Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/4a-lJIL9M0z65r-06czZUfRcKTI.roa
File: 4a-lJIL9M0z65r-06czZUfRcKTI.roa (raw, json)
Hash identifier: ufXh6Z3ehgiAqZhZyGOdqDFjAhD5drrim0nGmS5KIdk=
Subject key identifier: E1:AF:A5:24:82:FD:33:4C:FA:E6:BF:B4:E9:CC:D9:51:F4:5C:29:32
Certificate issuer: /CN=82fa25b2fcb1468114b738928ab20d8761bf8831
Certificate serial: 01849FF26D90E58E203D1C9A082EE61B4901
Authority key identifier: 82:FA:25:B2:FC:B1:46:81:14:B7:38:92:8A:B2:0D:87:61:BF:88:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gvolsvyxRoEUtziSirINh2G_iDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/4a-lJIL9M0z65r-06czZUfRcKTI.roa
Signing time: Tue 22 Nov 2022 15:26:15 +0000
ROA not before: Tue 22 Nov 2022 15:26:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25215
IP address blocks: 155.140.91.0/24 maxlen: 24
155.140.90.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9f:f2:6d:90:e5:8e:20:3d:1c:9a:08:2e:e6:1b:49:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82fa25b2fcb1468114b738928ab20d8761bf8831
Validity
Not Before: Nov 22 15:26:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e1afa52482fd334cfae6bfb4e9ccd951f45c2932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7a:b3:f9:93:da:5f:c6:e0:3b:99:ff:6a:2a:
f0:be:0d:11:f1:9a:cd:7e:5c:cb:81:f9:2d:42:37:
33:cd:b5:79:e7:f2:cd:00:d8:b4:d2:30:01:d4:3c:
05:cf:ef:da:42:b2:0c:15:5c:b1:f8:f7:b2:07:de:
ba:eb:00:07:9b:58:a5:57:d0:69:4b:02:d9:bc:5f:
9a:ea:a2:e2:a6:80:0a:8d:cf:a9:ff:de:60:5d:f5:
93:58:d5:1f:6b:ac:6a:a8:80:4f:c5:ac:53:f6:11:
2e:e2:52:cc:15:96:97:9c:47:6c:bb:a7:0f:a6:86:
bb:dd:8a:a2:87:e4:8c:a8:8f:33:96:f9:f4:97:44:
46:bd:c6:15:19:b1:69:a1:f9:c0:9e:1c:fd:fc:3e:
d7:b5:97:21:06:39:55:82:ff:d7:1d:ae:06:f2:06:
75:b2:05:d7:62:9b:70:42:47:1c:eb:ea:b5:8d:d1:
20:2c:ff:61:1d:b5:1c:28:77:ed:bf:31:79:6c:e3:
e3:02:07:c0:1a:d6:54:52:fb:0e:5b:88:b2:5f:c3:
28:78:14:c0:7d:f7:49:b9:bc:7f:35:72:9e:b6:ee:
13:64:62:ff:b6:19:36:c1:83:95:1c:40:26:65:ce:
35:42:9e:33:e3:5d:0b:c2:a8:63:fc:af:5b:44:d3:
b4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:AF:A5:24:82:FD:33:4C:FA:E6:BF:B4:E9:CC:D9:51:F4:5C:29:32
X509v3 Authority Key Identifier:
keyid:82:FA:25:B2:FC:B1:46:81:14:B7:38:92:8A:B2:0D:87:61:BF:88:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvolsvyxRoEUtziSirINh2G_iDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/4a-lJIL9M0z65r-06czZUfRcKTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/gvolsvyxRoEUtziSirINh2G_iDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.140.90.0/23
Signature Algorithm: sha256WithRSAEncryption
66:ac:ce:da:60:9b:fb:74:4e:68:c4:8e:de:d6:b8:5a:2f:74:
c6:96:63:3e:58:93:ce:c8:31:53:e3:53:14:67:56:ed:ad:53:
d6:75:f6:10:4b:d6:1b:63:5f:ce:b2:7c:d9:9d:04:28:51:89:
30:7e:db:66:5f:52:14:96:2a:61:89:53:34:6d:08:4b:75:4e:
7f:93:f8:a7:bf:2b:2d:d5:c3:30:d8:d9:47:c2:09:3b:36:6d:
2f:44:64:2d:b4:2e:2a:ce:6c:7c:2a:99:b2:5a:06:0e:1c:87:
3e:15:88:ed:7f:fb:a0:8f:73:de:e9:25:c3:16:f2:91:ab:0f:
97:96:ab:aa:f3:0f:93:a3:57:35:4c:e5:00:08:b4:34:91:b7:
79:7f:a2:ed:44:9f:f5:29:ed:ea:31:99:e6:b3:44:c0:ed:21:
e1:42:1a:75:0b:d1:ef:6f:e7:b1:92:d2:6c:f7:30:17:22:d5:
ae:08:54:5f:a0:ce:54:bc:e9:86:45:1d:cb:92:cd:e5:65:70:
04:90:95:9c:c0:51:40:4c:be:21:a0:6f:4c:5c:a5:bb:9d:93:
35:e0:08:4e:1f:29:df:b5:2f:3b:7a:da:86:4f:54:ce:3c:d1:
96:33:31:01:1c:1e:77:50:40:98:8e:c2:ee:74:42:bf:b1:95:
28:43:97:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:10:31 2025 by rpki-client