Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/AfhblDD-i53-chCHLV-m2fXgzHY.roa
File: AfhblDD-i53-chCHLV-m2fXgzHY.roa (raw, json)
Hash identifier: jFHYf+tKL4JdY7bQExGjqGK+WVRjK7DnNS+yPHT+p/o=
Subject key identifier: 01:F8:5B:94:30:FE:8B:9D:FE:72:10:87:2D:5F:A6:D9:F5:E0:CC:76
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018570F0C3F44DDD1598748E1103C7ED1CE7
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/AfhblDD-i53-chCHLV-m2fXgzHY.roa
Signing time: Mon 02 Jan 2023 05:25:04 +0000
ROA not before: Mon 02 Jan 2023 05:25:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205813
IP address blocks: 81.15.239.0/24 maxlen: 24
81.15.242.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:c3:f4:4d:dd:15:98:74:8e:11:03:c7:ed:1c:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 2 05:25:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01f85b9430fe8b9dfe7210872d5fa6d9f5e0cc76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:19:ca:aa:f4:19:29:56:7d:18:69:d9:e8:69:
91:33:9d:c2:dd:22:83:97:e4:f5:1a:3c:00:47:45:
94:43:06:b8:de:e4:dc:ee:d0:38:a3:ff:23:20:7f:
c0:7e:19:a0:5b:7f:ae:cb:d1:f3:4a:af:32:5b:39:
40:51:31:d8:fe:46:7a:73:6d:47:db:28:65:cb:ef:
43:18:f0:6c:6d:91:78:b2:13:3d:cb:6f:ac:5d:75:
52:54:01:56:5c:f9:8d:8a:96:55:4a:1b:21:52:a4:
05:04:f9:63:1b:f7:41:69:ef:ca:ac:5f:bf:38:71:
9d:28:b7:8d:60:4c:87:b4:d9:44:40:e2:4e:d3:a4:
27:1e:29:63:b8:60:52:ef:ca:c8:28:fb:0b:0a:21:
0c:f7:f8:a1:b9:52:c9:f1:87:eb:5f:25:a6:25:66:
f3:20:6a:ce:a0:f0:ea:06:29:72:7e:78:cc:96:17:
e4:89:89:01:16:31:41:29:3d:ed:1f:3f:8f:67:6d:
d5:4c:fc:4b:ea:3d:5a:b1:f6:cc:68:ae:1a:88:91:
94:f0:75:13:74:18:85:32:46:4b:5e:47:c0:b9:d2:
90:b4:91:78:ec:1f:56:cc:67:5b:5f:f6:ab:a1:39:
c1:d4:eb:f9:9a:fa:7f:9a:86:54:8a:9d:e8:b9:33:
0e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F8:5B:94:30:FE:8B:9D:FE:72:10:87:2D:5F:A6:D9:F5:E0:CC:76
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/AfhblDD-i53-chCHLV-m2fXgzHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.15.239.0/24
81.15.242.0/24
Signature Algorithm: sha256WithRSAEncryption
29:3f:af:29:b7:2f:81:0a:a8:de:16:0e:fe:7d:11:a3:6d:d8:
27:ee:8b:cf:ad:d8:6e:d2:f6:a5:c6:af:d7:57:5d:81:84:28:
08:df:7b:2d:cc:3b:bd:14:85:6a:48:c0:a0:da:91:f7:e4:c8:
cf:9d:92:dd:02:24:c7:65:87:28:8a:a1:f9:df:b1:2f:a9:7d:
b5:b6:0d:50:ba:14:d0:22:b9:c9:6d:8e:82:80:29:cf:77:b9:
86:3a:24:ed:9a:51:dc:67:a8:4e:55:09:04:a2:4b:cd:f3:43:
68:23:4e:0a:92:be:f4:ae:80:1c:4a:17:0b:20:a0:54:8f:05:
7b:ff:4e:c6:c5:49:d3:ad:42:a7:c5:59:38:de:cc:e8:58:9d:
a1:d6:94:2d:ef:d9:ad:9e:5e:70:2a:b3:e9:fd:99:1a:49:3a:
65:a4:86:5d:d0:a0:6d:4d:bb:83:4f:e2:9b:11:7c:ea:51:c0:
1f:9d:f3:a4:3b:3c:a9:be:45:21:65:a4:bb:d9:de:0c:e9:5c:
73:aa:1c:53:a8:35:76:c8:06:a8:c3:d8:3f:6e:ef:5a:f9:55:
4b:ee:2e:7c:82:98:2b:7a:a8:49:a8:b6:aa:f5:32:37:eb:f9:
e5:c0:ef:c6:81:06:53:90:2f:6e:24:e9:ce:90:fe:3a:d2:8b:
81:12:cb:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:54 2025 by rpki-client