Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/V5QxzCkXuSfKOxp0X9_OVBuYoVE.roa
File: V5QxzCkXuSfKOxp0X9_OVBuYoVE.roa (raw, json)
Hash identifier: 36vQ+CYDy9QTixUbdmpLh+P51JEGbOeP6uNH3vGpmvM=
Subject key identifier: 57:94:31:CC:29:17:B9:27:CA:3B:1A:74:5F:DF:CE:54:1B:98:A1:51
Certificate issuer: /CN=8050504f4b1776e80b8ad9f8b356e613b585b35a
Certificate serial: 018ACCBEE55E6E5ECD5BA72E007B196E6367
Authority key identifier: 80:50:50:4F:4B:17:76:E8:0B:8A:D9:F8:B3:56:E6:13:B5:85:B3:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/V5QxzCkXuSfKOxp0X9_OVBuYoVE.roa
Signing time: Mon 25 Sep 2023 14:29:37 +0000
ROA not before: Mon 25 Sep 2023 14:29:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9044
IP address blocks: 193.135.57.0/24 maxlen: 24
2001:678:e48::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cc:be:e5:5e:6e:5e:cd:5b:a7:2e:00:7b:19:6e:63:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8050504f4b1776e80b8ad9f8b356e613b585b35a
Validity
Not Before: Sep 25 14:29:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=579431cc2917b927ca3b1a745fdfce541b98a151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0e:22:c5:67:2d:98:ae:81:d8:76:80:c1:07:
fb:d4:ae:88:a7:62:ac:72:21:0d:1c:49:78:c3:37:
50:22:18:f7:71:40:fd:d8:ac:80:00:c2:11:ac:1d:
30:e1:42:37:5e:a0:4e:93:e0:c2:6e:07:1c:fd:ae:
fc:6e:85:0f:93:50:70:1b:03:e1:d4:e5:1c:7d:e1:
16:a4:10:d1:be:35:58:14:9d:f9:22:e9:c4:9c:58:
8f:89:88:ef:4c:67:84:16:8f:6a:01:64:57:c4:f3:
d0:a6:ea:28:96:82:f0:88:7f:ec:9a:30:4a:ca:4e:
1c:03:76:17:f1:c7:05:f5:71:88:a2:f5:17:81:9d:
20:98:46:70:55:ef:63:b1:ea:58:b0:39:2a:be:d9:
8c:d0:10:0b:fa:08:13:f5:73:2a:6a:4f:aa:14:7e:
84:88:6a:c4:1b:57:04:33:ba:b1:10:19:97:e2:04:
64:6c:d8:e1:51:b4:93:f1:89:9c:eb:7c:39:d9:e6:
97:38:2f:a9:f3:16:a4:c4:07:57:2c:18:51:e8:a8:
92:0c:a1:47:28:c4:00:64:0b:0c:38:28:63:8b:11:
ad:bd:40:d4:3c:e9:a2:4b:8e:d5:46:d0:5c:36:3a:
5e:3f:73:d2:fb:05:e0:9b:ca:72:bb:66:42:6a:d4:
16:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:94:31:CC:29:17:B9:27:CA:3B:1A:74:5F:DF:CE:54:1B:98:A1:51
X509v3 Authority Key Identifier:
keyid:80:50:50:4F:4B:17:76:E8:0B:8A:D9:F8:B3:56:E6:13:B5:85:B3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/V5QxzCkXuSfKOxp0X9_OVBuYoVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.135.57.0/24
IPv6:
2001:678:e48::/48
Signature Algorithm: sha256WithRSAEncryption
04:c7:32:70:05:87:71:c7:a8:a0:24:da:91:61:fc:f0:85:42:
42:50:08:88:82:8b:57:52:dc:74:91:7e:7d:7d:fa:b4:73:29:
a9:61:d0:a3:60:e7:98:ab:9c:47:ae:09:63:ab:93:12:94:16:
81:7f:c7:46:fc:23:2d:7f:2c:e2:eb:23:2a:01:68:59:84:1f:
00:de:ff:5f:5d:52:72:eb:21:98:25:4a:cc:83:69:e5:cd:9c:
60:76:57:d7:95:91:e3:bf:c6:05:7e:d6:24:ee:42:89:e7:df:
3e:ae:0a:92:21:b5:ab:a9:b3:3a:4c:39:2e:9b:fc:c5:af:b5:
15:22:fc:75:a8:b6:29:47:ac:7f:2a:fd:4e:c1:b1:05:b9:71:
3c:cd:22:61:fe:12:92:7a:53:95:a8:74:4a:82:19:52:39:8a:
ab:1b:fc:9f:77:e9:35:3a:0c:29:05:12:8b:58:2a:aa:6b:e7:
85:82:35:ef:88:07:6f:4d:99:46:4a:fb:d4:01:e0:73:9e:e5:
23:bf:a4:19:ae:98:e8:ce:1d:f9:19:fe:e9:1e:c4:35:55:f0:
67:f1:8d:66:b6:f0:5c:6f:51:97:92:44:1f:b8:7c:fe:86:06:
11:c6:02:86:00:3f:50:23:58:30:fa:af:5f:77:1a:2a:04:01:
66:fc:a6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:33:25 2025 by rpki-client