Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/qAAgnn4DirLUyKAZEzXi7vVRgWU.roa
File: qAAgnn4DirLUyKAZEzXi7vVRgWU.roa (raw, json)
Hash identifier: FayGHs6D4mygn+ODqq6ZCFO0U3dteU8Rt3K2qXBXYQc=
Subject key identifier: A8:00:20:9E:7E:03:8A:B2:D4:C8:A0:19:13:35:E2:EE:F5:51:81:65
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 1AA80F96
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/qAAgnn4DirLUyKAZEzXi7vVRgWU.roa
Signing time: Sat 01 Jan 2022 12:02:39 +0000
ROA not before: Sat 01 Jan 2022 12:02:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 23033
IP address blocks: 107.181.138.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 447221654 (0x1aa80f96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Jan 1 12:02:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a800209e7e038ab2d4c8a0191335e2eef5518165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c0:2b:2a:2a:c8:79:24:ee:74:94:12:7c:1c:
2d:ce:4d:fb:ae:28:07:68:41:d9:ac:11:4e:0c:2f:
06:a4:68:ec:70:13:5c:18:82:64:b0:fb:55:95:82:
8d:7f:23:59:45:98:6e:9d:fa:64:f1:c8:cb:a9:11:
76:4f:8a:2e:76:91:de:51:c7:18:2b:56:12:2e:f3:
b6:ad:0d:d0:9b:e5:39:23:5c:91:30:9d:93:3a:61:
aa:1b:0f:e4:c4:4c:fc:2d:cf:92:21:27:c6:f0:ff:
22:d5:5c:a3:a2:e9:14:90:34:85:6d:e3:85:5b:88:
e9:eb:9c:ad:d9:1a:47:d3:66:8b:18:b1:a5:c9:f5:
ed:af:18:91:f3:ab:87:5f:e5:04:98:73:55:ae:78:
9a:e3:0a:00:77:fb:a2:24:fd:7e:83:e3:8f:19:60:
80:bf:14:7f:7d:71:1f:a1:8d:7d:42:74:e4:fa:13:
f9:ff:85:d6:f7:5a:ed:f0:b1:9a:a5:f8:db:97:45:
7a:31:e7:ab:88:62:f4:7f:97:7f:3b:12:1a:f5:8c:
d2:29:17:be:54:31:a1:68:8b:b9:1d:19:d4:b5:a1:
dc:e4:ce:e6:57:50:08:ba:51:3e:3f:74:93:61:94:
f5:e6:02:7e:eb:bc:c3:94:01:10:50:31:21:0e:4a:
da:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:00:20:9E:7E:03:8A:B2:D4:C8:A0:19:13:35:E2:EE:F5:51:81:65
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/qAAgnn4DirLUyKAZEzXi7vVRgWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.181.138.0/24
Signature Algorithm: sha256WithRSAEncryption
02:42:54:db:62:98:4b:86:01:99:e8:e2:1e:62:2b:af:a6:cc:
4e:cd:ce:d5:6b:aa:42:df:61:cb:2f:f0:9b:c7:dc:eb:c3:22:
83:d5:58:9b:bd:e6:61:2e:cb:a6:21:ae:ec:64:4b:e5:97:fc:
3c:9a:35:89:15:9e:e3:d2:9e:dc:f6:eb:ef:8d:05:71:3d:2e:
77:41:76:a5:40:30:bc:b0:18:ce:d3:4f:f9:fc:2b:91:2d:00:
f9:a9:41:6d:fa:b1:9a:cf:e8:36:68:6c:83:7a:76:4f:6c:6c:
37:43:81:93:e3:2c:98:49:95:1c:8e:a5:50:16:2e:04:9c:a3:
b2:e0:fc:4d:9f:38:48:44:0f:d2:1d:af:59:16:23:1c:2c:de:
6e:89:6e:cd:c4:c3:e1:04:1c:bc:d8:56:45:e4:49:7a:49:15:
a7:7c:30:d6:89:47:d8:09:65:fe:4a:87:44:c3:9d:39:cf:05:
73:70:19:2d:d3:cb:ae:91:12:ac:92:ec:ce:7e:45:5f:00:78:
1e:79:4c:06:d9:cc:30:f2:ab:96:83:be:f0:c8:4e:12:55:97:
31:77:33:f4:aa:ac:08:1a:88:33:01:67:3e:06:f8:69:a2:eb:
25:0c:9e:48:69:e2:04:b4:23:50:b9:d2:af:13:ec:3f:a9:7f:
90:89:8a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:12:08 2025 by rpki-client