Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/fihjgQ17gCoFVnJUjx1uqDY7rzk.roa
File: fihjgQ17gCoFVnJUjx1uqDY7rzk.roa (raw, json)
Hash identifier: ua5c5CqCLiYXOSnmyiE1Nq5Jm3q6UcEDYhBG5sqKu3s=
Subject key identifier: 7E:28:63:81:0D:7B:80:2A:05:56:72:54:8F:1D:6E:A8:36:3B:AF:39
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018570F0CC3B196D3E3AB56FE55110D8908C
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/fihjgQ17gCoFVnJUjx1uqDY7rzk.roa
Signing time: Mon 02 Jan 2023 05:25:07 +0000
ROA not before: Mon 02 Jan 2023 05:25:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211388
IP address blocks: 81.15.155.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:cc:3b:19:6d:3e:3a:b5:6f:e5:51:10:d8:90:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 2 05:25:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e2863810d7b802a055672548f1d6ea8363baf39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:04:43:12:88:59:e0:98:7f:8e:41:9c:5c:f3:
2f:4c:09:eb:8b:e4:0d:cc:8a:ca:95:96:95:9b:a5:
17:77:a5:fa:06:53:42:41:b5:45:14:84:c7:32:29:
3e:9e:aa:1c:fd:fc:17:1f:30:1e:a0:dd:22:22:07:
98:7b:f0:c6:4f:64:a6:7b:81:10:40:7e:8f:26:53:
54:62:b8:59:63:78:24:d1:c8:b0:77:46:ff:24:1b:
c3:a8:d7:59:0d:eb:f3:5a:43:10:9e:4f:93:28:67:
4d:f1:6d:1d:3a:18:23:27:4b:75:09:9b:06:12:5a:
29:6b:11:ec:86:2c:7f:d9:9b:f7:b0:cd:bb:45:29:
34:5c:06:7a:67:44:3a:98:68:d8:9f:b3:92:53:f6:
60:2e:a9:25:ba:cc:ee:9e:e8:47:ef:2a:e6:20:ad:
d1:40:cd:b0:9a:10:8f:5e:9b:5e:83:46:02:77:60:
9b:de:90:88:75:01:4a:64:f7:b7:70:32:e5:36:e8:
9a:3a:83:ab:fa:b1:b1:13:be:2f:33:b1:ca:35:b2:
c8:0a:db:5f:e9:fb:44:61:f8:ef:c2:be:6a:e7:b4:
39:28:9b:12:88:ae:35:de:8e:c8:16:13:d1:1a:a0:
aa:e6:86:67:7e:cf:14:fb:d1:53:71:d0:fe:18:73:
a7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:28:63:81:0D:7B:80:2A:05:56:72:54:8F:1D:6E:A8:36:3B:AF:39
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/fihjgQ17gCoFVnJUjx1uqDY7rzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.15.155.0/24
Signature Algorithm: sha256WithRSAEncryption
80:ee:6c:8a:18:01:28:0c:1e:89:e5:d1:46:b6:6f:27:b6:ac:
ad:ac:b4:c3:c2:25:4b:d7:6f:27:75:01:5c:ca:09:9a:a6:28:
e2:06:d2:59:fe:2f:cf:9f:48:85:04:25:c7:e3:35:67:bf:54:
ab:e7:7a:16:91:19:7a:b2:9b:84:48:16:f9:2a:eb:0c:99:15:
76:ff:35:fe:8d:83:6e:8f:91:8d:db:0d:3f:16:0b:82:28:20:
a1:4a:3c:cd:3e:f0:a5:67:19:80:ae:b0:80:9d:b0:fb:19:c6:
2e:d3:a9:c4:b5:ff:3b:72:09:f5:79:d2:2c:6b:a4:31:90:6c:
9a:5a:dc:b9:55:44:f8:f9:72:a7:e4:a6:97:54:73:68:f4:3e:
71:a7:aa:d9:dd:1e:5b:5b:7c:f6:b7:6f:3b:04:dd:a7:d4:59:
68:23:f7:5e:81:2b:d4:af:91:15:6b:90:81:df:a8:17:8b:e0:
25:ee:05:2a:e9:cd:ae:7d:2e:e1:6e:cf:04:c2:3d:43:39:2f:
61:2a:53:3a:5e:c5:c8:c4:b1:5d:a8:a5:97:9f:c7:7e:0f:d5:
69:1e:34:28:22:82:af:ff:9d:af:71:e4:a8:9a:eb:cf:0b:02:
46:c1:f0:43:50:3f:50:e3:43:ed:32:79:78:19:e6:d0:8e:20:
1b:f9:93:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:27 2025 by rpki-client