Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/_BT7a-g8ZZdopnqhpJHmzui5ON8.roa
File: _BT7a-g8ZZdopnqhpJHmzui5ON8.roa (raw, json)
Hash identifier: gOdDeHU43/eQIu0wwGewOxXp4jdwuFlGCM3+A4XoZtk=
Subject key identifier: FC:14:FB:6B:E8:3C:65:97:68:A6:7A:A1:A4:91:E6:CE:E8:B9:38:DF
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 01886BD100B1B866CB50C9A42B6002A58DB1
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/_BT7a-g8ZZdopnqhpJHmzui5ON8.roa
Signing time: Tue 30 May 2023 08:40:39 +0000
ROA not before: Tue 30 May 2023 08:40:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49505
IP address blocks: 5.10.250.0/24 maxlen: 24
5.10.251.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6b:d1:00:b1:b8:66:cb:50:c9:a4:2b:60:02:a5:8d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: May 30 08:40:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc14fb6be83c659768a67aa1a491e6cee8b938df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:15:e0:7e:65:39:c8:6c:f5:22:8a:a5:b9:28:
71:96:94:00:e7:fc:3b:e1:26:0b:10:55:e5:5a:f2:
1b:dd:34:c5:16:fa:9a:7a:2a:e9:ab:be:f2:be:26:
ae:ff:bf:c3:5f:9c:e1:97:b6:a4:6d:d8:b9:33:6f:
39:16:69:13:23:5d:e9:ca:ca:db:4c:7a:c4:d7:03:
9c:de:da:f3:63:ee:73:c5:04:53:2f:8c:e2:66:df:
ca:2d:34:39:9b:1d:ec:a0:57:7f:90:d4:44:f1:41:
46:7a:0f:41:ac:53:47:0b:9e:67:e7:00:40:43:40:
7c:51:82:95:ef:51:90:34:54:bd:cb:98:95:86:f4:
bf:d1:f8:9a:ee:13:3d:38:3f:e2:f8:d9:08:7e:03:
7a:21:79:60:0f:e1:47:a8:86:78:11:6c:6e:d9:0d:
7b:e1:4c:c9:67:ad:ca:53:6e:fb:31:6b:57:ab:c4:
df:dc:13:b5:a5:b8:23:08:1a:b8:ca:16:e3:15:0d:
02:42:6a:38:c6:c2:ab:17:a9:29:40:fd:8e:b8:11:
4c:84:05:bd:24:8e:c5:83:50:76:d8:83:10:3d:d7:
39:8a:ea:e5:b2:51:5a:da:ba:af:9e:e2:3a:ef:21:
0b:52:1b:44:0e:f3:d6:11:6f:01:14:72:f8:fb:fc:
38:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:14:FB:6B:E8:3C:65:97:68:A6:7A:A1:A4:91:E6:CE:E8:B9:38:DF
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/_BT7a-g8ZZdopnqhpJHmzui5ON8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.250.0/23
Signature Algorithm: sha256WithRSAEncryption
cd:fb:81:e0:91:d6:2b:d6:4b:c2:8c:f2:00:1f:11:b4:f4:2e:
9d:6b:52:8e:19:1a:4f:cc:d6:ec:f5:4d:e3:25:ba:89:ca:c5:
f0:05:92:22:56:4e:5c:9c:ac:35:3a:53:b0:90:6a:8e:e1:63:
aa:91:0e:02:c1:0a:72:72:9c:f4:21:c4:7c:5d:dd:ba:8a:3b:
7e:cd:0d:68:98:9a:c6:92:38:63:c9:60:5b:05:bd:68:5f:d1:
d0:11:15:66:a8:24:26:47:d1:07:3b:8c:38:ca:b2:de:bd:df:
4c:92:ec:f8:dc:5a:00:d3:d3:41:90:e1:c7:f4:30:24:7e:b3:
ed:44:f1:0b:55:9e:da:36:9b:a4:69:e5:0a:b9:d1:65:d6:b4:
f7:9f:11:96:ef:5c:2a:46:9c:5f:3a:72:a4:45:6e:91:9e:65:
f3:9b:2c:f8:5f:c2:87:00:11:3d:23:b4:84:96:4c:85:8a:2b:
b4:73:94:f9:9d:23:07:a4:e6:08:f3:bf:1e:96:5a:dc:f3:25:
75:5a:15:a8:84:a3:6b:01:4f:8b:43:1f:9f:b0:8a:09:c8:88:
ed:bd:3e:10:81:08:0d:70:b8:70:59:6d:1c:dc:f1:6a:2f:f2:
a5:35:ae:11:bf:44:1e:22:1e:8b:8d:00:d6:47:21:dd:b3:a0:
e6:10:4a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:49 2025 by rpki-client