Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/I75dt_K4A1brTo9RMXe6g2bI9tU.roa
File: I75dt_K4A1brTo9RMXe6g2bI9tU.roa (raw, json)
Hash identifier: DSJi6bEGBtun5D3XC6yQRTkNR0eKQDKJhqGjCbNI1gs=
Subject key identifier: 23:BE:5D:B7:F2:B8:03:56:EB:4E:8F:51:31:77:BA:83:66:C8:F6:D5
Certificate issuer: /CN=90620638ca1d835650e08ddcf363f10789b53057
Certificate serial: 01856D8AB2919368306C3DA721AB331DAA03
Authority key identifier: 90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/I75dt_K4A1brTo9RMXe6g2bI9tU.roa
Signing time: Sun 01 Jan 2023 13:34:44 +0000
ROA not before: Sun 01 Jan 2023 13:34:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14380
IP address blocks: 206.195.50.0/23 maxlen: 24
87.237.219.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:b2:91:93:68:30:6c:3d:a7:21:ab:33:1d:aa:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90620638ca1d835650e08ddcf363f10789b53057
Validity
Not Before: Jan 1 13:34:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=23be5db7f2b80356eb4e8f513177ba8366c8f6d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:59:e3:61:c1:31:f0:d8:6f:08:dd:fd:ae:01:
5b:6a:0b:77:00:11:89:30:52:a2:31:af:d7:91:d4:
06:d6:a2:bc:0d:c6:ab:69:79:6a:22:fe:47:49:eb:
a2:31:62:50:2b:7c:80:19:66:1e:89:c4:ef:e5:30:
0a:e7:61:8b:c4:1f:06:3d:ec:38:2a:79:cc:ce:86:
43:e1:f7:35:68:05:a2:ce:49:49:23:da:88:f0:13:
48:91:79:6c:da:1f:00:c6:78:5f:0e:31:b3:b6:13:
85:d2:42:56:08:a0:dd:d0:70:92:d9:90:27:67:25:
7d:e1:21:8d:50:fb:e7:bd:90:1f:3f:2e:8b:48:73:
cd:07:46:ab:58:a7:b9:98:b8:da:e4:9d:7c:33:b5:
19:be:26:f4:b3:43:6d:1a:09:73:24:16:18:d2:14:
73:1d:c1:29:8e:e4:a5:9e:e9:ee:19:96:d4:db:13:
fe:3a:67:32:06:8c:9a:1d:cf:87:45:fa:3d:26:68:
7d:df:7e:76:34:d1:f1:f0:c7:b6:c3:1c:19:12:9e:
12:aa:7b:7e:7e:e5:c4:de:7c:e9:39:86:2f:b3:30:
79:7e:cd:ff:7a:16:cc:89:6f:08:21:b4:a6:ad:22:
92:24:28:f7:8b:4c:16:cd:4a:31:7e:21:d5:7f:88:
60:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:BE:5D:B7:F2:B8:03:56:EB:4E:8F:51:31:77:BA:83:66:C8:F6:D5
X509v3 Authority Key Identifier:
keyid:90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/I75dt_K4A1brTo9RMXe6g2bI9tU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.237.219.0/24
206.195.50.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:9a:b0:fa:59:4d:de:18:d3:38:20:28:0b:d4:ce:ef:72:52:
59:15:83:e3:64:3d:f0:86:35:44:bc:e7:5c:2c:18:6b:70:63:
87:bf:20:cb:22:25:d5:24:c2:3c:4e:ad:ab:7b:a5:4f:46:28:
1b:f4:a6:3c:95:a2:9b:61:80:c0:74:5e:54:c9:b3:4b:88:92:
db:f7:5f:e2:1f:6a:70:ea:81:76:c1:82:4a:87:56:88:8b:d1:
59:be:ea:51:ce:d6:b0:ce:92:04:d0:41:db:ff:8a:35:a6:a5:
b2:5b:58:7c:d0:dd:e8:92:23:21:96:1d:36:cf:50:ed:e1:d3:
f5:9c:72:92:5b:48:ae:43:9f:84:ff:47:58:4d:32:e1:87:fe:
bf:70:f2:9a:79:1c:3d:a9:39:44:00:39:0f:3d:52:a6:90:51:
89:b8:69:f3:37:ef:cc:a0:d7:b8:36:a7:dc:e4:74:a1:fe:54:
9b:06:b6:cd:11:fe:01:5b:9a:8e:01:47:b1:16:c4:4f:0c:e6:
49:1b:d4:8d:a4:da:1a:49:12:6c:7b:1d:75:92:80:2c:59:c8:
99:e6:79:36:7b:4d:c9:bd:1c:ec:68:24:27:08:56:8b:aa:ca:
c8:e9:7d:1e:1f:28:ec:12:5f:f0:e5:43:eb:a8:e8:76:45:4f:
ee:22:ee:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:45:47 2025 by rpki-client