Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/ljFyB5E-Q1W0Mre5Ca_99Do7Dho.roa
File: ljFyB5E-Q1W0Mre5Ca_99Do7Dho.roa (raw, json)
Hash identifier: hplM2qfykXc5NY8Ye3ueIMoDbiEjIyC8wk1r0fH0dts=
Subject key identifier: 96:31:72:07:91:3E:43:55:B4:32:B7:B9:09:AF:FD:F4:3A:3B:0E:1A
Certificate issuer: /CN=015b6d1596ac0501a71a393447051a62ff1dda16
Certificate serial: 0183B23FBA44530D335D1EA8A090D36C1492
Authority key identifier: 01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/ljFyB5E-Q1W0Mre5Ca_99Do7Dho.roa
Signing time: Fri 07 Oct 2022 11:41:04 +0000
ROA not before: Fri 07 Oct 2022 11:41:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41039
IP address blocks: 92.242.96.0/19 maxlen: 24
195.184.192.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b2:3f:ba:44:53:0d:33:5d:1e:a8:a0:90:d3:6c:14:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015b6d1596ac0501a71a393447051a62ff1dda16
Validity
Not Before: Oct 7 11:41:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=96317207913e4355b432b7b909affdf43a3b0e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:15:4a:65:f3:2f:48:0d:7e:3f:5f:d7:e5:a6:
f5:45:52:7b:44:76:0e:8f:8d:72:f3:b3:9a:37:ab:
08:bb:e2:78:1f:d7:46:40:c4:2f:7d:38:17:c4:b3:
9f:80:3e:7f:75:7b:59:cb:ea:65:52:57:38:73:ce:
1f:8b:16:46:8f:b8:84:9f:d3:76:db:4c:87:29:83:
79:3a:51:bc:7c:7f:c7:19:fc:72:94:4b:20:bd:72:
96:2b:ce:c7:b5:39:b1:37:ef:b6:3b:71:e5:c4:1a:
9c:d6:5c:97:29:4b:b5:7a:88:88:0e:c5:0e:2e:c5:
fd:a3:f0:66:cd:b6:0e:b7:32:5e:ea:57:fb:05:cc:
db:75:e7:fc:e0:94:fa:94:a2:40:99:48:21:f0:dc:
e3:7d:0f:82:c1:26:f3:03:cf:a7:f3:17:d6:82:a1:
b1:ab:a0:86:86:70:15:d8:65:b7:42:4e:fb:60:eb:
b9:7d:aa:f3:a8:4c:47:34:46:f5:f2:00:4e:7c:00:
d4:d2:b5:22:be:bd:17:64:cd:99:35:bb:4f:61:f4:
3c:ae:e6:e6:39:2e:8b:5f:40:ea:b1:f9:37:b6:10:
43:46:18:7e:6a:fc:a6:a1:35:2c:cb:4d:26:5d:5a:
01:bd:35:45:f8:80:ff:ca:ba:8f:d2:64:9a:14:c3:
18:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:31:72:07:91:3E:43:55:B4:32:B7:B9:09:AF:FD:F4:3A:3B:0E:1A
X509v3 Authority Key Identifier:
keyid:01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/ljFyB5E-Q1W0Mre5Ca_99Do7Dho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.242.96.0/19
195.184.192.0/19
Signature Algorithm: sha256WithRSAEncryption
8f:89:f1:89:72:02:ab:ac:d1:7b:bc:bb:d2:92:e4:55:f2:ca:
a8:dd:bf:5a:32:ea:6a:34:e6:97:75:96:48:af:35:e1:8e:00:
2f:5c:4c:aa:a4:8d:58:81:a5:a2:39:35:a8:99:e1:98:17:3b:
f6:6c:ec:a4:4a:05:43:29:39:14:3e:c4:0d:f0:ba:42:d1:90:
cc:8e:00:ff:46:81:68:7c:58:3e:99:c2:bf:9b:0c:9c:c1:2b:
59:18:23:42:a9:81:8d:26:7b:d2:56:18:c5:88:99:1f:78:49:
5e:36:63:fe:25:23:03:9a:75:d3:9f:3c:16:c3:13:9e:f3:61:
34:46:83:43:e4:aa:9f:01:ac:e3:ef:6c:db:3e:3a:1f:59:7f:
d6:4f:7b:66:8c:4e:c1:21:14:29:0d:e9:6c:47:83:66:f8:af:
94:0a:6c:fa:0f:89:15:19:43:f7:bb:94:4c:07:0c:59:df:2a:
bc:18:a4:42:a6:66:e8:e0:62:19:32:01:3a:2d:cf:c2:a5:eb:
30:54:e5:b8:76:12:35:35:2b:0a:f3:f5:e5:fa:47:45:89:41:
37:23:d5:67:62:b1:13:19:66:66:60:7d:89:51:e1:cb:e8:1b:
0d:09:4f:4a:49:3a:3e:24:d2:ee:71:48:1d:9b:77:db:e1:30:
3b:7f:ca:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:34:06 2025 by rpki-client