Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/c6f31a-7ca7-48c4-93ff-c480da0264ca/1/OHAbsgmx91zWwz-8o7FrlXyjyXQ.roa
File: OHAbsgmx91zWwz-8o7FrlXyjyXQ.roa (raw, json)
Hash identifier: CWl+SAz2Io53VSDyZtKOCYlxaIhhY96lzUVqBslVeUQ=
Subject key identifier: 38:70:1B:B2:09:B1:F7:5C:D6:C3:3F:BC:A3:B1:6B:95:7C:A3:C9:74
Certificate issuer: /CN=5a081a52ac9cb0856df6563ed87d38b0caca7ccc
Certificate serial: 01856EB8DCA97F5D7088A916EF004A0E712F
Authority key identifier: 5A:08:1A:52:AC:9C:B0:85:6D:F6:56:3E:D8:7D:38:B0:CA:CA:7C:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WggaUqycsIVt9lY-2H04sMrKfMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/c6f31a-7ca7-48c4-93ff-c480da0264ca/1/OHAbsgmx91zWwz-8o7FrlXyjyXQ.roa
Signing time: Sun 01 Jan 2023 19:04:46 +0000
ROA not before: Sun 01 Jan 2023 19:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47176
IP address blocks: 5.183.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b8:dc:a9:7f:5d:70:88:a9:16:ef:00:4a:0e:71:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a081a52ac9cb0856df6563ed87d38b0caca7ccc
Validity
Not Before: Jan 1 19:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=38701bb209b1f75cd6c33fbca3b16b957ca3c974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:dd:e1:16:9b:c5:82:bb:6b:0e:48:44:1c:d1:
c4:10:1f:23:d9:70:c4:f3:90:c8:5e:53:4a:2c:5f:
48:3d:28:90:de:a5:7c:4e:2d:98:68:6d:3f:56:38:
8b:81:96:12:8e:01:6e:36:ee:3b:b8:2f:51:ba:3a:
5c:b4:86:c3:94:47:40:63:2a:7f:e8:0e:dd:b6:10:
39:69:f9:b2:b2:7c:1d:5c:a5:3c:20:f7:65:b3:4a:
37:0a:c7:15:f8:cd:18:eb:ee:96:f2:e7:f2:37:45:
c0:94:36:0d:74:cb:ba:bc:ef:fc:ae:9b:6b:52:a4:
9c:6c:b4:d2:22:3b:a1:69:c1:7c:52:02:89:02:28:
92:1f:e9:ed:ea:a6:fa:b3:1d:4a:4a:db:91:d4:00:
8d:ac:d3:81:2c:e8:3f:6f:bf:2a:e3:3e:12:db:89:
f2:5c:0b:9b:00:1f:03:8b:f5:59:59:f6:22:25:f3:
ea:f2:28:04:2c:88:86:25:4e:c3:5e:ae:21:4e:b6:
b5:db:08:41:dc:6a:bf:ca:87:51:55:81:d5:a3:e4:
0e:be:f1:34:c6:fe:ac:42:64:ae:23:67:38:c1:15:
a8:f1:11:bc:b4:45:a3:2c:01:02:c3:46:29:d1:bf:
4c:63:5a:48:49:8e:84:b3:b5:2b:0e:6f:8d:61:93:
9c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:70:1B:B2:09:B1:F7:5C:D6:C3:3F:BC:A3:B1:6B:95:7C:A3:C9:74
X509v3 Authority Key Identifier:
keyid:5A:08:1A:52:AC:9C:B0:85:6D:F6:56:3E:D8:7D:38:B0:CA:CA:7C:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WggaUqycsIVt9lY-2H04sMrKfMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c6f31a-7ca7-48c4-93ff-c480da0264ca/1/OHAbsgmx91zWwz-8o7FrlXyjyXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c6f31a-7ca7-48c4-93ff-c480da0264ca/1/WggaUqycsIVt9lY-2H04sMrKfMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.4.0/24
Signature Algorithm: sha256WithRSAEncryption
40:3a:ec:bd:22:99:9f:89:db:1a:17:8f:87:b8:da:86:cf:a9:
d0:53:e7:be:43:05:b9:51:96:3e:24:ae:62:74:70:82:8b:c4:
eb:87:98:cf:cf:43:c1:b0:ff:e6:e3:b3:c7:2f:93:a6:30:cc:
c4:33:be:21:3a:bd:71:40:50:4c:ef:c4:9b:b9:35:e8:53:3b:
2b:cf:64:30:be:d4:7e:76:20:97:1c:ab:d2:37:7a:05:30:93:
69:70:de:bd:a5:92:d5:1d:ea:fd:43:ea:2a:8a:3c:82:dd:4a:
f7:7b:9c:4e:54:cf:29:0f:94:3a:fb:57:18:a8:73:d1:33:ed:
c3:94:f3:a3:d6:18:79:1b:93:fe:d3:ba:5f:dd:c7:77:4a:c9:
4e:91:35:31:88:df:ab:01:91:23:aa:c5:89:64:6c:95:9a:a0:
4c:d0:d8:a6:9e:2e:40:95:c2:79:b4:c2:22:64:e6:41:81:a0:
82:69:1a:b0:68:57:ff:74:8b:4a:96:bd:f6:73:4b:94:5b:eb:
5f:ef:5a:65:09:89:7c:d2:f7:e2:2b:1e:d7:ca:91:a0:53:f3:
80:0f:b9:53:98:33:0a:9b:32:82:fc:2b:2f:bd:53:3b:0c:94:
d0:5b:e8:08:29:ca:91:c5:74:4a:09:4b:5f:4b:51:05:6d:51:
42:aa:b6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:26:50 2025 by rpki-client