Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/5Lo4ddgeWdm9K9ZQ0LbA7LnVYdI.roa
File: 5Lo4ddgeWdm9K9ZQ0LbA7LnVYdI.roa (raw, json)
Hash identifier: 9+IEId6m/hXjxzyJHXJF5lUJIRPQdOuOfdYM3N5Twjg=
Subject key identifier: E4:BA:38:75:D8:1E:59:D9:BD:2B:D6:50:D0:B6:C0:EC:B9:D5:61:D2
Certificate issuer: /CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Certificate serial: 01856FF95BD61E9AEBFC0F02F6BDD1FC2F31
Authority key identifier: C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/5Lo4ddgeWdm9K9ZQ0LbA7LnVYdI.roa
Signing time: Mon 02 Jan 2023 00:54:51 +0000
ROA not before: Mon 02 Jan 2023 00:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3356
IP address blocks: 213.174.127.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:5b:d6:1e:9a:eb:fc:0f:02:f6:bd:d1:fc:2f:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Validity
Not Before: Jan 2 00:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4ba3875d81e59d9bd2bd650d0b6c0ecb9d561d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:50:32:16:3e:b8:92:e8:61:c6:cc:79:95:63:
e1:04:82:db:dc:c5:09:87:b6:0c:d5:8b:61:4f:c6:
9d:b7:40:b5:40:c3:65:60:95:e9:97:9b:4f:a7:12:
e6:03:31:b4:ba:fe:05:38:c4:30:f2:7c:97:c8:aa:
aa:e9:2f:72:cb:12:69:36:4f:d6:b7:c4:83:24:52:
03:2a:ac:3c:1b:68:e0:96:4f:f3:dd:b0:e7:ff:8e:
e0:5e:81:e8:ed:3c:94:b0:9e:41:66:ca:a1:f2:58:
3b:29:f0:a4:ca:13:bb:af:42:77:f0:79:5c:7a:0e:
1f:a5:bf:0d:21:3c:88:6b:3e:8a:25:b9:14:7e:56:
16:d8:d2:33:84:c5:de:ad:1f:2c:04:09:20:0b:1d:
49:a1:0a:fe:68:8d:46:d9:ab:05:ce:26:3c:c2:26:
72:a0:97:25:0d:97:2f:6b:6b:fa:51:42:fd:54:a0:
fb:c5:9e:d7:5f:a2:47:8b:c3:66:1f:28:98:9f:c1:
82:30:ea:02:40:52:ae:7e:a0:20:58:15:c1:59:d5:
72:40:7f:d5:54:db:78:43:fb:fd:99:ea:4c:d4:7e:
9c:50:40:7e:29:44:26:af:14:0c:83:a6:e7:09:82:
0e:7b:20:5e:a2:ef:e8:71:60:fb:6a:ab:73:0d:73:
c2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:BA:38:75:D8:1E:59:D9:BD:2B:D6:50:D0:B6:C0:EC:B9:D5:61:D2
X509v3 Authority Key Identifier:
keyid:C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/5Lo4ddgeWdm9K9ZQ0LbA7LnVYdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.174.127.0/24
Signature Algorithm: sha256WithRSAEncryption
02:af:ff:63:51:b5:77:2e:e4:f8:ea:bc:7a:de:95:c6:4d:1e:
44:94:03:64:78:59:d3:bb:99:ea:91:11:a2:4c:21:54:f3:c9:
3a:63:d4:33:34:68:ea:bf:61:46:d2:19:d1:21:c1:4e:57:1e:
a7:53:3e:35:6a:31:fc:25:56:4e:0b:b3:98:d1:ee:d8:bc:2a:
de:a4:8a:e9:af:93:1b:2c:2c:1a:3d:57:d3:e4:16:71:50:08:
be:bd:61:6a:c6:d0:90:19:28:30:a8:87:da:bf:1e:ba:83:04:
97:29:c5:46:11:5e:9b:b9:16:75:38:dd:50:67:25:2e:a5:ec:
28:8d:20:29:b6:65:1e:d9:1c:d5:52:13:4d:51:4f:44:4d:be:
39:57:24:9e:8e:c8:f2:00:9c:39:d9:4e:a5:d3:a4:18:df:80:
02:05:76:f4:c6:ba:1c:f9:68:d6:2d:e3:29:57:80:b4:ab:40:
42:71:d6:a2:db:61:18:3c:0e:d8:12:9e:b0:e9:6c:27:73:fa:
20:76:15:8d:69:5c:99:0e:fd:ef:f9:c7:57:d6:ef:fc:50:56:
7b:58:91:f1:b9:96:ad:66:f0:f5:ba:73:a2:e0:67:67:26:eb:
2f:3b:20:48:a6:d4:c5:d8:b8:98:b0:8f:89:2d:da:85:d2:d9:
30:d8:81:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:19:03 2025 by rpki-client