Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/15vq-h1GomkmmfSH0q0Ym1Gkkdk.roa
File: 15vq-h1GomkmmfSH0q0Ym1Gkkdk.roa (raw, json)
Hash identifier: hcEg+kk6vx15vtTfwqRs4/Ly1/+2cWO+OZeD5qNPVks=
Subject key identifier: D7:9B:EA:FA:1D:46:A2:69:26:99:F4:87:D2:AD:18:9B:51:A4:91:D9
Certificate issuer: /CN=415a412127b514f6455ec8a86e29d38eb0abb5ac
Certificate serial: 01856F4B87367116DE95C8874F2409563F1F
Authority key identifier: 41:5A:41:21:27:B5:14:F6:45:5E:C8:A8:6E:29:D3:8E:B0:AB:B5:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVpBISe1FPZFXsiobinTjrCrtaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/15vq-h1GomkmmfSH0q0Ym1Gkkdk.roa
Signing time: Sun 01 Jan 2023 21:44:58 +0000
ROA not before: Sun 01 Jan 2023 21:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47575
IP address blocks: 109.205.44.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:87:36:71:16:de:95:c8:87:4f:24:09:56:3f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=415a412127b514f6455ec8a86e29d38eb0abb5ac
Validity
Not Before: Jan 1 21:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d79beafa1d46a2692699f487d2ad189b51a491d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e1:2f:b6:84:5f:01:5d:96:76:c5:6f:86:02:
2b:50:11:c4:cc:bd:49:78:c4:49:92:9a:9a:d9:01:
81:df:ad:95:77:57:9f:75:92:2a:28:f4:c5:01:57:
01:73:8a:d2:e3:8c:e6:c2:5d:69:30:7a:69:0f:58:
5e:e7:fd:b1:71:65:a4:97:0c:1f:be:98:49:3e:3e:
af:bb:e5:53:f2:5c:61:ce:6b:06:67:0e:0c:98:b0:
43:f0:94:c8:6a:4a:2f:8f:3b:4d:bb:d4:46:e9:47:
a7:14:33:00:18:c8:77:4d:71:62:86:b0:f0:64:5e:
ba:4f:c5:84:15:cc:99:7e:f0:bf:2c:ff:55:65:85:
a9:39:14:90:6e:32:d0:c9:05:bf:91:b7:dd:eb:e0:
34:9e:d8:57:23:54:9d:1c:19:db:9d:c1:6f:9e:b2:
64:f6:c3:ba:9d:fb:fd:1f:84:dd:25:f8:d0:e8:00:
f4:1e:12:df:8f:80:39:f2:45:fb:6d:33:b2:ed:7d:
bf:8b:78:3e:bd:14:07:71:3b:d1:27:72:65:22:58:
56:a9:71:3b:6e:aa:c8:94:71:84:f4:e7:d1:08:76:
ff:8d:cc:04:e7:cd:56:5e:cf:64:51:f1:c7:1e:86:
36:90:e3:b9:c8:8e:74:a8:6c:d9:d2:aa:f3:2d:6a:
a9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:9B:EA:FA:1D:46:A2:69:26:99:F4:87:D2:AD:18:9B:51:A4:91:D9
X509v3 Authority Key Identifier:
keyid:41:5A:41:21:27:B5:14:F6:45:5E:C8:A8:6E:29:D3:8E:B0:AB:B5:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVpBISe1FPZFXsiobinTjrCrtaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/15vq-h1GomkmmfSH0q0Ym1Gkkdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/QVpBISe1FPZFXsiobinTjrCrtaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.44.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:24:c8:b9:a8:eb:20:5c:8d:3b:da:59:90:8a:be:ac:6c:c0:
b7:ae:8e:9a:39:af:a2:7f:03:49:ea:d5:9b:87:ff:11:17:43:
f6:2b:43:9e:07:d9:08:01:b9:85:9f:ef:89:81:a1:f3:a0:b7:
bb:54:d3:02:07:55:b2:5f:eb:c6:be:01:ee:66:66:b5:c7:d1:
66:cc:cf:c8:b4:a7:ea:61:8b:b5:f2:07:43:f2:2c:b5:5a:47:
44:27:ec:fe:9b:26:36:c4:cc:dc:e1:69:d1:a2:c8:b0:6c:c9:
27:82:5b:c2:dc:5e:a6:ab:82:0f:2b:ca:d9:85:bf:c9:eb:1f:
f5:a0:20:41:7d:86:2a:88:31:5b:34:1e:f9:ca:8d:f6:c1:dd:
88:3a:70:c3:2b:0f:4c:8c:07:f5:48:f0:72:bf:f3:35:33:04:
33:f4:cd:eb:a7:c8:65:9c:fa:13:38:57:20:1c:c8:24:a6:35:
7b:5c:82:ad:36:67:96:ab:ab:ae:c4:19:39:ee:a8:a3:a7:40:
fc:ee:c2:93:c7:49:f9:94:74:f2:fc:ae:99:26:18:1e:ef:d5:
19:2b:ec:6e:02:0f:96:bc:d3:3d:b0:5d:83:00:7d:c1:0a:ba:
2e:44:b6:5d:7b:68:97:d7:ea:5f:6b:a8:fb:14:4b:5a:c6:39:
7f:8c:4d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:01 2025 by rpki-client