Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/0Rgq1ptZ7SpRhTenc6Oswn_wkXg.roa
File: 0Rgq1ptZ7SpRhTenc6Oswn_wkXg.roa (raw, json)
Hash identifier: EDKaaKxTPnJHAT8P/fzKPyYJIrkwzxH1GhDOeFor5+k=
Subject key identifier: D1:18:2A:D6:9B:59:ED:2A:51:85:37:A7:73:A3:AC:C2:7F:F0:91:78
Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial: 01856D6645F5CADD2526F2AE4D60EF232B5B
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/0Rgq1ptZ7SpRhTenc6Oswn_wkXg.roa
Signing time: Sun 01 Jan 2023 12:54:57 +0000
ROA not before: Sun 01 Jan 2023 12:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59769
IP address blocks: 84.207.242.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:66:45:f5:ca:dd:25:26:f2:ae:4d:60:ef:23:2b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Validity
Not Before: Jan 1 12:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d1182ad69b59ed2a518537a773a3acc27ff09178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:11:ab:24:f5:b5:b2:6a:cf:9e:15:a8:64:9c:
9d:3a:be:1f:6b:c4:9a:65:98:e3:95:91:06:75:e1:
9b:3a:82:06:d4:73:be:6d:2c:85:25:03:7e:48:38:
6d:5d:f6:46:82:c9:dc:6e:44:e2:c4:05:e7:15:c8:
da:f2:c0:44:ed:83:7a:bf:83:b9:36:9e:01:52:12:
cc:63:c8:5b:a1:bd:88:a0:07:4a:aa:c1:4b:81:c6:
e8:37:06:a3:bb:47:41:03:79:91:a5:05:a1:4f:53:
84:55:68:71:c4:79:61:ce:68:77:81:a6:82:d0:a1:
cf:47:e6:5f:32:35:a8:ec:12:f8:82:49:01:7c:49:
b5:5a:a3:c1:8c:19:b4:dc:6b:ca:6d:ab:f8:09:6c:
72:1a:f4:10:04:e9:05:d8:6e:dd:b0:ec:91:db:73:
49:a2:ca:7c:5c:1f:dc:cc:2c:bd:85:ee:b7:ff:4b:
81:ae:a3:14:ae:10:9a:65:4f:77:3f:b3:85:bd:c4:
98:50:0a:35:a8:f4:44:ca:64:88:37:d3:38:be:eb:
f7:77:af:c7:74:71:61:9f:b3:3a:bd:ba:1e:a9:f0:
c9:f4:0e:65:85:65:63:17:6c:d4:92:26:76:f7:34:
cd:6a:e9:04:db:ef:92:67:97:f5:3c:f7:c9:35:c9:
b7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:18:2A:D6:9B:59:ED:2A:51:85:37:A7:73:A3:AC:C2:7F:F0:91:78
X509v3 Authority Key Identifier:
keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/0Rgq1ptZ7SpRhTenc6Oswn_wkXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.207.242.0/24
Signature Algorithm: sha256WithRSAEncryption
13:80:36:52:04:4b:c4:f8:94:17:25:d6:57:e0:9c:aa:4e:5c:
0a:4c:e4:cf:5e:db:47:ef:49:7d:f4:98:21:98:ea:76:bb:33:
a3:04:d7:88:34:40:57:8a:c5:04:45:a8:b4:39:5b:bf:fb:bb:
95:0f:45:ee:73:92:d0:e4:3f:5f:ad:d8:0a:1f:7e:d8:53:17:
28:56:df:c5:c5:3c:ea:02:c8:97:51:46:39:25:2f:56:fe:e2:
3e:bc:d9:45:5c:36:37:12:63:71:7c:b8:12:8b:fc:83:26:47:
4a:14:b1:d6:a8:4e:38:50:ec:f6:40:85:ab:0d:30:be:db:7f:
82:8e:38:78:3c:49:95:2b:93:f9:39:9d:ca:dd:e3:ca:89:0a:
ab:da:52:1e:e0:73:5c:39:9c:2d:5d:95:6a:8d:90:12:cb:7c:
88:95:04:84:6a:bb:d0:ed:da:03:ed:30:3a:e4:b2:87:2c:03:
9e:38:d9:b3:55:2d:61:0e:3f:3b:b2:a9:f8:64:91:43:aa:10:
51:a0:28:5f:8e:38:67:c0:61:5b:b6:e0:f7:23:71:fe:7a:84:
60:24:99:95:2d:3d:1c:be:40:86:37:18:0f:cd:0d:a4:65:19:
bc:2c:2f:3c:23:4e:75:95:e4:6e:77:2d:f3:dd:ea:fc:73:2f:
24:e2:14:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:54:28 2025 by rpki-client