Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/AdCnwbC4K0MACz7OGOj1FsMgAmI.roa
File: AdCnwbC4K0MACz7OGOj1FsMgAmI.roa (raw, json)
Hash identifier: Ok9JGKIermaoeA7P/aaOnTRjVHxYFeFNrEjSethf0ac=
Subject key identifier: 01:D0:A7:C1:B0:B8:2B:43:00:0B:3E:CE:18:E8:F5:16:C3:20:02:62
Certificate issuer: /CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61
Certificate serial: 0188FBBA1706F26BBDCB416E2A41B0BFAEC4
Authority key identifier: 7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/AdCnwbC4K0MACz7OGOj1FsMgAmI.roa
Signing time: Tue 27 Jun 2023 07:20:56 +0000
ROA not before: Tue 27 Jun 2023 07:20:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 5.250.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:fb:ba:17:06:f2:6b:bd:cb:41:6e:2a:41:b0:bf:ae:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61
Validity
Not Before: Jun 27 07:20:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01d0a7c1b0b82b43000b3ece18e8f516c3200262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:c1:2a:42:66:f6:92:29:fd:7b:42:cf:99:9e:
cd:62:ab:bf:1d:9e:7f:c8:9b:b2:5c:d1:3d:61:97:
63:58:5b:61:01:b4:2c:99:d2:3e:e1:54:19:74:d2:
a9:c2:8d:0f:0a:56:a0:99:bd:40:c8:7e:d3:bc:3f:
88:dd:92:24:d4:f7:26:c4:34:59:65:7f:f9:5b:09:
ce:31:09:33:53:30:d7:6d:8c:c1:f1:30:1a:d6:50:
52:36:6c:93:92:dd:5a:5f:01:d8:ed:f9:9d:c3:6b:
ea:1e:88:84:b4:c9:aa:18:23:ee:79:26:ef:09:9e:
a8:cd:f8:d4:63:fb:26:ce:c9:e5:67:17:21:0e:39:
61:a7:e6:0b:72:25:ac:c2:60:9e:ae:5a:48:f0:ef:
ad:0f:a6:de:06:b5:41:9d:02:30:8d:53:1f:47:0f:
1f:0f:dd:c7:c0:bd:9b:c2:f2:1b:ca:aa:c3:b0:62:
22:72:be:3a:c3:76:27:0b:92:1e:42:66:40:e0:f5:
0d:e3:34:c9:b6:28:0d:6e:b7:7f:33:6e:74:cb:ca:
10:4a:c6:30:33:66:6d:63:f7:7f:71:46:ac:bc:95:
bf:cd:c0:da:18:3a:27:9d:de:64:56:32:67:75:53:
35:e0:f7:2f:11:d4:26:c9:fb:41:8e:51:7a:aa:65:
5d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D0:A7:C1:B0:B8:2B:43:00:0B:3E:CE:18:E8:F5:16:C3:20:02:62
X509v3 Authority Key Identifier:
keyid:7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/AdCnwbC4K0MACz7OGOj1FsMgAmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.250.254.0/24
Signature Algorithm: sha256WithRSAEncryption
40:4e:65:4f:44:8c:af:60:84:d9:85:82:52:df:c5:12:52:78:
c5:ad:7d:7d:91:8c:bb:2c:37:03:3a:b9:8b:8a:78:68:80:70:
3b:14:81:71:ad:aa:dd:ec:0f:3d:af:27:11:74:42:8d:57:1a:
88:82:24:0f:1f:a8:ec:1d:98:1f:67:87:6b:fa:ef:ad:94:05:
0a:03:6e:2d:22:f1:30:b8:98:cf:43:95:e5:f9:26:22:4b:22:
c1:3c:a0:af:5e:56:bd:b4:f6:e1:d3:df:fe:2d:d2:94:4b:bf:
3c:05:89:35:3e:d3:41:9c:24:c9:d6:a0:4a:c6:c4:53:81:96:
51:c1:21:5c:66:73:fc:41:a5:78:59:5c:6d:9e:65:16:01:6f:
5f:79:7d:ee:b7:f7:50:59:80:e3:1e:e5:f2:cc:15:49:04:b4:
2b:6f:fc:1b:cc:0a:eb:d6:65:69:fb:cb:05:a1:f7:ce:99:9d:
ca:31:4b:71:a9:18:4c:d2:a2:88:dc:fe:2b:fa:d9:0d:2b:a3:
fe:23:aa:78:34:86:79:1f:87:26:5c:51:e8:a5:c7:24:5d:e1:
1f:27:a3:44:6f:7e:8c:29:ae:06:aa:2e:e4:bf:57:da:cd:d2:
bf:dd:a8:07:0b:d0:f4:a7:62:4c:80:ad:49:d9:5d:1e:e5:ae:
a2:29:0d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:25:44 2025 by rpki-client