Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/xXSmNVl5VZQ4opHZo1zUgOXZ7-M.roa
File: xXSmNVl5VZQ4opHZo1zUgOXZ7-M.roa (raw, json)
Hash identifier: ww7xSzVqAAZSBSV9cWd1ElZ7vpBKxxyojf/s4wyyAKM=
Subject key identifier: C5:74:A6:35:59:79:55:94:38:A2:91:D9:A3:5C:D4:80:E5:D9:EF:E3
Certificate issuer: /CN=822f5a6c0b95647f070350e6524e1220fba47fa3
Certificate serial: 01856FF019A4BD179B5E8C594E6983F053B7
Authority key identifier: 82:2F:5A:6C:0B:95:64:7F:07:03:50:E6:52:4E:12:20:FB:A4:7F:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/xXSmNVl5VZQ4opHZo1zUgOXZ7-M.roa
Signing time: Mon 02 Jan 2023 00:44:44 +0000
ROA not before: Mon 02 Jan 2023 00:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212201
IP address blocks: 5.182.251.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:19:a4:bd:17:9b:5e:8c:59:4e:69:83:f0:53:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=822f5a6c0b95647f070350e6524e1220fba47fa3
Validity
Not Before: Jan 2 00:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c574a6355979559438a291d9a35cd480e5d9efe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c0:fd:0d:37:f2:1c:f8:9d:18:a9:c8:90:07:
29:e7:84:05:d1:e3:00:91:93:6a:b1:73:9f:ef:3b:
26:2f:1f:d0:77:7e:83:18:48:46:4d:41:27:4a:bc:
d2:87:9b:58:15:17:3e:a0:c2:0b:6d:6b:ec:55:35:
90:a3:c4:2f:34:85:da:18:58:0e:57:3d:49:46:b9:
d8:06:a8:8b:01:15:f1:a5:a3:2a:bb:88:33:9b:c0:
f8:db:12:70:1c:10:c4:e6:d3:08:2e:bc:72:55:2f:
d4:14:45:11:42:fa:86:e4:06:f2:3e:75:9e:9b:c0:
16:07:93:3e:7f:c0:90:99:f6:ad:3b:bb:05:94:29:
45:d9:17:18:6f:2a:7d:de:0e:51:6d:04:b5:7b:87:
23:8b:75:00:c0:36:d8:57:b1:20:62:05:a5:29:2d:
bf:fd:23:62:31:52:62:9e:f7:a9:1d:6a:90:f8:42:
cb:3e:25:85:b3:ba:a6:a0:ab:de:4f:48:6a:bb:de:
89:00:d0:32:4a:eb:ee:07:8a:8c:58:3f:80:44:52:
a4:90:ff:83:10:21:47:ff:59:49:4d:44:83:b4:1e:
fa:b1:57:a6:e0:17:3b:e4:ab:a5:5c:3c:18:e8:5f:
9d:be:92:a1:13:a7:45:21:a1:b1:9e:bd:5c:cd:0d:
37:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:74:A6:35:59:79:55:94:38:A2:91:D9:A3:5C:D4:80:E5:D9:EF:E3
X509v3 Authority Key Identifier:
keyid:82:2F:5A:6C:0B:95:64:7F:07:03:50:E6:52:4E:12:20:FB:A4:7F:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/xXSmNVl5VZQ4opHZo1zUgOXZ7-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.251.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:21:30:32:b2:a8:6d:41:50:c1:18:85:ce:b6:51:33:a7:3b:
58:44:37:14:ef:b4:ff:0c:a8:f8:fe:c4:dd:a2:67:c8:d7:ae:
7a:7b:56:5a:6d:30:bd:02:a4:88:98:04:e9:72:ff:9c:c1:e5:
07:9f:4f:8c:7c:d2:8b:36:26:95:86:d2:0e:7c:a5:e3:e0:ac:
8e:77:c8:fc:52:e8:6f:93:30:64:1c:14:bf:11:20:ad:49:77:
60:2f:ab:92:8a:61:81:5a:3f:8b:bc:80:39:28:78:b5:40:df:
49:e4:ac:00:dc:10:5f:c0:70:ee:05:b9:70:e0:1b:64:4b:ff:
52:03:11:fa:4b:67:08:63:b0:cd:4d:f4:5e:43:99:e4:09:ee:
52:68:9d:ca:be:38:6a:f8:94:a4:7d:40:f6:0a:96:e8:ef:2c:
77:32:86:63:90:05:3c:7d:b3:bd:77:0f:99:e7:c2:89:9a:6e:
97:78:1e:e2:6a:78:47:b2:21:5f:69:d7:95:d8:61:eb:af:02:
23:af:55:8a:ce:ed:3c:34:4d:c4:45:35:26:fe:32:7a:e0:b0:
d0:2e:2a:20:aa:00:76:dc:bf:66:de:9f:d5:8f:74:94:fa:f7:
7b:ea:1e:37:ed:3f:33:73:0e:30:ab:ad:c4:a0:d9:93:82:c8:
9f:e8:44:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:56:28 2025 by rpki-client