Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/KE1xk3YQLQjfap9fClT0mdrNqk4.roa
File: KE1xk3YQLQjfap9fClT0mdrNqk4.roa (raw, json)
Hash identifier: 4Yj9EHxYmwEt05nMYWdafi2mzBh5pYkbHSDvSRh7CWU=
Subject key identifier: 28:4D:71:93:76:10:2D:08:DF:6A:9F:5F:0A:54:F4:99:DA:CD:AA:4E
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 3B012912
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/KE1xk3YQLQjfap9fClT0mdrNqk4.roa
Signing time: Tue 15 Feb 2022 13:52:42 +0000
ROA not before: Tue 15 Feb 2022 13:52:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204301
IP address blocks: 81.15.201.0/24 maxlen: 24
88.220.48.0/24 maxlen: 24
88.220.84.0/24 maxlen: 24
81.15.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 989931794 (0x3b012912)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Feb 15 13:52:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=284d719376102d08df6a9f5f0a54f499dacdaa4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:c5:ed:94:5e:5d:23:00:76:77:34:04:3d:44:
53:80:44:d6:a0:a1:36:77:8d:1f:19:ba:91:04:6a:
d3:18:0e:a1:dd:ad:b2:0f:18:cd:29:a0:20:e6:3e:
d8:d6:f6:64:e1:69:e3:72:3d:a6:27:03:a2:05:55:
71:61:5c:41:10:3f:fa:1e:ff:89:60:7b:7b:39:50:
c6:6b:43:37:85:80:19:ca:95:26:40:ba:46:ef:2f:
c8:6d:b5:4d:86:bd:af:b3:8e:8e:b5:61:f6:04:7a:
28:2e:0c:82:9d:bf:3c:d6:28:48:87:c6:74:0d:9e:
4d:73:45:f5:28:df:32:10:6f:33:5a:f4:6c:50:13:
1b:eb:2c:ff:94:c9:b7:d5:31:4f:b4:fd:cf:e2:a3:
b1:5f:5b:06:c9:76:a8:9a:af:36:f5:52:2d:fc:d0:
e5:95:43:75:ee:e9:da:51:64:0c:d3:3b:8a:3b:98:
10:35:60:c1:7c:05:ed:8b:88:3f:de:ae:28:d8:f6:
54:47:80:b9:0f:4b:91:e6:0c:20:4f:cb:17:b7:9b:
90:a3:66:d0:f8:89:3b:0a:2d:e4:0b:c3:e5:d5:86:
56:72:ac:15:26:8c:98:59:5b:6e:88:3d:af:39:ee:
50:b8:c9:a0:44:7c:4e:40:bf:08:31:f5:d2:8a:d7:
d3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:4D:71:93:76:10:2D:08:DF:6A:9F:5F:0A:54:F4:99:DA:CD:AA:4E
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/KE1xk3YQLQjfap9fClT0mdrNqk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.15.191.0/24
81.15.201.0/24
88.220.48.0/24
88.220.84.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:6d:ee:cc:c6:dc:31:9c:56:b7:be:75:0c:b3:bf:b9:3a:98:
49:f0:76:5f:8a:fa:ac:73:b6:b7:15:b6:41:5e:1e:12:a2:bd:
63:68:5b:57:3f:d7:5b:ca:30:31:98:ba:03:d9:53:4a:b3:85:
2f:e8:59:ba:12:10:e8:40:e1:a1:85:dc:ae:bf:2a:42:26:5c:
3e:22:00:c2:a1:86:56:82:ac:ef:dd:8e:53:e6:91:af:43:0c:
20:20:a7:03:1b:ed:00:7e:97:44:fd:7c:a9:2c:01:79:9a:d3:
17:cc:11:68:c1:18:da:27:c4:87:3c:a8:ff:c4:7e:eb:82:09:
a6:58:2b:71:de:e7:33:09:b5:4c:d0:16:77:a3:0d:aa:d1:a5:
a7:d1:f3:29:55:f0:fe:59:3e:e6:7a:0b:59:5a:1a:d8:51:fd:
32:20:c9:b0:d0:1c:ce:ee:59:ce:cf:5d:9b:de:d5:1e:ce:0f:
7e:43:d8:81:4f:d5:63:38:1d:a0:df:d6:f5:77:36:4c:f8:75:
db:c0:84:cb:71:ef:56:2c:cf:ed:6c:2e:f2:b0:f6:6e:22:66:
58:da:e6:2e:9d:a0:0b:02:36:f9:ae:8b:0a:47:31:45:2a:4b:
5a:e5:63:3d:4d:89:ea:8d:7d:2e:9d:da:c4:92:5a:28:26:85:
1a:3d:fe:02
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIEOwEpEjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDY4MzRlNjg4OTBmMzk4NmExYjA0NTdjZTBmNTRhZTAzYzJkNzZiMB4XDTIyMDIx
NTEzNTI0MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjg0ZDcxOTM3NjEw
MmQwOGRmNmE5ZjVmMGE1NGY0OTlkYWNkYWE0ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPPF7ZReXSMAdnc0BD1EU4BE1qChNneNHxm6kQRq0xgOod2t
sg8YzSmgIOY+2Nb2ZOFp43I9picDogVVcWFcQRA/+h7/iWB7ezlQxmtDN4WAGcqV
JkC6Ru8vyG21TYa9r7OOjrVh9gR6KC4Mgp2/PNYoSIfGdA2eTXNF9SjfMhBvM1r0
bFATG+ss/5TJt9UxT7T9z+KjsV9bBsl2qJqvNvVSLfzQ5ZVDde7p2lFkDNM7ijuY
EDVgwXwF7YuIP96uKNj2VEeAuQ9LkeYMIE/LF7ebkKNm0PiJOwot5AvD5dWGVnKs
FSaMmFlbbog9rznuULjJoER8TkC/CDH10orX09UCAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBQoTXGTdhAtCN9qn18KVPSZ2s2qTjAfBgNVHSMEGDAWgBRUaDTmiJDzmGob
BFfOD1SuA8LXazAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZHZzA1b2lRODVocUd3Ulh6ZzlVcmdQQzEycy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjkvNWYyZjBiLWZkODItNDRmYS1iNjM0LTUyNzY2YjI0YmFhNC8x
L0tFMXhrM1lRTFFqZmFwOWZDbFQwbWRyTnFrNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkv
NWYyZjBiLWZkODItNDRmYS1iNjM0LTUyNzY2YjI0YmFhNC8xL1ZHZzA1b2lRODVo
cUd3Ulh6ZzlVcmdQQzEycy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAFEPvwMEAFEPyQMEAFjcMAMEAFjc
VDANBgkqhkiG9w0BAQsFAAOCAQEAxW3uzMbcMZxWt751DLO/uTqYSfB2X4r6rHO2
txW2QV4eEqK9Y2hbVz/XW8owMZi6A9lTSrOFL+hZuhIQ6EDhoYXcrr8qQiZcPiIA
wqGGVoKs792OU+aRr0MMICCnAxvtAH6XRP18qSwBeZrTF8wRaMEY2ifEhzyo/8R+
64IJplgrcd7nMwm1TNAWd6MNqtGlp9HzKVXw/lk+5noLWVoa2FH9MiDJsNAczu5Z
zs9dm97VHs4PfkPYgU/VYzgdoN/W9Xc2TPh128CEy3HvVizP7Wwu8rD2biJmWNrm
Lp2gCwI2+a6LCkcxRSpLWuVjPU2J6o19Lp3axJJaKCaFGj3+Ag==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:29 2025 by rpki-client