Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/obxU-v-Aw1O5cYy9HdeJ2ACzdfQ.roa
File: obxU-v-Aw1O5cYy9HdeJ2ACzdfQ.roa (raw, json)
Hash identifier: Vb1jg3oNd5QLgRgI8hUXhnRMub7MfWcORwJGDZHyJYE=
Subject key identifier: A1:BC:54:FA:FF:80:C3:53:B9:71:8C:BD:1D:D7:89:D8:00:B3:75:F4
Certificate issuer: /CN=6f3030a4b67f95c2fed902d56657faa2494b5129
Certificate serial: 0D8DD57B
Authority key identifier: 6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/obxU-v-Aw1O5cYy9HdeJ2ACzdfQ.roa
Signing time: Sat 01 Jan 2022 15:01:07 +0000
ROA not before: Sat 01 Jan 2022 15:01:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59962
IP address blocks: 151.232.112.0/24 maxlen: 24
151.232.115.0/24 maxlen: 24
151.232.114.0/24 maxlen: 24
151.232.118.0/24 maxlen: 24
151.232.113.0/24 maxlen: 24
151.232.117.0/24 maxlen: 24
151.232.116.0/24 maxlen: 24
151.232.123.0/24 maxlen: 24
151.232.119.0/24 maxlen: 24
151.232.122.0/24 maxlen: 24
151.232.125.0/24 maxlen: 24
151.232.121.0/24 maxlen: 24
151.232.124.0/24 maxlen: 24
151.232.120.0/24 maxlen: 24
151.232.127.0/24 maxlen: 24
151.232.126.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 227399035 (0xd8dd57b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3030a4b67f95c2fed902d56657faa2494b5129
Validity
Not Before: Jan 1 15:01:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a1bc54faff80c353b9718cbd1dd789d800b375f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:31:e6:05:4e:c1:51:7e:81:c4:35:2f:b1:4f:
8d:25:4c:68:35:d5:3b:95:3e:68:d0:55:3a:36:a2:
e7:66:ae:fc:7c:ad:09:53:4b:0a:53:5c:b3:65:ab:
83:a6:13:b4:3a:ae:47:02:50:90:69:7e:40:77:f1:
93:fd:3d:89:1e:2d:05:cd:cb:b3:14:a8:b6:d5:26:
9f:92:40:f5:a2:93:56:94:3b:e0:33:e5:60:33:2c:
7e:6a:67:11:41:5f:64:a6:7b:42:9e:8a:4b:33:5a:
70:29:a4:ff:68:d9:e7:1b:5f:c2:06:15:2c:0a:e0:
01:66:94:79:d1:00:4e:2a:e7:34:40:f7:50:90:96:
7c:2a:33:c0:fb:86:87:ae:dd:c6:17:e4:68:61:bd:
a1:57:4e:a6:e2:40:3a:f5:3f:57:5f:3e:1d:19:a2:
7d:fe:b2:40:05:ce:1a:94:a3:4a:32:1c:5f:8d:53:
b0:da:9e:0b:22:54:6e:5a:93:1b:0f:15:5b:ef:7d:
a6:9b:82:9f:82:60:76:80:62:11:e2:74:3a:44:3c:
3a:e4:30:1c:42:0a:6a:e5:9f:c4:d3:de:4f:72:46:
e2:52:79:c2:dc:4a:e8:65:d4:a8:22:e0:5a:76:b0:
df:ec:ca:54:8c:9a:00:8f:39:6e:47:60:bf:5a:d2:
1e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:BC:54:FA:FF:80:C3:53:B9:71:8C:BD:1D:D7:89:D8:00:B3:75:F4
X509v3 Authority Key Identifier:
keyid:6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/obxU-v-Aw1O5cYy9HdeJ2ACzdfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.232.112.0/20
Signature Algorithm: sha256WithRSAEncryption
54:2c:db:15:92:42:ad:db:d9:73:2f:d8:93:50:fc:25:20:4c:
c8:d7:e2:52:39:77:aa:85:09:fd:a1:02:16:2c:4d:3b:03:e8:
aa:4f:f2:25:78:d8:94:43:0a:2b:f6:fd:a6:a7:63:f0:cc:8b:
10:32:e4:c7:9c:60:68:77:84:dd:0d:c0:12:e4:db:e9:bd:dc:
80:bb:41:37:61:b5:09:77:c1:e2:14:92:90:c6:48:9a:30:5a:
9a:22:16:ae:6a:c6:f2:d1:2b:59:bb:3e:34:9e:aa:8f:a3:97:
0f:57:66:ea:91:73:66:5a:69:3c:0f:69:8b:49:24:1c:1c:14:
4c:57:0f:a9:9f:ec:95:40:ba:35:c2:28:eb:39:43:3e:5a:17:
b3:d8:95:df:ec:5c:a2:d0:39:ae:f7:a5:1d:4c:11:90:d9:40:
f5:92:eb:f0:6f:1f:de:39:13:5e:b7:06:64:1b:af:b3:f7:04:
2b:7f:ad:d2:24:a9:d1:4f:e5:a9:26:61:c2:2a:7c:cf:f6:43:
f3:f3:ca:e4:80:e4:f7:87:17:cc:98:79:a4:88:a4:e9:18:f1:
66:df:18:11:d9:69:41:53:cd:c6:1f:6c:cb:4a:c3:50:14:ab:
bb:4e:b1:04:1a:ad:37:05:3e:31:ef:4d:8c:fe:e2:61:8b:34:
44:74:d3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:51 2025 by rpki-client