Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/R5lNyG3ak6OjyLRgqXKtTpGr5Dw.roa
File: R5lNyG3ak6OjyLRgqXKtTpGr5Dw.roa (raw, json)
Hash identifier: 4OU0xjBuAGqnJe+BNfI8JzfL/r7jC48usyEC4YMZiaA=
Subject key identifier: 47:99:4D:C8:6D:DA:93:A3:A3:C8:B4:60:A9:72:AD:4E:91:AB:E4:3C
Certificate issuer: /CN=acb54bcc49291a1f32b7cead4f296882d0531492
Certificate serial: 1C01F1AD
Authority key identifier: AC:B5:4B:CC:49:29:1A:1F:32:B7:CE:AD:4F:29:68:82:D0:53:14:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLVLzEkpGh8yt86tTylogtBTFJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/R5lNyG3ak6OjyLRgqXKtTpGr5Dw.roa
Signing time: Sat 01 Jan 2022 07:59:09 +0000
ROA not before: Sat 01 Jan 2022 07:59:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59554
IP address blocks: 5.178.112.0/21 maxlen: 21
185.105.76.0/22 maxlen: 22
2a01:9b40::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 469889453 (0x1c01f1ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acb54bcc49291a1f32b7cead4f296882d0531492
Validity
Not Before: Jan 1 07:59:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=47994dc86dda93a3a3c8b460a972ad4e91abe43c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:83:93:94:d5:2c:f2:0b:4a:e2:96:4f:68:5d:
23:9a:b6:d3:3a:bc:74:ad:08:e2:62:51:10:28:c9:
81:48:d1:da:cc:03:1b:82:5e:0b:91:0d:3e:6a:af:
be:01:96:25:de:50:c1:f3:26:5b:f4:3c:95:db:9a:
76:8f:78:9a:5c:d1:46:64:52:f1:ed:2e:d9:06:95:
6a:3d:4e:9d:42:00:6b:ae:1f:25:91:ee:b5:11:72:
53:d8:6e:2a:78:7e:1d:72:da:db:52:2b:e1:13:99:
74:87:c5:3b:4a:61:b5:5a:90:d6:c8:9e:73:0e:c1:
bb:fd:dd:b7:05:c3:9b:c3:30:d4:f8:77:e1:41:cc:
0f:b9:28:96:4b:21:3e:c1:4e:9d:d5:fb:93:0f:92:
ac:a3:d4:25:6c:5c:34:87:a3:18:45:e8:1d:4a:1d:
91:55:a8:8d:83:e7:cb:79:6e:c8:0c:52:c8:5a:6e:
03:04:5f:5d:f1:03:ee:dd:8a:67:18:dd:af:bf:97:
09:d0:5d:59:21:41:fc:ba:b9:74:df:e7:40:8d:75:
43:f4:42:7c:b4:06:e6:b6:6a:ad:c8:5c:96:8a:a3:
d2:06:c3:36:b6:d6:3e:4f:6e:33:05:7f:2d:04:aa:
13:7d:ef:d7:9a:7d:8f:10:2f:f1:07:76:5d:b5:85:
79:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:99:4D:C8:6D:DA:93:A3:A3:C8:B4:60:A9:72:AD:4E:91:AB:E4:3C
X509v3 Authority Key Identifier:
keyid:AC:B5:4B:CC:49:29:1A:1F:32:B7:CE:AD:4F:29:68:82:D0:53:14:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLVLzEkpGh8yt86tTylogtBTFJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/R5lNyG3ak6OjyLRgqXKtTpGr5Dw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.112.0/21
185.105.76.0/22
IPv6:
2a01:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
ae:9b:72:a1:c9:a5:ae:52:0e:dc:d6:76:d2:9f:84:66:45:b3:
dc:c2:d8:9a:03:27:ed:30:68:9f:33:49:71:88:47:d8:b9:ff:
db:96:1b:99:a1:78:98:4c:6b:e5:19:e7:4c:cb:f1:a6:8f:2d:
f3:d9:3a:16:0b:59:eb:5a:f4:2c:cb:e5:a9:e0:d2:bf:3c:07:
4d:cf:23:c3:46:f1:fc:94:e9:4a:0d:ca:30:6a:31:67:25:99:
40:31:06:73:83:98:b5:b5:47:ab:e9:4f:81:ca:5e:19:22:89:
df:7c:a7:dc:97:30:ee:7c:22:0e:93:0d:2e:82:b0:3b:a8:3f:
0e:96:df:dd:cc:6a:2d:ee:ca:11:97:f8:3a:27:f8:0c:0f:02:
76:ab:98:d7:38:65:43:b3:8d:cb:d0:c4:2b:39:33:e5:1a:ac:
ef:09:6a:1e:3b:a2:a5:25:61:9d:90:a7:bf:54:2e:a0:9d:5d:
44:05:61:fa:72:0d:26:63:76:48:d6:9f:96:e0:21:16:79:6d:
fc:4d:b8:e4:69:8a:de:fc:0f:55:02:1f:78:6c:af:4c:67:81:
56:f6:39:1d:a2:a8:03:25:78:c2:87:61:43:84:e4:b4:9d:f6:
bc:b0:7f:2c:d3:8d:bf:f7:e5:df:50:08:b7:a9:b9:d8:74:00:
b0:72:cf:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:33:00 2025 by rpki-client