f:e5:b2:04:c9:b3:5c:80:2f:55:69:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba
Validity
Not Before: Jul 7 13:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7441e1b0cdfdb51379c95863c8a48e97f9cbcb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:50:1f:48:d6:42:f2:f6:ad:2e:39:3a:24:b2:
cf:27:f7:bf:8e:cb:e1:3c:f7:82:82:0f:b7:26:24:
a0:bf:4c:96:ab:68:d9:a6:c9:60:79:77:75:fb:d0:
85:10:39:f5:91:ed:32:01:48:56:6f:64:9c:a3:bb:
99:69:84:7d:53:22:e4:b2:5c:16:fa:37:a2:b4:84:
bf:ce:b3:95:7e:f0:02:a6:a8:ab:15:55:f3:60:14:
c7:04:78:10:49:fe:09:68:2a:bb:43:b4:c4:61:bc:
20:43:e0:ce:d1:57:d3:20:58:e9:a9:1e:45:f9:74:
27:e1:64:5f:1d:64:9f:d0:30:1c:85:a7:e8:90:98:
ae:33:27:33:a4:6b:03:d3:00:9e:ce:9f:41:bb:bc:
5b:a8:70:f9:4f:26:ec:76:f8:08:38:67:48:84:7e:
11:b2:24:d6:df:0b:55:fc:01:d4:bd:2f:ac:cc:5c:
84:57:c0:d8:d0:4e:07:1f:1b:8d:c8:97:0c:cd:b0:
ab:58:89:95:d3:68:d5:1f:39:10:ec:d6:6c:07:a6:
b6:4c:f8:f5:ef:84:3a:f1:d4:e6:53:f9:1e:89:ee:
22:fe:6e:fd:eb:85:db:fb:a4:5e:eb:5e:4f:c1:f4:
38:94:32:aa:13:10:3b:5f:1b:b3:06:3c:b9:1e:36:
10:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:44:1E:1B:0C:DF:DB:51:37:9C:95:86:3C:8A:48:E9:7F:9C:BC:B9
X509v3 Authority Key Identifier:
keyid:E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/x0QeGwzf21E3nJWGPIpI6X-cvLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.214.0/24
Signature Algorithm: sha256WithRSAEncryption
12:cc:1e:dc:56:be:92:3c:63:66:39:d7:73:a3:bc:03:80:14:
c5:36:5e:95:38:67:da:07:ae:49:8c:ff:c2:1c:bc:df:a7:8d:
a0:60:58:cf:91:83:20:31:79:4f:11:57:dd:19:03:6e:43:b9:
5c:ee:34:39:db:7a:0a:0a:13:10:b5:60:c8:30:12:80:d0:b4:
aa:7b:83:12:be:0f:9c:52:da:17:db:14:c8:14:a6:f6:26:92:
1f:85:12:e8:8b:80:1e:57:c3:f0:e0:76:72:7f:25:19:55:fc:
62:0c:0d:b6:65:40:46:a6:99:83:c0:18:66:7b:91:e8:6c:0d:
54:4a:2a:12:cf:fc:39:ce:94:d8:90:0e:b3:2c:05:a1:88:18:
87:5c:47:be:ab:a4:dd:4d:86:62:12:73:95:d9:27:67:e6:28:
40:ba:b5:b0:40:b1:fc:d3:22:3e:c7:53:95:7c:ea:86:3c:18:
cc:c6:99:30:80:46:c5:fa:4e:dc:eb:ab:92:83:0d:2a:c1:0d:
d8:d5:85:25:5d:1c:4a:32:b8:00:04:fd:83:0b:14:88:24:b6:
70:70:1d:7e:2f:0a:e4:5a:49:24:5a:17:57:b8:a8:1a:b6:35:
d5:1f:68:94:64:be:09:3f:aa:88:03:1b:7e:1b:24:cc:32:7e:
55:a5:e4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:51:08 2025 by rpki-client