Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/hmNSscaqey0gI2tKXPHzgjZOa5o.roa
File: hmNSscaqey0gI2tKXPHzgjZOa5o.roa (raw, json)
Hash identifier: dq4uUKrYWNoQjImSVQNVY3Cr6Cxcv78l4uFedDgzJio=
Subject key identifier: 86:63:52:B1:C6:AA:7B:2D:20:23:6B:4A:5C:F1:F3:82:36:4E:6B:9A
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018570F0C4B78D08A5EDA5308622C50D9228
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/hmNSscaqey0gI2tKXPHzgjZOa5o.roa
Signing time: Mon 02 Jan 2023 05:25:05 +0000
ROA not before: Mon 02 Jan 2023 05:25:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205990
IP address blocks: 81.15.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:c4:b7:8d:08:a5:ed:a5:30:86:22:c5:0d:92:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 2 05:25:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=866352b1c6aa7b2d20236b4a5cf1f382364e6b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:aa:1e:ae:81:7b:f4:0c:80:f6:d0:aa:93:63:
69:01:ba:18:26:bb:d2:43:60:53:d8:52:f2:e0:16:
c1:3b:7c:5f:eb:41:02:ad:eb:01:80:8f:da:fb:2b:
52:20:26:55:8d:f7:38:a6:a8:f6:e3:5b:43:1d:08:
6b:ff:98:2b:35:61:05:20:ba:b0:de:88:6c:f2:f8:
6f:83:b7:2e:da:ce:3b:52:94:b2:0f:1c:e5:46:93:
26:2b:f2:e2:98:77:32:12:40:98:6b:8c:39:c8:7d:
c2:42:f3:25:9c:74:75:f3:30:f0:1d:e1:99:b2:cd:
6e:97:10:e4:21:d3:04:c1:17:55:30:de:0f:5c:98:
5b:94:ac:2f:35:40:a7:3c:1d:d2:f0:92:4d:76:90:
ac:ba:a9:a3:fe:6d:4e:24:6f:2b:d5:04:23:6b:f1:
3d:f5:fe:b5:a8:52:74:4c:5d:29:87:de:78:be:06:
13:a0:81:e3:57:8f:68:85:e0:b8:b5:82:6e:ee:d7:
76:b0:14:b5:67:57:4b:1d:54:fe:73:09:43:75:c7:
ed:65:02:68:9c:a0:32:f5:1f:bd:4a:64:16:68:1c:
3c:b6:52:79:57:e9:42:b2:28:6c:24:4b:dd:5c:d3:
88:46:78:97:8f:b4:db:2b:c0:b6:c1:0b:bb:0b:54:
58:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:63:52:B1:C6:AA:7B:2D:20:23:6B:4A:5C:F1:F3:82:36:4E:6B:9A
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/hmNSscaqey0gI2tKXPHzgjZOa5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.15.217.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:da:ee:a8:ca:03:39:e5:fd:62:c3:bf:c0:c7:91:f9:45:08:
e4:23:c8:91:41:4d:a7:9c:86:f8:3f:21:1f:a6:f3:29:38:cd:
c0:e2:45:a1:e5:23:b2:20:8b:3c:5b:c4:4a:38:7c:79:d0:a3:
96:b0:ec:a9:5c:37:33:68:73:41:ef:e7:d7:27:e9:09:a7:ee:
d6:59:86:f0:a5:de:25:83:c9:2d:c5:4f:61:7e:44:79:16:8a:
67:e7:d1:ce:e7:aa:41:f9:35:2f:3f:da:88:7a:ca:85:02:dd:
38:e3:46:04:ba:56:69:81:39:e8:9a:b6:0a:64:0a:27:2c:5e:
e1:e8:e1:60:1e:57:6f:14:70:94:7d:86:08:57:85:e3:64:08:
39:91:ba:9a:d4:8a:bf:65:92:30:6d:b9:e6:79:f3:ed:40:65:
6d:0b:15:b0:4e:68:4f:67:6b:19:48:ae:52:6a:8f:b5:57:36:
a8:f2:ae:d9:16:d1:c2:5a:47:b6:b2:dd:43:95:ac:f9:9c:11:
dc:8c:29:00:28:6a:2a:b1:21:67:aa:58:0d:d6:37:ef:f0:df:
9a:fa:d2:7e:09:7d:31:4a:60:b0:af:99:ce:b4:90:9c:77:5b:
da:27:b3:9a:d0:ba:60:b4:da:c2:28:40:4c:ae:44:96:2f:f8:
b6:e0:13:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:09 2025 by rpki-client