Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/V5ZwaXxGr01r1iuEXJefkF-aro8.roa
File: V5ZwaXxGr01r1iuEXJefkF-aro8.roa (raw, json)
Hash identifier: KB7tUgnDQgMTNOIWX8a71CLzsLIPOb9Ikse5szbM2q0=
Subject key identifier: 57:96:70:69:7C:46:AF:4D:6B:D6:2B:84:5C:97:9F:90:5F:9A:AE:8F
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01896F398087CB663BE1A6B704AA9FC60EF9
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/V5ZwaXxGr01r1iuEXJefkF-aro8.roa
Signing time: Wed 19 Jul 2023 17:36:26 +0000
ROA not before: Wed 19 Jul 2023 17:36:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51026
IP address blocks: 81.12.24.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6f:39:80:87:cb:66:3b:e1:a6:b7:04:aa:9f:c6:0e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jul 19 17:36:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=579670697c46af4d6bd62b845c979f905f9aae8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2e:bf:82:68:41:4f:e0:a8:94:80:73:23:35:
49:cd:6f:85:7b:78:45:b1:e6:11:06:83:39:82:e0:
71:7e:64:f1:4a:60:8b:82:10:77:0a:57:96:d3:bd:
85:df:62:a0:d8:e5:63:40:88:53:5b:3c:a5:c8:84:
db:a5:11:4e:a8:93:59:bd:12:93:58:3e:b5:da:a6:
d1:db:e0:22:19:03:43:72:9a:43:92:ee:b8:cf:8a:
7e:95:24:a2:4e:bc:79:f4:1b:9e:22:8f:73:2e:0e:
d1:51:8e:03:12:7e:b4:54:df:b8:54:44:ec:75:dd:
4c:3e:49:c5:16:cd:84:4d:9a:9b:1f:a5:ad:43:0e:
79:a4:ee:fc:49:66:d8:71:1d:ba:7b:88:9c:9e:0e:
5c:a2:d0:55:02:a5:56:6c:82:54:7b:20:46:ed:83:
e3:4e:61:eb:50:45:3c:f9:3c:43:e2:6e:28:c5:f0:
79:97:b1:c1:82:29:3e:ae:8d:1e:6e:48:72:59:63:
f3:ec:7e:7f:5f:24:5b:3e:ee:9a:d1:bf:c6:e1:a9:
54:f9:55:6d:e2:ed:fa:70:e9:30:eb:95:d6:57:cb:
0e:bd:72:05:5d:31:ec:37:ba:cd:ee:b1:e8:10:51:
ee:19:79:57:73:a9:f5:02:f3:8c:74:db:5b:f9:cc:
6f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:96:70:69:7C:46:AF:4D:6B:D6:2B:84:5C:97:9F:90:5F:9A:AE:8F
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/V5ZwaXxGr01r1iuEXJefkF-aro8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.12.24.0/23
Signature Algorithm: sha256WithRSAEncryption
15:4c:17:f0:5d:df:1f:30:25:b9:2a:67:dc:37:ad:8a:fe:4d:
08:7b:bb:d3:41:de:2e:79:5a:cb:dc:4f:0f:8a:94:04:34:bd:
01:0e:77:c9:07:85:5d:63:0c:f5:d6:42:8d:1d:5d:a8:98:9a:
31:fa:e3:e7:2d:c1:15:1c:f9:d2:f3:3b:1a:90:38:29:d2:ad:
26:58:e5:81:b5:45:e0:8c:03:53:be:83:61:8d:a6:19:d6:90:
d0:d9:a0:43:77:dd:d3:22:6f:ca:81:9b:b4:23:07:a8:09:9a:
12:3e:7a:f2:9d:78:d0:ba:d9:a7:a8:73:b5:11:ce:35:aa:fd:
d6:16:69:42:8a:73:f4:29:bb:98:f5:17:6f:2d:bb:17:fe:9b:
32:fe:df:89:24:bb:3d:72:ad:8f:ff:7b:73:b1:01:de:d5:ec:
9d:d2:b5:59:9a:16:36:ef:c4:96:f3:e9:80:c5:34:c6:8a:a1:
62:4d:42:d1:ff:a4:f8:d4:e2:24:f3:cd:5a:57:51:cb:a1:9b:
33:73:b2:6a:86:54:2c:77:9e:5d:52:23:b2:5d:46:7e:7d:a7:
8c:97:02:09:83:25:05:66:13:3f:99:7a:2e:f2:06:4c:72:67:
a7:33:1e:58:b8:a8:51:f7:16:91:c5:9f:ec:26:b4:ac:89:86:
bc:dd:23:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:31:43 2025 by rpki-client