Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/ODpJp8HpnLwC_49eebmk3He_RT8.roa
File: ODpJp8HpnLwC_49eebmk3He_RT8.roa (raw, json)
Hash identifier: fLsxsxfw3IAKbnyoPX7BnFIb62X8ebQv1DkVKkzbyw4=
Subject key identifier: 38:3A:49:A7:C1:E9:9C:BC:02:FF:8F:5E:79:B9:A4:DC:77:BF:45:3F
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 0185823CD5CE525346094B1594900195826A
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/ODpJp8HpnLwC_49eebmk3He_RT8.roa
Signing time: Thu 05 Jan 2023 14:01:43 +0000
ROA not before: Thu 05 Jan 2023 14:01:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 155.254.36.0/22 maxlen: 24
198.105.100.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:82:3c:d5:ce:52:53:46:09:4b:15:94:90:01:95:82:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Jan 5 14:01:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=383a49a7c1e99cbc02ff8f5e79b9a4dc77bf453f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:dd:4a:ac:02:a3:8c:c9:7d:c8:1b:cc:a2:f9:
8d:35:7b:41:e7:7d:61:27:b2:d5:95:f7:38:6a:e2:
05:da:3d:63:ec:02:9b:42:eb:59:94:0d:4d:16:88:
11:bf:52:5f:cd:ae:84:b9:f9:8f:19:04:de:b3:87:
1d:09:b0:1d:5b:12:60:bd:b3:79:c9:3c:bd:9d:7a:
d3:32:c8:f9:b2:64:8a:b2:28:86:5a:1e:ae:80:d8:
cd:97:91:c2:f5:fe:05:e7:23:a0:31:14:65:61:37:
b9:f7:3d:82:be:97:06:dc:d2:7a:17:be:33:c8:04:
9c:b5:71:bb:ae:d6:e2:49:90:b4:0e:3e:42:ec:8d:
34:d4:e9:e0:21:3f:4f:b8:43:99:2a:0a:28:2a:cf:
4e:f3:2d:38:89:eb:be:c1:d3:5b:8f:ab:da:73:17:
bd:1c:aa:73:e6:55:8f:2f:f4:1c:ed:30:ba:a4:87:
86:1c:bc:b0:36:2b:51:ee:11:67:79:5c:a3:03:12:
a7:d6:0d:e8:dd:6a:8c:47:35:49:2c:d0:83:65:78:
66:b9:45:d0:c5:6f:54:a5:fd:e7:a3:25:e9:b8:ad:
49:9e:7e:3c:1f:89:0e:31:18:43:c7:7e:ff:ef:ac:
a4:c1:50:28:ba:99:a5:1a:af:ac:1b:95:56:2d:e3:
5f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:3A:49:A7:C1:E9:9C:BC:02:FF:8F:5E:79:B9:A4:DC:77:BF:45:3F
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/ODpJp8HpnLwC_49eebmk3He_RT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.254.36.0/22
198.105.100.0/22
Signature Algorithm: sha256WithRSAEncryption
48:a4:9e:c6:c2:e8:4a:81:8a:32:61:1f:f0:8d:96:49:c7:48:
e2:71:6e:3d:d5:23:00:f6:8c:db:c4:15:f9:70:47:56:19:3d:
32:eb:b1:5c:eb:7d:5a:2b:98:61:83:c3:33:19:78:5b:34:f4:
9c:7f:df:08:5d:91:df:45:34:43:2e:94:ac:cc:8c:f4:59:9f:
cc:04:f1:94:50:cf:3e:e3:5c:c0:a6:0d:67:a3:a4:6e:10:0e:
64:db:8e:00:e3:cc:50:30:8b:46:d1:90:5b:b7:f2:95:50:ea:
ed:20:ae:c9:da:2b:bd:8e:dd:b7:d0:53:98:1f:ff:a3:20:31:
42:88:12:0c:81:10:5e:b1:44:f7:e2:a8:25:c0:da:58:f0:fa:
b0:dc:ad:17:2a:ca:13:58:4f:54:1c:b2:e1:92:f9:c9:1c:b9:
9f:22:7a:95:64:67:ed:fd:2c:39:82:b8:65:35:ab:64:69:2c:
f2:a6:91:26:9f:86:04:97:ea:8c:ba:9a:de:23:48:93:70:0e:
5c:41:e6:94:52:72:78:e1:fc:4a:a0:26:fc:20:22:65:39:53:
01:82:f2:95:63:0d:7d:e7:d2:6d:3f:8f:2c:5c:27:88:63:86:
dc:0e:ee:4b:4f:de:7b:51:85:3f:e3:da:e7:ba:10:6e:12:7b:
71:65:e1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:04:24 2025 by rpki-client