Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/kjusSPMA2x9E55_dToQcPgvP6ck.roa
File: kjusSPMA2x9E55_dToQcPgvP6ck.roa (raw, json)
Hash identifier: txqu4pAXH4+0q5Cu7/a8UEAaYorjlb15597XFRmovm8=
Subject key identifier: 92:3B:AC:48:F3:00:DB:1F:44:E7:9F:DD:4E:84:1C:3E:0B:CF:E9:C9
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018570F0B13EF66803984D222F1A71E8E408
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/kjusSPMA2x9E55_dToQcPgvP6ck.roa
Signing time: Mon 02 Jan 2023 05:25:00 +0000
ROA not before: Mon 02 Jan 2023 05:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62258
IP address blocks: 81.15.208.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:b1:3e:f6:68:03:98:4d:22:2f:1a:71:e8:e4:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 2 05:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=923bac48f300db1f44e79fdd4e841c3e0bcfe9c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f9:a7:de:ef:e5:df:e4:44:08:ac:43:49:09:
70:59:64:a9:31:fc:fa:8b:8c:3b:12:b3:a6:8a:7e:
67:18:f7:2d:8a:23:22:05:6b:d3:a8:d0:9c:41:b9:
35:e2:77:c7:4c:6a:b1:bc:04:5e:55:f8:de:9a:df:
a1:da:1e:a1:0a:64:3e:bb:db:c7:28:db:96:7e:10:
4f:b6:fe:03:a6:e9:cb:5a:58:ad:1f:40:7d:41:ef:
87:df:a5:d8:8b:18:e5:84:d1:2a:74:bd:8e:ea:12:
00:94:e4:9f:85:bd:d2:73:c6:cd:4b:66:21:ba:8b:
da:d5:4d:e5:72:02:97:31:07:31:a5:7a:ee:d5:55:
2f:70:dc:cc:42:c9:bd:e6:84:8d:92:ba:7c:27:7e:
81:e2:67:0f:12:98:a3:00:70:c9:a7:b2:7b:8d:71:
d1:74:b0:7b:df:78:d5:2e:b9:15:9a:a4:54:fd:97:
84:3f:1d:d5:4b:fa:64:e2:9f:50:b0:9b:48:c3:ab:
be:ef:b0:77:79:bc:52:db:6c:c9:d1:a3:b7:6b:25:
e2:ba:e4:57:e0:de:ab:80:3e:27:77:c4:85:20:73:
73:1b:ab:64:da:c8:8c:b2:b6:23:4f:0b:44:78:1d:
4a:13:a4:b5:9a:91:b3:cf:41:d4:39:5f:4a:d9:25:
81:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:3B:AC:48:F3:00:DB:1F:44:E7:9F:DD:4E:84:1C:3E:0B:CF:E9:C9
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/kjusSPMA2x9E55_dToQcPgvP6ck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.15.208.0/24
Signature Algorithm: sha256WithRSAEncryption
67:d5:4d:37:cc:0b:3d:8e:02:6e:c3:ad:4c:20:8c:4e:16:d0:
d8:a8:d7:b5:d5:55:32:52:74:ff:c8:04:75:ae:d1:1e:97:b0:
86:47:2d:2f:72:00:c5:f5:5d:fd:fc:1c:c5:7a:76:3b:7b:4b:
80:5f:49:08:f3:25:df:cd:d8:7f:e1:e7:66:99:81:ce:dc:8e:
2a:38:3a:3c:e5:b6:7f:ab:83:a5:6f:e4:b7:7a:84:69:c3:09:
a1:26:bc:88:d1:ce:cd:b7:de:71:ac:c9:42:c9:42:83:2d:11:
48:ea:2b:76:8a:8c:72:9f:c1:15:46:d2:ea:00:3c:9d:48:5b:
ea:ac:3a:24:50:75:8e:ad:6d:6a:04:eb:01:03:47:f4:f3:90:
d5:f2:fe:13:46:a3:33:7a:cb:77:37:6c:8f:56:ec:50:ae:1f:
fb:7f:42:78:8f:1e:fd:33:08:7b:02:ba:80:d5:1c:6c:ec:cf:
40:7c:6a:04:9b:8a:9c:13:0f:66:81:a0:6c:d1:d7:5c:ee:bd:
75:0f:c9:e2:3d:61:a2:35:10:97:53:c9:6b:a2:fb:15:a5:18:
67:d4:35:e2:78:26:16:90:31:8a:53:65:df:94:2d:79:9f:c5:
92:f3:1e:2d:74:a4:5b:e5:68:52:45:43:e7:5f:60:92:c6:83:
14:8f:bd:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:48 2025 by rpki-client