Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/A92OziizbetVYg6ik6BHu0nPoaY.roa
File: A92OziizbetVYg6ik6BHu0nPoaY.roa (raw, json)
Hash identifier: Hi+/9TONE5TzwwpkLr5CIYFNEBCaHU41a+CWq330reI=
Subject key identifier: 03:DD:8E:CE:28:B3:6D:EB:55:62:0E:A2:93:A0:47:BB:49:CF:A1:A6
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 3A7640E9
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/A92OziizbetVYg6ik6BHu0nPoaY.roa
Signing time: Sat 01 Jan 2022 04:51:56 +0000
ROA not before: Sat 01 Jan 2022 04:51:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50551
IP address blocks: 81.15.157.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 980828393 (0x3a7640e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 04:51:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=03dd8ece28b36deb55620ea293a047bb49cfa1a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c4:26:ce:02:68:b3:4a:cc:11:9d:80:51:a3:
7e:ea:e1:48:28:73:31:04:b9:d1:a0:d1:92:64:f8:
50:e2:1e:a2:11:e4:bf:ec:f1:f9:f4:b1:34:f3:d4:
1d:b8:12:ec:a5:e9:3d:20:bd:48:09:2b:2f:06:81:
d0:aa:0b:72:97:4e:88:79:61:c2:f0:a6:39:61:86:
ec:f2:e3:b5:8e:f2:ea:2f:a0:ad:de:3a:27:c4:09:
51:db:47:cc:08:3d:93:41:3a:45:d5:a0:48:72:d8:
13:70:14:42:30:1d:1c:44:94:3f:84:15:06:a1:57:
bb:88:f6:5b:e7:2f:9b:44:d4:5b:da:1e:35:0a:a7:
a8:53:c2:f8:7e:8b:b8:7b:23:54:f0:5b:6e:46:de:
3b:82:e9:64:c6:e2:b5:09:8d:1c:57:88:5b:ec:b1:
df:55:3e:74:8e:f2:07:e7:ec:a4:e1:49:83:fb:05:
3c:9c:40:1d:d2:67:75:9b:d8:3d:c1:e2:71:e8:3e:
06:14:6e:f1:5f:b2:24:82:eb:e3:5d:2d:79:30:86:
48:91:e3:65:71:86:1c:0a:1c:f0:31:bd:65:ad:d6:
de:96:c6:7d:02:b5:7f:69:16:5f:20:93:95:78:c1:
b1:1f:82:c3:08:1c:4b:13:78:06:38:eb:54:3f:1f:
f7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:DD:8E:CE:28:B3:6D:EB:55:62:0E:A2:93:A0:47:BB:49:CF:A1:A6
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/A92OziizbetVYg6ik6BHu0nPoaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.15.157.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:f0:be:26:03:80:cc:83:20:95:86:bb:33:5c:80:dd:e9:ea:
05:76:36:1b:d3:ef:8e:be:8f:bc:19:cb:98:8e:db:ef:30:58:
a1:13:c8:67:45:6a:71:7e:e1:36:0c:aa:b3:86:0a:e0:45:64:
c5:f4:33:9b:df:1b:04:ca:2c:28:40:34:23:27:ad:6f:7a:c6:
bb:2c:70:ce:5e:0d:58:b8:ea:81:70:ae:ac:f4:b5:dc:f0:63:
59:da:3d:5c:1b:14:4b:69:52:1e:1c:8f:3f:60:75:62:a7:3b:
46:90:53:e4:fe:66:fb:2a:ea:16:a8:0d:3f:8e:1e:b8:3c:98:
cf:72:b6:cc:8d:71:3e:b2:89:2f:31:1c:8a:9f:76:c1:64:c0:
83:a5:ed:57:67:0a:85:b5:52:50:9c:2b:0f:e9:21:13:72:90:
6d:a7:d7:90:eb:fd:02:ba:82:fb:9f:63:33:10:b5:6f:bd:4d:
81:0f:cf:c3:86:a1:24:92:34:4a:31:24:42:aa:4c:f2:2e:f3:
26:e1:41:48:b5:e3:91:e2:eb:e2:0e:49:96:fc:a9:ca:2a:b8:
1a:e8:3b:bf:3c:24:8b:6d:7c:88:16:9b:9e:b1:fc:db:fd:37:
46:22:4e:9c:03:cf:47:48:7a:46:3b:f6:ee:85:c3:7d:43:4f:
95:e5:42:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:32 2025 by rpki-client