Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/rSRuUh3GxA43dIK1B17MSqY9MMk.roa
File: rSRuUh3GxA43dIK1B17MSqY9MMk.roa (raw, json)
Hash identifier: 3EUtWWY9dxE2u3UQpYxFjna243jyrTKTe+53/NW5Uss=
Subject key identifier: AD:24:6E:52:1D:C6:C4:0E:37:74:82:B5:07:5E:CC:4A:A6:3D:30:C9
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 425B2A9B
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/rSRuUh3GxA43dIK1B17MSqY9MMk.roa
Signing time: Sat 01 Jan 2022 14:03:01 +0000
ROA not before: Sat 01 Jan 2022 14:03:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15830
IP address blocks: 192.71.155.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1113270939 (0x425b2a9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 14:03:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ad246e521dc6c40e377482b5075ecc4aa63d30c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:12:01:2f:ef:32:35:a9:38:87:6a:da:f5:8c:
0f:fc:a1:49:22:01:57:dd:aa:76:b8:3f:c1:12:82:
06:10:1a:2c:c9:87:b2:9f:87:6b:2a:28:86:10:19:
17:1f:bd:66:b1:4c:bd:20:fe:63:10:54:3f:a7:e7:
f1:30:aa:93:1f:01:1f:9d:5a:9f:8f:d7:0e:11:0b:
fa:bd:51:4d:74:5c:9c:c6:c7:f7:cc:40:f2:1b:1a:
a3:12:e8:c8:1c:19:e8:03:85:f9:f7:36:a7:1f:77:
8b:9f:c0:67:eb:ca:98:be:22:c5:d1:fc:a9:1b:56:
93:36:f1:c4:de:39:ec:93:3f:90:e9:23:46:2c:12:
9f:3f:2d:39:5d:82:79:03:f0:6f:bd:81:ec:af:a5:
69:df:91:c2:d2:49:60:d8:44:16:87:2f:94:15:31:
99:1e:c4:e1:38:04:72:cb:17:63:76:6b:29:f5:6f:
1b:89:a0:1b:da:9f:d1:67:3c:94:55:12:95:10:06:
ac:20:89:fb:25:8e:48:5a:2d:8b:60:de:b4:97:40:
3e:de:d3:00:73:a1:ee:bf:d8:d6:30:95:fd:a6:5a:
7b:2b:d4:63:a9:af:80:87:44:43:da:8e:9e:68:5b:
08:a7:97:6e:d5:4f:e7:5f:7f:fd:ef:f3:b1:89:a6:
dc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:24:6E:52:1D:C6:C4:0E:37:74:82:B5:07:5E:CC:4A:A6:3D:30:C9
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/rSRuUh3GxA43dIK1B17MSqY9MMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.155.0/24
Signature Algorithm: sha256WithRSAEncryption
04:95:3f:15:fd:6d:ef:3b:bb:c6:30:56:30:33:80:c5:1b:a5:
71:69:b2:2f:96:68:6a:fe:9d:94:e3:90:67:62:8c:12:82:b4:
5d:0f:11:65:85:bb:85:9f:51:4e:76:4b:46:3f:d8:20:52:0d:
65:55:cb:ee:b8:30:e0:ae:84:be:bb:6c:e7:39:61:79:8e:63:
c0:80:7c:76:2a:9c:a0:b3:58:e3:33:33:66:15:ad:b4:33:56:
4f:7f:93:6c:31:a9:07:4d:58:d4:4f:c6:49:1a:78:91:06:ac:
f9:1d:e8:46:78:bc:10:df:eb:47:75:0c:e9:b2:54:18:e2:54:
ae:2f:39:b2:bc:fc:f6:aa:bb:ce:3b:e0:8d:fa:fa:91:23:3e:
90:98:49:b4:81:f8:c7:20:ed:ad:f1:d1:07:b5:8d:aa:f6:1c:
17:8a:f8:1c:5c:fc:c9:ea:3b:73:5f:21:d4:51:d2:97:25:65:
54:01:2a:ba:93:b1:90:0d:e8:4a:82:2d:38:aa:54:85:3e:ab:
e9:1c:25:ac:19:b7:fc:1b:b8:71:b3:93:bc:5f:fd:bd:e2:c3:
78:4c:76:32:bf:b7:c1:9e:00:e1:3f:5d:13:1a:23:09:8b:32:
dc:22:91:b6:25:68:b8:55:c7:8b:7b:18:22:55:0d:41:f2:ec:
70:da:cc:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:06 2025 by rpki-client