Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/mhWvxI8EOi45azlhd6cDCrnUq4s.roa
File: mhWvxI8EOi45azlhd6cDCrnUq4s.roa (raw, json)
Hash identifier: qQTNLhM5nDsHKnLRmuJZMmESRBowgpHkQMQwErfKAs0=
Subject key identifier: 9A:15:AF:C4:8F:04:3A:2E:39:6B:39:61:77:A7:03:0A:B9:D4:AB:8B
Certificate issuer: /CN=63d92b8256159894d2b9b25f4d85986c172723c3
Certificate serial: 018570673BFD138E6CCF731BE954EA0788AB
Authority key identifier: 63:D9:2B:82:56:15:98:94:D2:B9:B2:5F:4D:85:98:6C:17:27:23:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/mhWvxI8EOi45azlhd6cDCrnUq4s.roa
Signing time: Mon 02 Jan 2023 02:54:51 +0000
ROA not before: Mon 02 Jan 2023 02:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 81.20.41.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:3b:fd:13:8e:6c:cf:73:1b:e9:54:ea:07:88:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63d92b8256159894d2b9b25f4d85986c172723c3
Validity
Not Before: Jan 2 02:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a15afc48f043a2e396b396177a7030ab9d4ab8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:03:cc:24:7f:b4:bf:9b:2f:00:b2:50:f0:eb:
3f:ea:c7:5b:ab:ad:f9:58:12:9c:ae:59:49:09:26:
82:a1:41:a7:1b:f7:03:93:bd:bf:35:1e:59:c8:96:
f8:02:f0:f4:e8:23:07:4b:0e:34:e7:cf:dc:4e:3c:
00:46:08:2b:19:49:fc:5d:dd:6a:10:22:8f:e5:39:
78:bb:82:47:f9:ce:13:76:98:d9:1c:44:c2:9a:9f:
c7:a5:ce:62:6a:0d:13:68:8a:f6:bf:2a:65:19:d5:
ff:0c:57:1e:c0:0a:d8:56:99:16:21:5f:2d:61:8b:
2f:14:c6:82:a5:ab:a1:8b:fc:00:ac:7c:e4:89:55:
91:28:3f:82:54:59:08:6f:f6:2b:5f:a3:1a:50:e2:
35:c7:39:be:b8:32:ea:b1:63:97:31:79:9f:4e:1a:
f5:26:5f:ba:d5:24:cb:f6:36:be:bd:5e:26:51:5e:
83:36:5b:48:2f:3f:77:24:49:ed:d9:94:61:5c:dd:
67:d8:6a:0f:2b:16:48:51:19:22:77:23:df:3a:a7:
4f:75:ec:9c:83:15:89:ed:8e:e7:0d:45:3b:9d:a4:
2a:4e:f7:15:5d:19:d0:ec:cb:19:78:60:87:dc:58:
7e:0d:41:ed:e4:6f:c0:bb:a9:47:9c:73:03:3b:5e:
ff:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:15:AF:C4:8F:04:3A:2E:39:6B:39:61:77:A7:03:0A:B9:D4:AB:8B
X509v3 Authority Key Identifier:
keyid:63:D9:2B:82:56:15:98:94:D2:B9:B2:5F:4D:85:98:6C:17:27:23:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/mhWvxI8EOi45azlhd6cDCrnUq4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.20.41.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:12:27:9a:da:65:18:8c:51:96:ab:53:ac:ef:b0:d0:09:ca:
4c:7d:5c:85:1e:8a:d1:2b:e0:09:b5:a8:a8:04:a7:84:ed:03:
75:2b:26:94:2e:8b:6e:55:42:cf:46:0b:20:04:c2:4a:7a:3b:
b1:4e:48:29:7d:f8:21:de:a8:35:63:36:b4:7c:b3:3b:d4:a3:
45:8e:1e:bb:1b:94:50:94:1c:b5:c8:bb:ab:89:c9:56:12:25:
96:e1:fe:80:3d:a2:36:d0:7e:ac:ea:0d:a5:26:76:e6:42:23:
4b:7e:36:4e:d3:d5:8f:07:fa:f1:3f:e1:0c:cc:56:0f:be:46:
bd:ee:71:be:27:bf:c5:eb:57:f3:aa:27:0e:f9:fb:42:a5:f0:
3b:2d:01:8f:2a:8d:67:76:d4:2d:ef:11:13:e9:9e:a7:cc:4b:
57:7b:bf:99:df:c6:d0:5c:15:8e:b2:b9:4c:23:07:2f:b5:f8:
0c:c9:1b:2d:06:19:bf:23:8c:1d:a0:7b:39:46:37:f6:3b:76:
58:ec:18:01:7a:e7:dd:ae:b1:48:fb:29:f5:f2:e9:30:ec:d2:
6c:0a:84:00:e8:ac:09:c4:92:9f:9a:e1:5d:5f:14:52:90:56:
80:d1:fa:85:4e:05:b0:d2:ce:da:c3:9d:c3:6e:af:76:64:54:
91:cc:a3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:25 2025 by rpki-client