Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/CtgxU8bLLLcoh-y-4Le1m9dZqn4.roa
File: CtgxU8bLLLcoh-y-4Le1m9dZqn4.roa (raw, json)
Hash identifier: YTV6ya7odSqSbgQJXR4yBUsD5fUSa7alWylxBgDgdNg=
Subject key identifier: 0A:D8:31:53:C6:CB:2C:B7:28:87:EC:BE:E0:B7:B5:9B:D7:59:AA:7E
Certificate issuer: /CN=66fb7727d64a518c7cd485e4823ee78a9e291008
Certificate serial: 844DBC
Authority key identifier: 66:FB:77:27:D6:4A:51:8C:7C:D4:85:E4:82:3E:E7:8A:9E:29:10:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/CtgxU8bLLLcoh-y-4Le1m9dZqn4.roa
Signing time: Sat 01 Jan 2022 00:58:41 +0000
ROA not before: Sat 01 Jan 2022 00:58:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44066
IP address blocks: 5.154.181.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8670652 (0x844dbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66fb7727d64a518c7cd485e4823ee78a9e291008
Validity
Not Before: Jan 1 00:58:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ad83153c6cb2cb72887ecbee0b7b59bd759aa7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5a:9f:33:a1:db:df:3b:9c:31:dc:07:96:ce:
da:e4:fe:5f:c6:ad:a9:de:04:52:84:3b:ce:99:77:
a8:e1:23:4f:8d:42:23:72:80:dd:41:15:55:8c:a2:
07:11:e0:39:df:ff:a1:89:bb:75:0f:af:65:8f:8d:
bf:f4:11:0f:7a:32:e0:87:16:de:c4:69:f8:16:9b:
5a:72:53:90:58:bb:b5:22:18:b8:47:f8:73:0f:61:
e2:7a:30:45:a2:c0:62:02:fc:c1:cd:a2:28:af:39:
83:b8:4b:54:bf:9e:a9:03:b7:c6:c0:de:de:f7:ec:
eb:f9:62:0f:19:5c:f5:63:f2:99:a6:ba:84:8a:ca:
12:40:f7:1f:3a:23:0c:22:16:32:c4:34:57:6b:df:
dd:da:ec:97:80:ed:bd:48:8e:92:c5:d6:da:fb:2a:
53:2c:0d:ca:83:71:f7:4c:f8:77:0e:1c:79:72:4d:
ef:13:68:f9:62:7a:e0:9c:a3:9e:15:19:70:d7:b9:
64:18:a8:05:b1:74:3c:86:bd:8f:3d:52:4e:ab:f6:
ef:cc:7f:1d:f2:3b:be:1d:37:4d:e7:b5:98:45:95:
5e:d2:95:9e:37:bb:55:6e:aa:6e:17:f0:d1:99:c3:
bc:59:de:1d:9a:67:45:fd:83:e5:41:cb:1a:e9:9e:
11:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D8:31:53:C6:CB:2C:B7:28:87:EC:BE:E0:B7:B5:9B:D7:59:AA:7E
X509v3 Authority Key Identifier:
keyid:66:FB:77:27:D6:4A:51:8C:7C:D4:85:E4:82:3E:E7:8A:9E:29:10:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/CtgxU8bLLLcoh-y-4Le1m9dZqn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.181.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:47:fa:fd:90:db:54:e7:a3:5b:8a:26:32:e5:e9:18:d9:82:
a8:74:4a:dd:b1:7a:0a:c3:34:fe:26:47:ea:57:19:b0:b4:52:
3d:dc:3d:63:8b:9c:e1:d4:bf:af:bf:18:9f:ba:50:ab:84:2e:
59:88:4f:90:7b:82:5a:16:46:05:b9:a8:d8:5a:79:de:02:b5:
fd:e5:39:e7:ca:ac:31:a7:ea:c2:e9:d5:1a:4b:e5:76:62:3a:
0b:fc:78:82:7e:3d:7b:6a:d3:54:a8:47:5d:78:50:40:d4:67:
97:39:13:93:15:f1:be:0e:5c:87:4e:39:6e:36:5b:3b:90:21:
71:e1:7c:48:05:ce:17:21:f6:c2:2b:9c:74:0e:f4:cf:3f:99:
18:aa:59:c5:6e:70:a2:3b:b8:23:69:ad:91:ab:85:06:4a:1d:
8f:ec:f4:16:82:27:41:38:31:26:8c:62:e5:ca:7d:3f:f2:f7:
4f:d3:8a:27:08:2f:26:4a:bf:43:cc:b2:68:02:cc:5c:91:db:
43:11:0c:96:19:be:df:23:5c:a9:ba:8f:79:71:77:54:bb:30:
92:0c:0d:57:bb:2a:54:08:1f:e0:b2:09:aa:43:62:c8:7c:f4:
d0:c4:fa:22:4d:66:f1:21:40:e6:a8:c2:d9:54:bc:95:fb:4e:
75:d4:65:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:37 2025 by rpki-client