Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/cG9-AXGtqcxUbRHYyb29KeIGc5w.roa
File: cG9-AXGtqcxUbRHYyb29KeIGc5w.roa (raw, json)
Hash identifier: /W2frJHu3JjaO99Xp1aE91Ch3J1bZR/RpB0XsnBKsEI=
Subject key identifier: 70:6F:7E:01:71:AD:A9:CC:54:6D:11:D8:C9:BD:BD:29:E2:06:73:9C
Certificate issuer: /CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Certificate serial: 01856EB8E10542C446FB1C6EB3CAC816DB28
Authority key identifier: E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/cG9-AXGtqcxUbRHYyb29KeIGc5w.roa
Signing time: Sun 01 Jan 2023 19:04:48 +0000
ROA not before: Sun 01 Jan 2023 19:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24875
IP address blocks: 185.53.210.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b8:e1:05:42:c4:46:fb:1c:6e:b3:ca:c8:16:db:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Validity
Not Before: Jan 1 19:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=706f7e0171ada9cc546d11d8c9bdbd29e206739c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:35:68:26:f5:65:61:62:37:57:fd:7b:d7:ac:
e6:50:27:f3:ea:a7:14:e0:bb:46:89:ab:7b:9f:01:
c8:b5:2a:83:d7:65:f5:84:7c:58:11:40:24:93:aa:
73:60:c7:b3:c0:fb:f7:e5:9b:11:f6:17:7d:92:dc:
b3:8a:c6:f6:dc:3d:73:13:05:96:1a:98:be:95:d3:
d8:f0:0b:6a:e2:e0:8e:6b:db:7d:66:2b:51:1a:2f:
5f:84:5f:68:06:9a:4a:e7:a3:55:89:f6:f3:d8:ce:
ee:85:6d:5e:1d:3a:b3:19:21:9b:b6:ac:c4:9a:07:
35:2d:e7:cd:7d:a3:95:ae:7a:db:61:c3:80:b0:8b:
59:ba:61:88:dc:da:9b:64:0b:95:85:66:2c:99:3e:
6e:02:cc:63:25:88:5b:4b:80:c7:04:2d:6f:57:02:
41:58:d9:35:49:32:a0:bc:3b:de:fe:6f:dc:cf:c9:
4b:2d:40:b1:07:09:d1:b0:de:61:cd:dc:8c:a3:50:
e1:d3:a4:8b:13:22:8c:ee:b7:30:5f:9e:ce:a6:5c:
a3:09:f2:0f:ca:17:10:65:9b:34:a4:eb:cd:03:e4:
63:93:ef:5b:1d:e6:42:7a:04:36:ab:13:cc:2c:ad:
41:ec:98:db:a2:19:6b:00:a9:0e:80:18:63:18:fc:
4b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:6F:7E:01:71:AD:A9:CC:54:6D:11:D8:C9:BD:BD:29:E2:06:73:9C
X509v3 Authority Key Identifier:
keyid:E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/cG9-AXGtqcxUbRHYyb29KeIGc5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.53.210.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:67:01:56:4d:1c:24:38:2e:69:c7:9e:eb:69:ab:0e:1d:1c:
37:cf:cd:d9:e3:75:e7:eb:52:c3:3a:79:f6:71:21:3f:3e:28:
9a:4b:43:1b:47:f4:0f:64:59:87:bf:b5:f7:24:86:9b:76:8e:
a8:72:c2:60:7c:2d:1d:0c:f5:43:07:5d:ea:a5:79:53:5e:e5:
33:73:35:f7:d7:62:b9:59:cb:65:3a:e3:50:4e:83:a0:d0:3b:
9f:3d:da:fd:78:65:83:58:fe:7e:11:fb:67:0f:b1:45:ed:2b:
5b:9b:c2:92:59:88:ab:b4:e9:d3:bb:6d:f7:7b:50:49:00:81:
bb:28:30:91:cb:4c:c8:a7:3c:8e:fd:dc:ef:b8:0e:94:4a:b1:
f7:a4:ba:23:bc:30:42:fd:04:52:f0:6d:a6:67:f9:ba:45:44:
15:b1:b4:7a:57:24:f7:3a:b9:23:09:f9:78:0c:5c:a4:e2:34:
a1:cd:1d:e1:1e:a0:cc:8f:21:ce:3c:0c:b4:f8:a6:cc:df:4c:
32:44:48:3c:5a:59:82:65:f9:5b:77:d2:b2:15:16:db:ea:08:
4e:db:95:c3:c6:44:ce:01:68:81:93:ea:0f:61:b8:a4:d8:cc:
32:9a:18:de:8f:b6:e2:57:8e:fa:77:52:7d:35:0b:0b:f1:85:
24:d3:11:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:14 2025 by rpki-client