Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/jBjLbi7kRlxk387bdmHb4U58sGk.roa
File: jBjLbi7kRlxk387bdmHb4U58sGk.roa (raw, json)
Hash identifier: 1bHHnmNlNaWpuXAg7IkK+59ZeX4hpfb4iQSz1ujJ1ss=
Subject key identifier: 8C:18:CB:6E:2E:E4:46:5C:64:DF:CE:DB:76:61:DB:E1:4E:7C:B0:69
Certificate issuer: /CN=568ae803b9ba38855401827b3eece14505a9c0f6
Certificate serial: 01856F79917232FFDD4FCCE5EE53344B97A2
Authority key identifier: 56:8A:E8:03:B9:BA:38:85:54:01:82:7B:3E:EC:E1:45:05:A9:C0:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/jBjLbi7kRlxk387bdmHb4U58sGk.roa
Signing time: Sun 01 Jan 2023 22:35:16 +0000
ROA not before: Sun 01 Jan 2023 22:35:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199732
IP address blocks: 81.27.245.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:91:72:32:ff:dd:4f:cc:e5:ee:53:34:4b:97:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568ae803b9ba38855401827b3eece14505a9c0f6
Validity
Not Before: Jan 1 22:35:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c18cb6e2ee4465c64dfcedb7661dbe14e7cb069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:aa:96:2f:b7:2e:8a:68:81:34:28:b5:42:48:
33:44:4e:54:38:f0:ed:bc:fd:33:e3:53:0c:d8:73:
bc:f6:50:a2:86:0a:28:c8:ed:eb:cc:fc:e8:eb:b7:
1c:8e:39:64:d8:a8:ac:1b:33:21:e0:5f:48:9e:38:
45:a5:e8:63:1d:d6:02:93:ba:e7:ac:75:4a:c8:17:
57:ed:1a:db:ca:4f:12:c5:6e:6a:14:55:8d:66:c0:
97:0c:5b:29:35:81:9e:02:6e:ef:f5:3b:42:77:e4:
1e:ff:4a:54:ef:d1:88:70:fc:51:52:59:23:81:4f:
5c:87:7f:61:a0:31:78:2d:57:e6:28:84:a3:f1:ed:
de:8f:70:ee:6c:a3:44:a2:43:cb:62:53:b5:d4:f8:
12:1c:0d:fd:5c:42:b2:76:9c:65:ea:32:52:0e:53:
b1:fc:23:c9:f7:f1:24:64:56:ad:4d:fe:8e:1e:65:
26:c5:83:7a:9e:bd:5d:6f:f7:6c:dc:72:92:4a:4e:
dd:a6:dc:9f:21:b9:a7:a6:9c:d2:c0:a0:7d:b7:74:
3e:d9:fb:1b:20:e0:59:03:e0:e5:5c:28:9c:ab:60:
d1:91:4a:bf:a4:d5:9a:d3:ed:8f:8c:09:b0:e1:e5:
a4:fa:9a:3d:a7:90:fb:58:1e:66:2c:c2:9b:21:6c:
e8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:18:CB:6E:2E:E4:46:5C:64:DF:CE:DB:76:61:DB:E1:4E:7C:B0:69
X509v3 Authority Key Identifier:
keyid:56:8A:E8:03:B9:BA:38:85:54:01:82:7B:3E:EC:E1:45:05:A9:C0:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/jBjLbi7kRlxk387bdmHb4U58sGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.27.245.0/24
Signature Algorithm: sha256WithRSAEncryption
14:a3:c7:9c:36:93:1d:0d:18:38:04:26:94:a7:d9:b9:b0:e0:
8a:da:af:4c:56:35:80:fb:97:a4:4d:08:0c:06:66:fc:97:b7:
c8:3e:93:43:ff:bf:97:dd:fe:42:9d:1e:23:41:ca:3b:13:01:
bc:22:f2:6c:a0:30:06:6f:01:46:76:1c:55:bc:2b:8d:2d:29:
34:1f:35:7f:e9:82:33:15:56:34:68:17:c9:76:7e:09:92:f4:
4f:92:e9:57:64:11:19:ab:0b:95:64:d3:cb:92:80:18:74:61:
a1:a4:dd:ce:81:0c:2d:ba:e4:a0:ad:26:8b:af:07:af:b1:bb:
6d:9d:2b:17:64:01:a7:18:3e:31:21:af:03:b7:0d:60:a4:9d:
5d:90:4d:37:78:1b:26:83:20:bf:6c:eb:83:7d:b5:72:d1:9d:
23:0a:21:58:43:bf:53:47:77:73:70:d7:dc:35:d7:b2:7e:7c:
2f:0c:ce:f9:fe:8c:4e:cd:65:bb:51:69:3d:dc:0c:a6:28:97:
85:d6:a8:44:59:b2:d5:45:5d:e9:ce:93:9e:8b:c3:f0:ef:ac:
1e:f6:f1:77:3a:54:26:f2:7b:70:34:31:f6:bd:42:3d:cb:88:
24:70:f4:95:8e:61:c5:0b:0d:cd:a6:b2:3c:e6:d6:59:c0:68:
d9:43:1e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:17:02 2025 by rpki-client