Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/RecuPnfqxr0MHJgQYEPbFLyd2Hc.roa
File: RecuPnfqxr0MHJgQYEPbFLyd2Hc.roa (raw, json)
Hash identifier: heE2oQlh0SRKHy7qqbvF8RObx4SrkaWb7YapnhpPnLg=
Subject key identifier: 45:E7:2E:3E:77:EA:C6:BD:0C:1C:98:10:60:43:DB:14:BC:9D:D8:77
Certificate issuer: /CN=82fa25b2fcb1468114b738928ab20d8761bf8831
Certificate serial: 01890CB1AB4C3F54AB404AF311E11A26A299
Authority key identifier: 82:FA:25:B2:FC:B1:46:81:14:B7:38:92:8A:B2:0D:87:61:BF:88:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gvolsvyxRoEUtziSirINh2G_iDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/RecuPnfqxr0MHJgQYEPbFLyd2Hc.roa
Signing time: Fri 30 Jun 2023 14:25:17 +0000
ROA not before: Fri 30 Jun 2023 14:25:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25215
IP address blocks: 155.140.82.0/24 maxlen: 24
155.140.83.0/24 maxlen: 24
155.140.91.0/24 maxlen: 24
155.140.90.0/24 maxlen: 24
155.140.90.0/23 maxlen: 23
159.50.174.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:0c:b1:ab:4c:3f:54:ab:40:4a:f3:11:e1:1a:26:a2:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82fa25b2fcb1468114b738928ab20d8761bf8831
Validity
Not Before: Jun 30 14:25:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45e72e3e77eac6bd0c1c98106043db14bc9dd877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:89:53:f8:ba:cd:2a:99:53:60:7c:0d:38:6c:
e4:df:cd:d2:ef:ec:f7:a9:4c:5e:f7:33:b8:4e:1b:
ce:5d:43:d2:02:ae:62:ab:4c:b5:c9:52:b5:97:ff:
e1:c7:46:1b:c5:92:9e:40:d8:86:e3:fa:e2:c8:2a:
45:c6:38:ab:15:78:25:16:a6:d6:96:c7:ac:53:ec:
1c:14:63:7e:89:b8:01:57:3d:d1:a5:0b:42:0b:b7:
cb:93:aa:cf:bb:46:ba:9b:97:33:35:40:6b:54:42:
48:e1:14:78:3b:a0:c7:92:d6:51:fe:02:ea:ee:8a:
ed:2a:16:83:a4:93:b4:aa:47:66:21:95:e4:a5:65:
68:70:5a:e3:70:bd:a8:4d:a3:24:c0:2c:70:34:e8:
67:3d:28:8f:c1:6b:05:30:3b:50:37:a2:02:79:3c:
31:79:83:3d:60:c4:74:12:97:a9:a3:d0:ae:c9:36:
7e:61:05:3b:73:da:db:4e:de:54:32:5a:46:9a:bf:
15:98:d9:80:f4:b3:be:bf:ec:b1:56:c7:af:12:14:
0f:4d:a1:8f:42:3f:96:b4:4a:23:6d:76:eb:4c:41:
62:24:00:ff:d7:64:25:b1:1c:be:61:4a:b1:6c:87:
6e:00:6d:79:23:17:89:98:ed:87:d9:6a:cd:34:ce:
3a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E7:2E:3E:77:EA:C6:BD:0C:1C:98:10:60:43:DB:14:BC:9D:D8:77
X509v3 Authority Key Identifier:
keyid:82:FA:25:B2:FC:B1:46:81:14:B7:38:92:8A:B2:0D:87:61:BF:88:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvolsvyxRoEUtziSirINh2G_iDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/RecuPnfqxr0MHJgQYEPbFLyd2Hc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/gvolsvyxRoEUtziSirINh2G_iDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.140.82.0/23
155.140.90.0/23
159.50.174.0/24
Signature Algorithm: sha256WithRSAEncryption
85:15:9c:9d:a3:5f:e1:ed:c9:cf:0f:f6:ba:70:c8:36:51:67:
ee:a7:f5:4c:9c:db:fd:ea:9c:30:0f:c1:92:34:b8:a3:ce:fd:
d4:f0:31:f5:89:07:a5:10:b9:06:4e:37:fa:19:0f:8b:c2:13:
2a:0d:79:35:ba:04:14:70:23:0e:a4:1d:97:69:af:c2:69:d5:
a2:8b:1b:0c:ef:35:b5:72:b8:7c:1d:da:5f:bc:83:21:aa:31:
75:b6:2f:7f:9a:b9:8d:b6:0d:7b:4b:c2:5c:cf:45:0a:59:cb:
94:dc:c2:34:07:60:52:a4:10:34:98:fb:10:8f:aa:92:5f:66:
5d:21:a5:e7:32:9f:6e:da:2f:6e:3d:2b:c1:d2:dc:f8:99:aa:
ae:78:77:72:f3:e1:c9:58:5d:f8:69:5a:fb:ee:01:13:8d:de:
08:11:75:fe:18:22:30:b5:32:cc:17:11:35:6b:47:e6:95:f3:
20:d2:37:f3:a9:79:aa:dc:e9:43:df:15:31:1b:e0:52:6b:e2:
e2:eb:90:f9:d6:7f:0f:c6:93:be:fe:50:f0:20:63:e5:6d:5c:
d0:8d:e7:a8:0e:5f:ed:dc:d3:82:84:aa:6c:de:26:f7:d4:02:
ef:ef:71:63:b7:f3:b2:46:e0:2b:52:b8:7c:7b:e3:3c:7b:f5:
28:55:05:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:24:16 2025 by rpki-client