Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/leKWZ4bo2Kf147zDzDyx7be0je4.roa
File: leKWZ4bo2Kf147zDzDyx7be0je4.roa (raw, json)
Hash identifier: 2BRDc4XeoUrhN5fdde4IkuJTMIyvYUnFURyevJOc77s=
Subject key identifier: 95:E2:96:67:86:E8:D8:A7:F5:E3:BC:C3:CC:3C:B1:ED:B7:B4:8D:EE
Certificate issuer: /CN=90eb336d5604d47bae817238b0dbb49771e24729
Certificate serial: 13246527
Authority key identifier: 90:EB:33:6D:56:04:D4:7B:AE:81:72:38:B0:DB:B4:97:71:E2:47:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kOszbVYE1HuugXI4sNu0l3HiRyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/leKWZ4bo2Kf147zDzDyx7be0je4.roa
Signing time: Sat 01 Jan 2022 00:57:43 +0000
ROA not before: Sat 01 Jan 2022 00:57:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 680
IP address blocks: 141.60.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 321152295 (0x13246527)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90eb336d5604d47bae817238b0dbb49771e24729
Validity
Not Before: Jan 1 00:57:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=95e2966786e8d8a7f5e3bcc3cc3cb1edb7b48dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d7:dd:a7:14:64:81:8b:cf:7c:59:60:14:73:
b3:a9:d4:2f:9c:ff:d3:23:7d:d7:53:55:ec:b6:af:
e0:47:3f:10:20:25:00:69:82:6f:7c:ea:45:88:d6:
43:46:3f:82:cb:e6:81:28:26:67:4d:8c:dc:20:09:
a7:40:43:7c:eb:6c:a3:3d:93:e6:56:23:cd:4f:21:
3e:f2:16:ee:5b:f4:76:17:b1:a5:b6:13:16:e4:20:
1b:4f:7c:c2:1a:77:d0:f0:0d:15:10:11:52:0e:19:
9c:63:f7:c9:3b:a1:66:46:14:5c:20:94:24:1d:e5:
ed:c2:9f:35:42:37:c1:06:5f:d7:a5:2d:5c:ff:e1:
93:c0:3d:96:6e:0b:03:04:0a:90:24:ab:b8:92:01:
b7:9e:0b:cc:20:bd:cc:be:15:b8:fb:fe:b8:c9:84:
70:b3:c8:e2:ac:07:38:2b:f2:52:4e:bc:99:94:91:
56:b9:0b:c5:f3:b6:d5:cd:e0:b1:39:d1:5b:f3:6c:
f5:a1:22:ac:2b:2b:82:e3:ba:0d:5e:28:85:cd:9c:
9c:6c:a7:3d:8f:1a:37:de:4a:ce:fb:a4:a5:c8:ec:
86:26:f9:9e:31:74:86:95:6e:76:2b:c6:e1:70:f1:
16:60:60:e1:d4:c8:11:43:04:19:b0:99:84:47:0d:
ce:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E2:96:67:86:E8:D8:A7:F5:E3:BC:C3:CC:3C:B1:ED:B7:B4:8D:EE
X509v3 Authority Key Identifier:
keyid:90:EB:33:6D:56:04:D4:7B:AE:81:72:38:B0:DB:B4:97:71:E2:47:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kOszbVYE1HuugXI4sNu0l3HiRyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/leKWZ4bo2Kf147zDzDyx7be0je4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.60.0.0/16
Signature Algorithm: sha256WithRSAEncryption
67:90:c2:09:f9:f8:22:8b:2a:d6:e2:57:86:3d:0d:12:fc:7c:
45:1a:3e:30:1f:12:2c:7a:6c:b5:6b:87:f9:70:60:78:4d:57:
43:c6:ca:9e:92:aa:3f:a4:9c:49:eb:b7:15:21:8a:97:4a:e3:
78:ff:96:31:43:41:6f:1a:46:7a:8f:bf:6f:69:4e:eb:a7:09:
9e:b6:48:b3:8c:e8:99:db:e6:ec:0f:0e:48:60:e8:c5:a0:78:
84:fc:1f:1a:08:25:b3:1b:10:4e:06:73:6e:a4:95:e5:35:9e:
80:d9:49:cb:74:fe:c6:da:45:d4:34:73:9c:11:b3:c6:33:82:
bd:d4:13:17:62:00:99:11:41:7e:9c:51:01:d2:fe:7d:9a:4b:
c4:39:c2:01:1d:a5:8e:b7:0d:56:a5:ed:a0:54:a5:53:80:51:
51:5a:93:05:d2:b8:76:0f:c3:7b:88:61:60:70:08:5a:40:07:
73:b4:a9:a8:0d:3f:96:f0:04:fe:95:85:0d:db:5c:14:4b:df:
dc:9b:ba:2a:82:ed:8f:9b:6a:3c:b2:fc:7b:8b:42:ac:18:02:
e6:09:6b:eb:b0:b3:61:ea:de:ac:a2:c6:2a:da:df:04:83:53:
bc:1f:cb:3b:3a:f0:62:e7:43:e3:6c:38:8d:de:61:b5:e7:dc:
fa:4c:6a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:13:49 2025 by rpki-client