Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/PVZZkkLFARjy4qND1DGU1kDeXYg.roa
File: PVZZkkLFARjy4qND1DGU1kDeXYg.roa (raw, json)
Hash identifier: Q84DlcaLawuR3rjY0gjFJpO+N2FwPIhErJ+pNdQVCqQ=
Subject key identifier: 3D:56:59:92:42:C5:01:18:F2:E2:A3:43:D4:31:94:D6:40:DE:5D:88
Certificate issuer: /CN=015b6d1596ac0501a71a393447051a62ff1dda16
Certificate serial: 01866E1ECB32E4FE35025C09003C7E152E90
Authority key identifier: 01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/PVZZkkLFARjy4qND1DGU1kDeXYg.roa
Signing time: Mon 20 Feb 2023 09:19:17 +0000
ROA not before: Mon 20 Feb 2023 09:19:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199827
IP address blocks: 128.0.80.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6e:1e:cb:32:e4:fe:35:02:5c:09:00:3c:7e:15:2e:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015b6d1596ac0501a71a393447051a62ff1dda16
Validity
Not Before: Feb 20 09:19:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d56599242c50118f2e2a343d43194d640de5d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8d:72:8d:37:e0:e4:24:58:75:e3:ca:45:81:
00:21:f7:bd:0d:55:44:6f:58:ae:d4:da:90:ab:cc:
e4:a7:4f:f6:43:a5:79:76:d4:a9:af:d2:0f:bb:7c:
ed:d2:f9:35:90:5a:c3:af:14:aa:6b:14:57:f0:c8:
b5:8b:0d:a9:5e:63:a0:5d:60:61:f1:37:23:97:8e:
a6:42:7c:34:0e:f3:b4:b6:1b:4c:11:ea:8e:ef:05:
87:0a:ff:30:9a:fb:6b:a5:bb:5d:88:7c:47:31:54:
9b:7e:9f:de:ca:db:80:94:6a:63:8a:e0:df:f5:7a:
ed:59:e8:91:95:7f:04:0e:45:9d:ec:cf:3b:a4:16:
db:4d:eb:9d:e8:44:be:a9:85:ee:24:2a:31:c2:d3:
ed:4c:31:b3:70:98:dd:b7:f7:95:fe:50:1a:91:fd:
b6:a6:c5:07:59:db:5b:7c:59:2e:9c:f0:a6:e7:24:
ea:e4:67:2e:48:15:4c:d6:a3:26:df:c4:52:24:1a:
55:bc:13:69:2d:f1:40:eb:cb:d6:16:56:8d:a7:81:
6e:e1:f6:9c:9b:5a:0e:7d:d6:aa:4f:d4:f2:ba:e4:
70:1a:4e:cd:0d:cc:af:4d:5f:58:0f:a9:e2:c9:18:
d0:8c:19:1d:6a:45:4c:03:5f:28:0c:65:0a:17:aa:
cf:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:56:59:92:42:C5:01:18:F2:E2:A3:43:D4:31:94:D6:40:DE:5D:88
X509v3 Authority Key Identifier:
keyid:01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/PVZZkkLFARjy4qND1DGU1kDeXYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.0.80.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:05:fd:43:ef:58:12:5f:4c:81:62:d3:c2:7c:a7:ce:9d:90:
37:eb:00:92:93:ba:e2:4d:9f:15:ff:4a:eb:2a:09:31:28:ae:
0b:fe:b0:c9:28:d0:0c:65:c1:8f:7a:f5:e8:68:cf:7a:73:75:
5d:d2:17:21:18:c5:25:c6:1b:73:70:3b:63:29:15:13:1b:51:
8b:89:cb:d3:67:2a:3b:2c:b1:8f:58:de:e4:9a:1c:18:c8:02:
eb:f3:ce:45:65:68:52:84:54:c3:7c:69:74:cb:b2:4b:13:e7:
82:0a:21:5d:88:6a:ce:9e:19:66:c1:a3:34:8d:05:21:88:4e:
d6:fa:0b:51:e5:40:81:a5:ad:d3:63:f9:72:3b:d3:03:3c:7b:
b4:77:f8:4d:5b:5e:e1:b2:56:d8:f0:61:34:ce:17:1e:72:01:
fb:c5:92:a6:95:35:8f:f1:eb:c9:bb:97:83:d4:2a:76:4a:5e:
fa:75:6f:86:72:86:98:29:96:74:ac:ba:64:14:57:61:27:6f:
07:2e:07:8c:c8:9f:28:06:a7:6c:81:0a:93:24:34:05:6a:bd:
1e:aa:3a:26:d5:ec:90:ac:2c:10:49:a5:e6:2c:bf:bf:4b:a4:
26:06:45:95:b1:ff:5b:6e:c5:8a:89:3b:6a:a1:db:c3:fc:01:
ad:14:fe:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:44:24 2025 by rpki-client