Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/getDN53bUsYU2HxlSJHNQ4K5QlU.roa
File: getDN53bUsYU2HxlSJHNQ4K5QlU.roa (raw, json)
Hash identifier: n05y8FDigtGtCaOdFcm61Kh5EfGfAHU4bqLMU0Xp+x4=
Subject key identifier: 81:EB:43:37:9D:DB:52:C6:14:D8:7C:65:48:91:CD:43:82:B9:42:55
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 0186AB5A34238023A372670F5672C0CAB4A8
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/getDN53bUsYU2HxlSJHNQ4K5QlU.roa
Signing time: Sat 04 Mar 2023 06:41:00 +0000
ROA not before: Sat 04 Mar 2023 06:41:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54641
IP address blocks: 109.111.60.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ab:5a:34:23:80:23:a3:72:67:0f:56:72:c0:ca:b4:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Mar 4 06:41:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=81eb43379ddb52c614d87c654891cd4382b94255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:72:38:c9:f4:42:db:ca:f4:2a:51:cc:ff:c1:
63:68:6d:d8:0f:4e:27:72:3a:fc:32:ed:9e:95:c5:
44:1f:b1:3f:74:55:fd:dc:ce:8f:b8:88:a8:c6:5a:
82:dd:37:c1:a7:99:71:02:45:74:a0:17:de:63:e2:
2f:68:35:01:ad:6f:63:f6:c6:7c:a8:1b:86:ba:6b:
45:e4:51:3a:83:a5:19:71:63:9f:fb:3f:56:52:e4:
df:df:ba:85:af:c1:bf:16:ef:1a:fb:68:ee:20:f4:
2e:5c:77:97:57:b7:53:73:ed:2f:5a:8e:d6:34:d7:
86:4f:a2:dc:84:c3:e3:e8:ca:a6:25:be:69:54:5e:
3a:65:c8:61:d4:b4:61:2e:e5:61:f9:ff:f8:71:1e:
ae:0e:76:2b:21:a9:ce:6f:1d:cd:74:e4:1e:60:fc:
66:64:8b:78:f8:d0:15:87:16:51:17:fb:24:0a:71:
aa:31:3d:67:bb:21:43:5e:c7:16:83:21:65:df:76:
c0:2e:11:15:e6:f9:53:a7:8c:cb:82:a4:c1:e9:3b:
e1:52:f1:b4:c3:65:39:d7:eb:cb:f0:04:1d:fb:21:
e2:4e:4e:41:96:fb:b7:6a:99:c0:4e:e3:7d:09:e1:
8c:47:e4:9d:0f:82:11:d0:4d:63:3b:2e:40:19:c4:
23:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:EB:43:37:9D:DB:52:C6:14:D8:7C:65:48:91:CD:43:82:B9:42:55
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/getDN53bUsYU2HxlSJHNQ4K5QlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.60.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:5d:c1:fc:ea:19:97:80:3d:90:84:52:d6:90:f2:d8:a2:f5:
5b:31:b4:56:5d:25:aa:25:2c:00:f5:c9:39:f1:a0:7c:c6:fc:
0d:5f:f1:aa:fa:cd:ad:9a:ea:41:4f:d5:b5:d8:5c:85:c3:9b:
3f:e6:db:dc:1e:3a:55:c1:da:79:95:a1:c9:13:db:58:c8:7b:
76:f2:94:4c:39:cb:8d:48:20:28:29:44:6b:1c:38:5a:0b:48:
34:ff:86:f2:c6:4d:b0:cd:84:f9:86:36:cc:6e:74:ef:87:54:
6e:d9:0c:1c:7f:d7:42:fc:7f:4c:ee:fd:2a:39:aa:ce:ef:ed:
b1:4d:6e:ff:ae:e1:f9:09:ce:b0:c2:dc:21:45:8b:25:9d:75:
df:cc:ab:6e:1c:d9:7e:3c:67:46:d9:1f:5f:94:36:fb:99:cb:
34:24:0d:c6:69:dd:f2:47:c1:e2:9f:b3:a4:63:14:f7:b3:8b:
45:ff:53:de:63:ae:cb:a3:e1:ad:22:50:93:22:9a:a9:a1:77:
70:1d:fd:dd:73:55:4d:ac:ad:a3:40:7e:6b:62:6a:9a:b1:56:
2b:ec:14:19:f4:4b:a5:fa:ee:fe:39:ab:88:f6:31:82:85:7b:
09:f8:9e:22:8a:1f:dc:65:0d:b2:b0:8c:14:80:cb:6f:b4:c3:
b1:4b:0e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:22 2025 by rpki-client