Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/oPn0yqsKxTlEA4L8XBAGCOpfTaE.roa
File: oPn0yqsKxTlEA4L8XBAGCOpfTaE.roa (raw, json)
Hash identifier: nyNiwEQyBX2Wef6CQrL1iSAF10qMBjF9QR1SfIMuT3Y=
Subject key identifier: A0:F9:F4:CA:AB:0A:C5:39:44:03:82:FC:5C:10:06:08:EA:5F:4D:A1
Certificate issuer: /CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473
Certificate serial: 095BF0C5
Authority key identifier: F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/oPn0yqsKxTlEA4L8XBAGCOpfTaE.roa
Signing time: Sat 01 Jan 2022 02:54:13 +0000
ROA not before: Sat 01 Jan 2022 02:54:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5486
IP address blocks: 81.5.0.0/21 maxlen: 21
81.5.16.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157020357 (0x95bf0c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473
Validity
Not Before: Jan 1 02:54:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a0f9f4caab0ac539440382fc5c100608ea5f4da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:74:1f:dc:a9:35:ba:b5:71:c6:a7:80:23:3a:
7c:88:d6:ce:0c:d1:7e:3f:72:bf:d6:7c:42:5d:65:
39:5f:1a:21:00:c6:8f:ea:a9:ec:6c:bb:b0:3a:40:
06:55:1a:08:57:53:4e:d6:b8:73:44:b6:2c:f6:65:
16:0b:42:09:89:88:65:f5:cb:da:33:d7:4d:06:b6:
fe:3c:ef:d6:f6:f2:1f:d7:d4:ec:ab:9d:37:1a:85:
c2:9e:9b:d9:3a:26:d6:91:72:f8:c1:73:05:f1:35:
29:b2:b7:70:9d:ed:e5:4e:f2:c9:e9:42:ce:da:6e:
9c:96:2b:98:7f:4e:e9:e2:23:9f:69:8f:eb:24:35:
3c:fc:31:62:75:20:66:ed:eb:16:fa:6f:51:20:bf:
5d:ec:54:e0:21:f5:33:d8:0b:15:a5:7f:64:c0:05:
c8:22:ee:aa:66:e8:96:34:3e:9c:8e:bd:a7:cc:d4:
f2:0d:0d:63:e5:ed:72:b8:2a:30:9e:14:aa:c6:0e:
18:67:83:9c:1e:ba:c1:4e:71:bd:e5:d0:06:b5:fa:
39:28:e2:8f:f3:4b:19:50:04:16:35:c3:f3:22:e4:
3b:f5:1f:f0:de:e5:45:a2:75:a7:13:f5:7e:a7:18:
17:a1:60:f4:e2:9e:94:8e:4f:3e:e4:13:e0:04:c1:
38:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F9:F4:CA:AB:0A:C5:39:44:03:82:FC:5C:10:06:08:EA:5F:4D:A1
X509v3 Authority Key Identifier:
keyid:F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/oPn0yqsKxTlEA4L8XBAGCOpfTaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.0.0/21
81.5.16.0/21
Signature Algorithm: sha256WithRSAEncryption
4e:f3:5b:47:53:90:9f:57:6a:ad:eb:30:c0:11:12:4a:90:7d:
db:2b:75:20:fe:b0:5d:7d:79:f9:43:52:32:26:3f:d3:41:37:
e7:41:08:ed:c7:ed:ae:92:d1:e9:c2:5a:59:2f:43:5b:b9:07:
fc:0c:9b:4b:f7:9a:b5:af:80:95:e4:fe:32:09:6e:67:c8:1e:
44:cc:7b:25:60:dc:45:cc:a5:34:a8:9b:66:73:30:56:8f:49:
18:0e:20:1b:ab:a9:ae:6e:90:cc:58:26:62:61:ea:40:57:4e:
3f:8f:56:6f:61:53:b7:4d:ea:74:e4:59:1f:53:01:97:ff:45:
3b:e7:09:2b:dd:4d:e7:a3:59:16:e8:18:d1:d0:74:5b:da:f1:
ec:85:2e:81:32:26:1d:a3:0b:57:7e:06:4a:5a:83:3c:aa:f7:
de:3d:80:82:e4:49:f2:f0:34:98:f9:07:ba:37:0b:75:28:08:
7b:92:60:3f:d6:b3:d5:91:21:f9:8b:2e:ac:97:20:24:b2:6b:
d0:a3:72:d9:3d:14:14:e2:a5:08:14:26:95:d3:2a:2c:4e:6c:
0a:d0:5c:59:83:84:ff:8b:81:e8:2b:74:a4:64:15:2c:48:93:
9f:db:d6:d0:c5:6f:df:ab:50:f2:71:45:cd:fb:0e:dd:23:8f:
ee:3f:9b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:18:45 2025 by rpki-client