Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/eC_4eZogJ7AVli3BuhF7ArNND-0.roa
File: eC_4eZogJ7AVli3BuhF7ArNND-0.roa (raw, json)
Hash identifier: xcUQ3fhYfI4TVD04FU4HFtvZ4Aog4IyRbwErpAkUt1o=
Subject key identifier: 78:2F:F8:79:9A:20:27:B0:15:96:2D:C1:BA:11:7B:02:B3:4D:0F:ED
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 082535A9
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/eC_4eZogJ7AVli3BuhF7ArNND-0.roa
Signing time: Sat 01 Jan 2022 05:54:58 +0000
ROA not before: Sat 01 Jan 2022 05:54:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47787
IP address blocks: 5.154.174.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136656297 (0x82535a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: Jan 1 05:54:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=782ff8799a2027b015962dc1ba117b02b34d0fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:77:1e:4a:82:6c:fa:0b:ea:f5:dd:4f:f4:ec:
1e:62:fc:f0:98:5e:23:ed:b4:65:fb:d2:9f:3e:0d:
ce:9d:c4:6a:8b:06:e9:f5:44:85:f1:d4:44:ac:2a:
b7:b6:f9:ae:a3:78:6a:8d:23:fd:d3:b3:dd:81:a1:
89:da:6b:f8:c6:cd:fe:b6:3a:7d:05:da:3f:d0:56:
cf:c5:41:65:b0:32:12:b2:8b:5e:7d:6c:4d:0b:14:
d2:c2:82:80:9f:93:0d:b8:bc:78:a5:6c:f9:7e:ab:
15:67:3b:aa:5c:b4:6b:5d:62:e3:d1:82:2d:62:52:
09:f0:4a:2c:83:38:50:59:b7:04:ad:82:73:27:75:
c9:37:89:79:cd:7b:d2:dc:44:a5:17:fe:83:bf:6e:
7e:72:e8:bb:b2:84:18:43:18:1b:57:ae:0a:ab:2a:
51:65:b2:63:7b:87:68:5b:ea:51:3b:7d:47:a5:2d:
c2:65:93:f3:53:90:fc:31:e0:95:30:5e:d8:e8:c9:
7a:1b:4d:c8:3e:90:81:ef:21:f4:02:ed:bf:bc:48:
09:a9:63:9a:be:d1:0d:9e:1d:98:2e:32:35:c4:20:
42:0d:e4:65:1c:b3:85:3a:3f:ad:8a:6e:dd:eb:76:
46:a1:ca:fc:90:52:a6:7a:1b:73:48:41:87:09:c3:
64:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:2F:F8:79:9A:20:27:B0:15:96:2D:C1:BA:11:7B:02:B3:4D:0F:ED
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/eC_4eZogJ7AVli3BuhF7ArNND-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.174.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:4c:64:b4:c0:39:fc:87:85:41:21:76:30:e5:85:7a:2d:fa:
d3:5f:53:07:2b:65:be:20:07:12:b8:6d:b4:c2:58:ac:de:26:
8a:61:8d:98:8d:20:00:f1:a4:27:84:87:be:3e:6b:93:4a:ab:
b8:74:83:30:70:92:7b:d1:e1:93:45:a0:0d:c7:d4:b8:e5:16:
5e:3d:69:6f:c4:43:f3:2c:10:d0:77:25:36:cf:47:26:d9:71:
1e:86:71:a3:1d:d0:c9:aa:5f:f2:70:de:61:3b:d2:0a:d0:b3:
9c:02:81:3a:cc:7f:ca:b9:5d:1a:02:c6:71:9e:6f:ca:47:d8:
15:d2:4f:81:6b:21:1c:46:79:f9:c6:1d:5b:c2:c9:4f:63:e1:
61:88:a2:10:2d:9f:bd:40:a6:be:f5:c5:04:9e:2c:c1:1f:1b:
41:34:49:b8:30:54:d7:fd:cd:84:4d:a6:35:7d:d7:37:b3:d7:
3a:6c:36:60:91:29:a7:3e:1c:e2:15:f6:29:fd:9c:89:28:42:
b7:34:7f:7a:fe:2b:0b:23:ed:eb:71:95:5b:05:0b:11:3d:c9:
fe:c9:37:0b:7b:52:57:05:ca:69:b8:ad:46:a3:be:62:eb:b8:
24:05:bb:df:c0:9d:04:dd:5f:8f:33:fe:0f:57:ed:97:a9:85:
89:da:c2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:24:57 2025 by rpki-client