Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/15NIv61wMAni9KI42gIK_EJ2Nsk.roa
File: 15NIv61wMAni9KI42gIK_EJ2Nsk.roa (raw, json)
Hash identifier: Hss3ZLAtrwvmfb+SzvgeG0uZ0bsTAf/2kEJf1WS+iCQ=
Subject key identifier: D7:93:48:BF:AD:70:30:09:E2:F4:A2:38:DA:02:0A:FC:42:76:36:C9
Certificate issuer: /CN=05ad79492e809934d693b11855e75103241569eb
Certificate serial: 01856DCADABEB3AF78B159B9E940DB578C22
Authority key identifier: 05:AD:79:49:2E:80:99:34:D6:93:B1:18:55:E7:51:03:24:15:69:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ba15SS6AmTTWk7EYVedRAyQVaes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/15NIv61wMAni9KI42gIK_EJ2Nsk.roa
Signing time: Sun 01 Jan 2023 14:44:48 +0000
ROA not before: Sun 01 Jan 2023 14:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2200
IP address blocks: 138.231.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:da:be:b3:af:78:b1:59:b9:e9:40:db:57:8c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05ad79492e809934d693b11855e75103241569eb
Validity
Not Before: Jan 1 14:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d79348bfad703009e2f4a238da020afc427636c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:85:00:97:e3:d9:72:ca:f3:8e:f2:4f:29:a3:
15:2e:79:f1:16:30:91:26:5a:37:07:a0:4d:66:6d:
54:08:8d:50:f4:d1:17:5f:88:82:5a:d5:2a:31:a5:
55:84:13:d0:e6:d3:40:b8:72:e6:61:14:3c:76:4b:
0f:e3:a7:e9:1f:08:57:c2:26:3b:80:53:8f:25:00:
b8:39:9c:7e:2b:01:08:af:21:c0:ca:61:17:0d:85:
d5:5c:ed:78:f2:e6:a8:d2:db:76:27:91:e4:21:ae:
5a:e3:fa:0c:40:09:17:be:96:b6:4b:b6:41:22:d0:
17:36:26:10:87:65:d7:3b:56:f6:f8:81:3e:b4:0a:
52:de:7e:cb:8d:04:0a:99:3c:2d:c8:fa:3e:11:7f:
b6:cb:82:e6:ee:61:53:80:93:b9:0b:05:b0:bb:7b:
21:ca:67:e0:1d:27:81:1e:9a:5b:25:a7:f7:e5:7d:
ff:9f:2f:45:c6:7a:bd:82:be:84:6d:46:19:54:2d:
d2:1a:4c:60:eb:66:cc:63:58:16:51:10:78:36:17:
ed:e3:5d:8c:b3:e3:58:a2:92:ad:41:e8:54:49:92:
9e:fc:fd:81:aa:bc:53:c1:3f:c4:f2:fe:22:fd:6e:
24:eb:d3:f1:20:dc:3d:a0:db:cd:c8:45:da:ec:30:
ef:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:93:48:BF:AD:70:30:09:E2:F4:A2:38:DA:02:0A:FC:42:76:36:C9
X509v3 Authority Key Identifier:
keyid:05:AD:79:49:2E:80:99:34:D6:93:B1:18:55:E7:51:03:24:15:69:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ba15SS6AmTTWk7EYVedRAyQVaes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/15NIv61wMAni9KI42gIK_EJ2Nsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.231.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2f:6d:06:9f:04:aa:bf:57:ab:a6:14:e8:95:1d:21:e6:0e:1b:
a6:0f:cf:59:86:b0:d3:6e:5d:71:7e:7e:a6:13:e9:1f:9a:cc:
18:16:80:e8:ca:fb:05:6a:8a:68:69:02:1b:a4:0e:bc:3b:ce:
1d:67:88:1d:ed:91:ad:e2:5b:84:f9:55:7f:8e:9d:7a:46:81:
20:46:8d:5c:18:70:bf:c5:9b:13:06:c0:f4:72:0b:b6:da:33:
af:a3:38:ec:de:2a:1b:b6:23:fe:d1:f0:0c:83:30:58:a8:6f:
79:af:e1:73:8c:e0:52:8f:2e:8e:2c:59:25:3e:49:cb:d6:fb:
61:c7:a1:58:47:f3:b4:1a:5c:c9:17:c5:43:34:14:9c:92:2b:
ce:a0:7f:d3:42:3f:5d:7e:ca:bf:90:df:53:be:c6:a7:67:7d:
8a:a7:4a:2a:9e:4b:90:45:6f:c8:6a:76:e1:91:64:c3:33:e2:
61:e6:16:10:bc:f2:80:88:85:17:e5:67:10:d1:be:d1:47:9a:
62:3c:95:ab:fe:ef:af:69:04:e6:61:b0:3f:44:78:1d:2e:a5:
96:0c:44:8e:3a:b7:97:4c:2b:72:5f:57:44:36:db:5d:8a:d2:
9b:b5:69:7c:5b:52:1d:80:e7:da:08:af:5f:b7:a5:d2:49:8b:
85:c8:78:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:40:03 2025 by rpki-client