Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/a_-eFxkizrDv7mjavDt3VqrMCnM.roa
File: a_-eFxkizrDv7mjavDt3VqrMCnM.roa (raw, json)
Hash identifier: SAJIrQakM6uQ4MsZCPU1BkJCUB9F9esbxQWhyQtl/Kw=
Subject key identifier: 6B:FF:9E:17:19:22:CE:B0:EF:EE:68:DA:BC:3B:77:56:AA:CC:0A:73
Certificate issuer: /CN=554adb72b82ecfafc5705e25febcab5c82d76ee6
Certificate serial: 0185E37BC5048DDF4012A0A1001CD46471BC
Authority key identifier: 55:4A:DB:72:B8:2E:CF:AF:C5:70:5E:25:FE:BC:AB:5C:82:D7:6E:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VUrbcrguz6_FcF4l_ryrXILXbuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/a_-eFxkizrDv7mjavDt3VqrMCnM.roa
Signing time: Tue 24 Jan 2023 11:13:37 +0000
ROA not before: Tue 24 Jan 2023 11:13:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39519
IP address blocks: 217.18.112.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e3:7b:c5:04:8d:df:40:12:a0:a1:00:1c:d4:64:71:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=554adb72b82ecfafc5705e25febcab5c82d76ee6
Validity
Not Before: Jan 24 11:13:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6bff9e171922ceb0efee68dabc3b7756aacc0a73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:29:1f:4c:00:9e:d1:0a:1d:1c:e3:da:30:4b:
54:a7:37:23:39:d6:d5:0c:89:8a:76:14:c4:da:c6:
79:e9:f3:b6:b9:fb:dd:e5:67:8c:a9:03:d4:51:9c:
c4:7c:30:7e:c0:67:87:61:b2:5b:5c:4b:46:cd:02:
f7:f1:5f:b7:d6:29:08:5e:5d:c3:e7:45:04:85:9c:
e7:18:e8:f3:fe:ae:58:ef:9f:cb:7a:06:78:a1:ce:
2b:a3:7c:09:45:17:5e:f0:e2:4d:3e:18:59:f4:40:
37:a5:48:d5:24:af:a1:70:6e:2d:10:b3:5d:5f:59:
a9:5e:53:cb:b6:b8:95:61:8f:b4:ca:c1:6e:a6:6a:
1c:22:c9:6c:fe:35:40:19:9d:12:4c:d6:33:24:a3:
e0:f2:af:da:4d:bd:65:1c:a1:ae:8e:d0:9d:d2:55:
f1:91:40:44:f5:0c:e3:3b:f4:e5:c3:53:5b:12:be:
6b:d9:b0:98:b7:9a:c6:c8:ee:fa:5e:1b:06:cd:39:
e7:ce:27:45:39:21:1d:15:5c:14:47:be:85:c2:54:
d5:a0:09:70:c4:ae:5b:90:1e:e4:38:f2:0f:1b:11:
1b:1a:1f:73:73:8a:e3:b5:7e:e8:9a:1b:a8:8f:b7:
94:f9:aa:96:b7:cf:96:32:ef:dc:fe:68:5a:09:75:
ba:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:FF:9E:17:19:22:CE:B0:EF:EE:68:DA:BC:3B:77:56:AA:CC:0A:73
X509v3 Authority Key Identifier:
keyid:55:4A:DB:72:B8:2E:CF:AF:C5:70:5E:25:FE:BC:AB:5C:82:D7:6E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUrbcrguz6_FcF4l_ryrXILXbuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/a_-eFxkizrDv7mjavDt3VqrMCnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/VUrbcrguz6_FcF4l_ryrXILXbuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.18.112.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:a2:b9:85:c4:a7:b7:d7:02:9a:7c:a6:f8:c2:cc:06:cc:60:
3c:e7:e3:74:3a:3b:f3:af:b9:24:44:64:60:45:7b:62:6f:03:
04:a6:28:dd:03:eb:1e:df:23:c7:b0:73:b9:07:61:84:43:e8:
c0:02:49:32:68:ab:10:77:55:9a:90:f3:a9:a8:fd:c1:ee:c1:
6c:6c:5e:46:58:62:a5:65:30:f8:7c:42:1b:83:97:d4:e9:f7:
19:0d:ee:d0:fe:17:0b:20:8e:ef:cd:e7:9a:05:da:30:a2:92:
a9:1a:f0:b8:dc:0d:8c:12:8e:f4:2d:1b:f6:52:6f:1f:76:98:
21:8c:06:34:7e:4c:0f:89:92:d5:67:c9:b2:5e:df:e6:9d:2f:
bb:19:2a:1a:9a:de:6a:93:8b:be:b4:16:43:bc:a3:33:a6:5c:
f3:5e:f1:51:2a:9f:ee:4a:6a:7c:b1:51:7e:6d:ad:a8:59:16:
88:33:20:44:11:12:cc:c0:42:7a:c9:79:8e:9f:be:d7:7f:3e:
87:24:89:65:8b:3c:88:1c:0c:ad:6c:1a:aa:37:bb:2d:80:b5:
d9:f2:13:35:7b:4d:91:3e:f2:ed:74:05:d5:30:e4:a4:8c:69:
9d:c9:95:76:01:67:d2:e4:73:93:de:55:07:3e:38:bd:a8:e3:
1d:9b:7b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:59:53 2025 by rpki-client