Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/1-Z5JDL9y5j_bveAdy8OIYfNAXOs.roa
File: 1-Z5JDL9y5j_bveAdy8OIYfNAXOs.roa (raw, json)
Hash identifier: x17XPZ1CsRw3xu6JtxLoxtBL9/PdlEOGO9LP4cXWnRE=
Subject key identifier: F9:9E:49:0C:BF:72:E6:3F:DB:BD:E0:1D:CB:C3:88:61:F3:40:5C:EB
Certificate issuer: /CN=427ce5719caa681adbd493a8d9a38a675d6bd639
Certificate serial: 01856CF86DEC5976267847187DFEB0B75054
Authority key identifier: 42:7C:E5:71:9C:AA:68:1A:DB:D4:93:A8:D9:A3:8A:67:5D:6B:D6:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/1-Z5JDL9y5j_bveAdy8OIYfNAXOs.roa
Signing time: Sun 01 Jan 2023 10:54:58 +0000
ROA not before: Sun 01 Jan 2023 10:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 176.52.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:f8:6d:ec:59:76:26:78:47:18:7d:fe:b0:b7:50:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427ce5719caa681adbd493a8d9a38a675d6bd639
Validity
Not Before: Jan 1 10:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f99e490cbf72e63fdbbde01dcbc38861f3405ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:1a:79:d3:2e:8a:ed:ba:79:1f:4c:a2:54:a9:
2d:c1:a9:d5:ee:e1:00:06:9a:69:9a:5a:a2:66:6f:
78:ab:c9:6d:95:c8:8d:fc:fd:87:18:f0:7c:9b:02:
5c:df:d1:97:01:f3:b3:02:24:c8:eb:ff:86:69:a4:
eb:3f:d4:63:a4:c0:4d:02:ae:9c:dc:6e:c5:1a:5a:
fb:ed:99:b7:43:b9:64:b2:45:a6:f9:aa:2f:fa:15:
50:9f:81:a2:6c:8f:60:5c:54:c6:52:ee:7d:54:06:
9e:dd:1c:9f:b9:a9:87:bc:3b:1a:8d:07:5f:83:d3:
72:f1:71:51:ff:f0:97:45:82:b6:b0:1b:a8:b6:56:
7d:d5:74:7c:ad:08:35:1d:29:07:52:38:22:ac:af:
61:26:88:53:36:9e:9b:3c:b8:93:9c:37:2f:7e:3c:
d7:75:29:b3:9c:3d:1a:f9:f2:96:b3:ee:8b:4d:65:
5d:87:a1:1d:12:a8:be:d0:ae:8b:1c:ed:63:e1:88:
58:23:2c:a3:59:b6:98:cf:5d:71:4e:c5:3e:59:91:
e1:7b:ed:2a:3b:65:6c:4c:79:7e:13:b2:98:29:ca:
73:bb:10:41:93:73:05:79:0a:95:16:f0:db:e3:48:
d3:95:6d:94:e6:1c:e1:5e:54:67:e2:a8:ad:c9:11:
c3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:9E:49:0C:BF:72:E6:3F:DB:BD:E0:1D:CB:C3:88:61:F3:40:5C:EB
X509v3 Authority Key Identifier:
keyid:42:7C:E5:71:9C:AA:68:1A:DB:D4:93:A8:D9:A3:8A:67:5D:6B:D6:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/1-Z5JDL9y5j_bveAdy8OIYfNAXOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.52.187.0/24
Signature Algorithm: sha256WithRSAEncryption
55:1e:ba:d6:c6:83:a5:d9:0a:bc:da:ee:09:63:4a:b9:c8:94:
58:b0:73:4f:43:21:e9:e4:a3:59:f4:32:4d:f3:1e:af:30:df:
c6:ff:2a:27:d9:74:c4:6a:8c:89:c1:58:f2:6a:ef:92:39:35:
eb:39:7a:6b:f0:89:04:1a:dd:d9:8f:90:78:09:05:80:92:c5:
ca:f1:e1:d1:79:fd:cc:62:64:c6:5c:05:3c:7f:6f:3c:cb:8e:
a7:21:30:ad:f8:61:49:d2:ab:42:09:75:4d:cd:b6:8d:3b:5b:
3b:3b:cd:40:92:a0:9a:ce:ed:38:e0:d4:a2:ba:cb:11:f4:b7:
30:ca:53:74:28:94:60:25:c1:3f:d5:f8:f9:f4:3a:3c:83:04:
6f:61:76:8d:ae:ea:28:de:fc:ae:66:17:f8:05:0d:11:c4:6b:
cc:ec:7a:b2:b1:3e:47:9e:83:c1:cf:31:31:16:d5:8f:31:e2:
6f:2c:e8:be:6e:38:91:2a:49:a5:5d:4c:b9:6a:3d:6f:62:46:
98:bf:8c:4d:6a:f0:9c:16:15:e8:7c:39:de:3d:d9:1b:6f:28:
47:ce:9a:ed:2d:7f:d1:c8:d8:4d:58:c6:e8:fa:f7:70:3c:2d:
b3:ac:15:02:be:90:f5:af:65:46:05:e3:31:5c:e9:13:60:76:
0a:33:02:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:41:34 2025 by rpki-client