Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/OLtfLyqZrW-mKdkCABlsrps7tjM.roa
File: OLtfLyqZrW-mKdkCABlsrps7tjM.roa (raw, json)
Hash identifier: 948N6BAf+NJcFAuRvn7TjYcYd2I4y0ACGLF1pZ4/XCk=
Subject key identifier: 38:BB:5F:2F:2A:99:AD:6F:A6:29:D9:02:00:19:6C:AE:9B:3B:B6:33
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 1AB09C50
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/OLtfLyqZrW-mKdkCABlsrps7tjM.roa
Signing time: Sat 01 Jan 2022 12:02:43 +0000
ROA not before: Sat 01 Jan 2022 12:02:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 155.254.38.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 447781968 (0x1ab09c50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Jan 1 12:02:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=38bb5f2f2a99ad6fa629d90200196cae9b3bb633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:30:16:6e:63:0c:c9:44:c9:b6:3e:bd:1b:e8:
b7:fa:6b:e8:3d:17:b2:16:26:c6:c4:d6:65:46:30:
1d:8e:7a:6b:4e:7f:82:13:e5:a4:d9:c9:ca:11:18:
09:ba:ee:99:68:2e:48:97:2a:bd:c7:7d:d4:9e:fc:
01:3c:b0:60:93:1b:90:34:eb:5a:fd:d8:19:18:6f:
24:f0:2a:e4:e0:16:af:cb:2c:7f:a0:a2:0b:29:ed:
1f:c7:ac:27:b9:14:6d:71:c9:c4:40:fc:0c:f4:44:
a6:4e:a9:b5:fa:64:84:e8:41:14:8d:e5:3d:96:84:
5a:8f:70:3c:47:f7:80:e5:0b:1f:6a:45:87:e1:d1:
54:c0:bb:7e:fa:e3:95:e8:63:26:64:2e:7c:ed:d9:
01:a2:93:b0:f7:9a:59:e5:de:0a:f4:68:d6:31:91:
2a:92:8f:92:52:b1:44:b9:48:6b:50:03:02:9e:38:
51:f6:41:a6:9a:49:01:aa:27:a3:d5:72:53:8a:cd:
35:89:c7:c5:d6:28:41:c5:71:9b:8a:37:f7:eb:fb:
d0:f8:08:6e:68:38:79:06:91:83:c6:d0:0a:97:bb:
bb:48:dc:da:37:fb:96:82:e0:e9:5d:cf:3a:7c:3a:
c0:4b:4c:97:a2:b2:0e:55:eb:ac:c7:0c:8f:65:70:
3e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:BB:5F:2F:2A:99:AD:6F:A6:29:D9:02:00:19:6C:AE:9B:3B:B6:33
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/OLtfLyqZrW-mKdkCABlsrps7tjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.254.38.0/23
Signature Algorithm: sha256WithRSAEncryption
19:71:de:55:5c:6d:f9:43:0e:43:87:cd:30:e9:39:fc:4e:64:
90:40:1c:83:d0:13:8f:65:d8:42:12:17:fe:87:da:50:95:79:
96:d5:75:5a:aa:26:d1:22:fb:dd:e9:02:46:e0:11:e5:24:2c:
fa:6b:57:df:aa:0c:70:a7:97:a5:4f:68:d7:70:57:a2:f6:41:
19:fb:2c:58:2c:fe:c6:01:4b:b3:25:78:55:49:ac:e6:76:e8:
e6:4e:1e:5f:e2:5d:26:9f:87:e1:35:6c:93:3c:e0:1e:18:ad:
7b:b3:6e:09:b5:1b:fd:2d:c5:da:46:1b:5c:2b:b1:13:45:5f:
f6:d4:45:97:1b:9c:11:45:97:ae:4f:f4:e1:18:12:cd:ac:23:
71:36:10:97:7b:2f:f5:da:ae:bd:5e:84:0a:6b:9f:c2:c8:b5:
a3:52:73:35:da:9a:3e:e0:ba:14:60:2d:7f:d6:85:73:f0:71:
b2:92:47:f1:a7:8d:68:06:de:d0:6f:51:31:75:97:25:47:ca:
99:50:2d:7b:7a:4e:68:a7:e7:a6:a5:97:43:5b:e0:36:2e:b5:
3c:32:ae:e6:d4:1b:69:e9:50:53:b3:e7:25:ba:97:28:8d:cb:
00:69:22:e1:bd:3c:71:83:4d:d4:5d:de:1b:77:10:28:59:ac:
1a:dd:ee:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:42:35 2025 by rpki-client