Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/4yd3xhXYv01gdcW4_nPgE0TKMwA.roa
File: 4yd3xhXYv01gdcW4_nPgE0TKMwA.roa (raw, json)
Hash identifier: Ulex48NN5XqFXry4MEiUkfkIz3DG5Wd/g3IPsQCW/XU=
Subject key identifier: E3:27:77:C6:15:D8:BF:4D:60:75:C5:B8:FE:73:E0:13:44:CA:33:00
Certificate issuer: /CN=015b6d1596ac0501a71a393447051a62ff1dda16
Certificate serial: 018317F7DFA2A57A341EF1CD30E8777FFF7B
Authority key identifier: 01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/4yd3xhXYv01gdcW4_nPgE0TKMwA.roa
Signing time: Wed 07 Sep 2022 12:41:04 +0000
ROA not before: Wed 07 Sep 2022 12:41:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41039
IP address blocks: 2.57.112.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:17:f7:df:a2:a5:7a:34:1e:f1:cd:30:e8:77:7f:ff:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015b6d1596ac0501a71a393447051a62ff1dda16
Validity
Not Before: Sep 7 12:41:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e32777c615d8bf4d6075c5b8fe73e01344ca3300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:da:3a:ad:a7:7a:98:c3:3a:06:0c:6c:56:f5:
00:b4:c1:ab:d2:8b:ff:4e:e1:80:37:6e:27:79:e4:
cf:c7:f7:9e:44:25:b8:4f:45:b5:29:9f:4f:c9:1c:
4d:f8:2a:40:c5:86:e6:04:20:a2:61:3e:11:f8:f3:
19:a6:62:44:33:b2:55:85:a4:d3:4d:b9:2c:ad:0a:
b1:f2:34:0e:6f:47:f5:80:ec:90:e4:56:d7:4f:ab:
84:41:ca:4e:04:21:04:e5:cc:88:18:67:8a:16:c3:
af:47:88:ed:12:6e:af:62:61:96:ea:e0:0a:27:67:
92:e2:58:2e:88:62:2e:74:a5:69:09:be:89:38:29:
52:06:18:be:29:5d:f7:4a:3e:ab:65:34:28:fd:95:
4b:80:a0:bc:f3:e7:50:fe:47:60:23:89:c0:08:97:
ec:a5:bd:b0:0e:5c:1c:85:98:da:af:58:cf:92:2f:
f0:28:6a:20:86:32:5a:1b:ae:4b:91:2d:02:bd:a7:
22:bd:85:df:ed:b4:4f:1d:d5:d2:62:33:0d:ce:08:
c7:ea:bd:8b:2d:fb:a5:13:39:f1:0b:a0:54:0f:ff:
c1:25:34:98:57:92:4d:e4:19:25:86:b1:3e:db:37:
d8:fd:ae:75:9e:0e:cb:16:b7:21:07:e3:6c:d3:fe:
e3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:27:77:C6:15:D8:BF:4D:60:75:C5:B8:FE:73:E0:13:44:CA:33:00
X509v3 Authority Key Identifier:
keyid:01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/4yd3xhXYv01gdcW4_nPgE0TKMwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.112.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:d2:ca:d8:97:2a:04:14:92:30:ab:f3:8c:fa:3b:0b:d4:c3:
2a:0e:63:54:dd:15:7e:86:b4:41:e3:26:3b:f4:55:fb:8b:1d:
64:72:ee:9e:84:3e:70:5c:c4:f4:92:f6:45:6a:9f:7a:21:7b:
5a:11:81:88:3f:31:4d:c7:d4:dd:71:39:f9:28:b6:de:d6:80:
c1:62:54:f4:5a:40:ee:41:eb:cf:a0:ec:e7:cd:47:15:b2:75:
54:2e:2b:ef:24:19:fa:31:61:7f:6d:d3:dd:03:a5:2d:8e:1b:
13:fd:54:79:67:ff:27:b9:9b:a1:76:3f:86:b3:6b:0f:cd:65:
8c:da:03:5f:dd:23:96:e0:db:d5:c9:5a:c3:5d:8a:6f:05:ef:
9d:14:58:f2:c5:21:2a:ff:f4:0d:a2:f1:bd:f0:e2:99:69:c1:
14:99:3e:a9:9d:93:1a:92:28:91:b9:61:69:0a:4a:08:bf:93:
74:71:dc:95:7f:f7:1d:65:60:15:ac:5f:f2:a2:32:62:4d:d5:
5b:b4:4e:38:70:5b:2e:b5:b3:95:26:34:48:64:49:4d:ca:8e:
6e:cf:02:b1:99:2c:e8:8e:e8:36:61:72:14:4b:df:30:aa:6c:
94:d9:c9:87:7e:a6:cf:db:05:56:30:b3:d2:f6:7f:a2:d6:18:
01:f6:bc:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:45:43 2025 by rpki-client