Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Stenbv2yvvPYAez0xZHgrVizJNA.roa
File: Stenbv2yvvPYAez0xZHgrVizJNA.roa (raw, json)
Hash identifier: EJ0MbbV9kh4B2a8+rLRFmgHjFYqjifbsrneZHanIHNI=
Subject key identifier: 4A:D7:A7:6E:FD:B2:BE:F3:D8:01:EC:F4:C5:91:E0:AD:58:B3:24:D0
Certificate issuer: /CN=67fd3e19f583361fe5d90a412b1280f7cffb801f
Certificate serial: 018571958ABC41162AD61679AD34CA1FCF0A
Authority key identifier: 67:FD:3E:19:F5:83:36:1F:E5:D9:0A:41:2B:12:80:F7:CF:FB:80:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_0-GfWDNh_l2QpBKxKA98_7gB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Stenbv2yvvPYAez0xZHgrVizJNA.roa
Signing time: Mon 02 Jan 2023 08:25:03 +0000
ROA not before: Mon 02 Jan 2023 08:25:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51395
IP address blocks: 194.15.228.0/22 maxlen: 22
2001:67c:2f0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:8a:bc:41:16:2a:d6:16:79:ad:34:ca:1f:cf:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67fd3e19f583361fe5d90a412b1280f7cffb801f
Validity
Not Before: Jan 2 08:25:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ad7a76efdb2bef3d801ecf4c591e0ad58b324d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:30:23:11:2e:73:79:ba:b8:fa:25:a0:78:24:
e9:e6:e5:b5:2e:a6:e3:fb:d1:7e:53:b4:7d:34:f7:
e5:b0:c7:17:4f:41:92:b8:93:d3:df:d0:ca:7b:64:
a3:77:71:e7:36:bb:76:32:f5:7a:b4:f0:b2:e8:6b:
0d:f1:5b:85:25:f4:2c:79:4d:fa:78:35:82:2b:3d:
a8:4d:9d:ea:97:02:8f:62:1a:41:dd:09:e1:22:cd:
06:c3:96:90:a9:ee:5f:d2:ff:07:9e:2a:b2:b4:06:
e7:8e:b8:49:ac:7c:1c:de:d6:05:48:ff:ee:e9:cf:
29:f9:6d:79:75:7e:a5:1b:70:38:b8:a5:66:a2:66:
8e:02:3d:12:9c:67:71:e9:a8:50:83:d4:9d:22:f7:
a0:be:d7:f6:38:df:a4:b3:e6:7f:8b:33:a0:f5:91:
07:1f:71:8b:63:d4:25:16:16:28:85:04:a9:fc:bf:
a9:3b:f6:fe:bf:12:7c:03:21:a5:0d:a4:b6:c5:19:
10:4f:9b:a7:bc:26:fd:e7:5a:3f:28:c0:47:43:34:
7f:0f:13:5c:b5:3a:4d:1e:f1:ec:26:80:e4:93:06:
f8:e4:06:1e:81:cd:14:8a:a3:28:fc:d0:48:a2:91:
4a:66:8a:47:ea:0c:50:9a:45:1f:07:4f:20:74:bd:
fc:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D7:A7:6E:FD:B2:BE:F3:D8:01:EC:F4:C5:91:E0:AD:58:B3:24:D0
X509v3 Authority Key Identifier:
keyid:67:FD:3E:19:F5:83:36:1F:E5:D9:0A:41:2B:12:80:F7:CF:FB:80:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_0-GfWDNh_l2QpBKxKA98_7gB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Stenbv2yvvPYAez0xZHgrVizJNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.228.0/22
IPv6:
2001:67c:2f0::/48
Signature Algorithm: sha256WithRSAEncryption
6b:5f:8d:db:98:07:1a:3f:a2:d3:9c:fc:50:17:6d:d2:8d:c2:
37:7c:88:d8:11:7b:83:e0:7c:a7:21:2a:2d:ae:8c:ff:e1:32:
b6:35:18:cd:4a:ef:35:cc:4f:70:5c:7a:3b:6e:f0:31:54:a4:
d2:3e:89:f8:5b:63:60:31:4f:26:c3:16:8d:33:43:52:42:e2:
04:65:ba:57:44:0f:59:cd:a7:7b:88:5b:bb:d6:17:ab:8b:29:
d2:27:e4:9a:36:92:76:8b:97:eb:bc:10:7f:98:f1:09:98:30:
96:ae:e1:c9:bd:92:d3:0c:bd:16:08:00:27:65:f9:75:c9:58:
f4:92:a9:8d:22:77:f2:8b:d3:8c:a6:2a:ca:df:c8:7e:68:29:
5b:48:2d:20:d9:05:82:9b:d0:59:21:82:b9:da:c7:85:c1:96:
9f:aa:dc:74:95:ee:93:45:03:33:b5:fa:e0:08:7a:f7:94:06:
c1:cc:70:a6:82:35:d7:6a:59:31:ff:c3:c6:fb:a8:40:9d:8c:
d1:64:8f:3f:8a:e3:11:ee:15:93:56:9d:27:fe:39:17:99:ef:
80:8b:9a:39:be:bc:ef:cc:8d:d4:88:03:1f:19:60:2b:b6:2f:
73:6a:fd:cc:8b:3c:f9:5b:ed:c1:8f:e6:b1:ce:0b:59:67:68:
12:c6:0d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:31 2025 by rpki-client