Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/Xqulp6yKuOaRX9Z0PfVfHOdX5-8.roa
File: Xqulp6yKuOaRX9Z0PfVfHOdX5-8.roa (raw, json)
Hash identifier: C2TI1qyguVbfTDQ76K3hjWuxwqUgQnZUHWGhxTt0fHk=
Subject key identifier: 5E:AB:A5:A7:AC:8A:B8:E6:91:5F:D6:74:3D:F5:5F:1C:E7:57:E7:EF
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018570F0BFBDABCBC8C63D485D32B45E7265
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/Xqulp6yKuOaRX9Z0PfVfHOdX5-8.roa
Signing time: Mon 02 Jan 2023 05:25:03 +0000
ROA not before: Mon 02 Jan 2023 05:25:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204301
IP address blocks: 81.15.201.0/24 maxlen: 24
88.220.48.0/24 maxlen: 24
88.220.84.0/24 maxlen: 24
81.15.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:bf:bd:ab:cb:c8:c6:3d:48:5d:32:b4:5e:72:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 2 05:25:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5eaba5a7ac8ab8e6915fd6743df55f1ce757e7ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a2:70:ee:6f:28:b8:a1:2e:84:eb:ec:29:e5:
09:25:6f:e9:52:36:07:e6:18:ba:de:bc:c1:5d:56:
39:3d:0e:ef:8f:93:87:6e:ea:6d:31:5f:50:24:ef:
6e:47:9b:f5:fc:e5:5a:18:bf:33:4e:f8:e5:fb:e3:
67:b3:77:35:cf:7b:ef:7a:f7:20:d6:b6:fa:74:b3:
c4:d2:d3:48:4f:cf:e7:ad:27:a2:7f:aa:90:eb:7e:
19:f5:a7:24:1f:f7:cf:a6:89:b4:bd:c9:39:75:f7:
b9:62:67:88:51:aa:56:99:74:b2:65:08:ef:74:0a:
0a:1e:43:e8:17:76:44:a8:75:27:53:5f:b3:1b:c2:
6e:ee:50:df:bc:33:9c:dc:c0:a8:2a:4f:35:82:3a:
c0:e4:6c:37:a4:a9:c7:2d:2f:22:33:33:03:42:d1:
f8:a6:62:e4:6b:cc:3b:8c:6c:b7:0c:5f:96:e0:61:
ad:d1:ec:33:c2:01:98:fa:91:8d:4b:d7:98:69:57:
0a:3a:75:37:a7:d6:19:e0:3c:60:ef:67:c0:54:41:
a2:7e:bf:66:2a:b6:d6:cc:b3:17:12:0e:a7:cf:58:
70:94:0d:d8:34:d5:40:71:33:fe:9e:3f:09:b5:06:
ea:cd:a3:63:49:ab:e1:07:28:6c:10:0e:3e:55:3c:
b2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:AB:A5:A7:AC:8A:B8:E6:91:5F:D6:74:3D:F5:5F:1C:E7:57:E7:EF
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/Xqulp6yKuOaRX9Z0PfVfHOdX5-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.15.191.0/24
81.15.201.0/24
88.220.48.0/24
88.220.84.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:4c:b7:df:54:23:c9:63:99:74:c4:69:74:30:2d:56:07:21:
85:c5:48:84:df:4c:81:81:ec:a0:33:0e:d8:47:14:c7:a8:d7:
f5:5a:1a:16:1b:26:00:91:a4:e4:b3:f3:78:eb:3e:fa:e4:73:
67:25:f1:95:aa:cd:bb:c8:d1:fd:8e:cb:f7:b5:60:e1:73:d2:
f1:c4:d5:7b:65:9f:2b:9a:76:61:5f:42:60:f6:65:46:2a:d4:
18:c0:59:fb:4f:0b:d1:c3:8f:3e:19:12:a3:1c:a8:37:35:4b:
d4:65:14:fa:e7:1e:26:77:2a:45:38:a6:aa:7f:d3:eb:ba:6e:
6b:0d:b9:af:25:f3:62:34:4f:83:02:9e:b0:a5:55:6b:e7:47:
63:72:7f:bf:e9:42:f6:c9:93:32:87:74:43:1d:f4:37:49:92:
43:1b:40:f5:2e:d2:18:f6:77:e1:58:2b:2c:1a:1a:5d:ae:93:
97:6d:51:6f:15:92:b0:ed:02:a1:b6:5e:66:77:f0:9b:8f:86:
6a:f6:cd:03:46:eb:45:3b:6e:89:ab:87:f3:cf:ea:ff:b3:7a:
c9:ed:9e:ad:8a:b7:a5:94:38:5c:32:c0:60:c6:41:a2:b8:2e:
b6:46:5c:b5:ee:a0:97:57:47:0d:9b:75:70:0d:d6:70:8a:4a:
35:0b:22:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:06 2025 by rpki-client