Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/9FuoXUgEkOqf3eEB4oWPLD2q_bk.roa
File: 9FuoXUgEkOqf3eEB4oWPLD2q_bk.roa (raw, json)
Hash identifier: Qa9feEjHgRb/Lzbwz4UpJA4hgnYa77QwZADW+hKSGAk=
Subject key identifier: F4:5B:A8:5D:48:04:90:EA:9F:DD:E1:01:E2:85:8F:2C:3D:AA:FD:B9
Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial: 01856D664079BAE3CF6993741D0F502C0C5A
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/9FuoXUgEkOqf3eEB4oWPLD2q_bk.roa
Signing time: Sun 01 Jan 2023 12:54:55 +0000
ROA not before: Sun 01 Jan 2023 12:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22005
IP address blocks: 84.207.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:66:40:79:ba:e3:cf:69:93:74:1d:0f:50:2c:0c:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Validity
Not Before: Jan 1 12:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f45ba85d480490ea9fdde101e2858f2c3daafdb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:00:cd:a5:32:de:21:36:9a:e0:dd:62:01:4f:
3f:e2:ed:96:c0:08:65:e1:d8:6c:4c:40:49:73:05:
ab:58:f9:80:f6:9b:71:71:29:c6:07:9c:40:c6:6f:
23:49:3f:83:a5:69:4f:c8:90:f5:0f:45:11:d8:ee:
eb:5a:06:b0:11:43:67:f4:dc:68:4a:ba:37:ca:d6:
be:3b:2d:78:63:94:c7:0f:2b:e8:10:f9:0c:15:4c:
5d:01:71:88:42:c3:7e:7d:ed:9b:9c:c1:54:8f:aa:
3c:f1:2e:2a:95:15:86:f7:fb:ee:f2:c6:f9:1a:ce:
92:c4:ca:19:1a:fb:35:a2:f7:83:d2:95:29:31:ad:
74:c3:78:6c:51:63:b8:ba:cc:31:3a:0d:58:a3:fd:
d5:88:9c:46:4a:a1:f2:f3:8f:09:e7:a9:61:cd:77:
fa:16:56:bc:8b:e5:41:da:1a:e6:70:e6:e8:a5:78:
4a:11:f7:95:d0:36:ac:9d:a6:f6:80:86:19:a4:de:
ec:68:b1:c2:6c:17:dc:61:49:ca:63:f6:ac:e4:45:
a1:4c:11:4f:2d:e2:f0:88:b8:b3:1b:97:21:ee:60:
af:87:50:36:62:d7:56:8f:db:dd:36:d5:73:7c:8c:
c2:67:b9:81:8a:d4:00:1a:48:ad:5b:88:60:96:e1:
8b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:5B:A8:5D:48:04:90:EA:9F:DD:E1:01:E2:85:8F:2C:3D:AA:FD:B9
X509v3 Authority Key Identifier:
keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/9FuoXUgEkOqf3eEB4oWPLD2q_bk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.207.217.0/24
Signature Algorithm: sha256WithRSAEncryption
78:4e:da:b5:71:79:e1:3a:60:98:fc:c8:ac:90:7a:70:f1:d1:
26:e4:a9:8c:20:74:85:f0:41:35:55:c4:60:d0:c8:11:26:26:
25:cb:05:33:36:ff:3e:d8:a1:fa:6c:86:ed:17:0c:c8:42:d7:
af:cf:f4:60:9a:4b:b2:ff:10:56:f2:98:11:8d:13:e0:38:9f:
3a:9a:fd:5f:46:30:d1:2d:2c:65:24:2b:14:0f:48:bc:9e:66:
4f:62:85:2b:77:84:61:ad:1b:59:db:e9:1a:0c:d1:70:ca:c8:
8d:a3:10:58:a3:62:dc:49:26:e4:84:a8:d4:ab:97:e6:58:eb:
bd:6a:6a:b5:58:37:aa:1f:9a:9e:96:b6:3a:ee:83:0c:b2:09:
92:d4:43:c4:a0:9a:b4:9f:90:51:70:cc:29:20:af:7d:4c:e6:
e4:44:fe:9d:97:cf:03:34:0d:e7:16:a2:a2:0e:86:9d:77:e3:
dd:4e:e8:2f:71:62:b8:37:93:28:85:f3:9b:d3:ae:d4:d9:fe:
d1:80:7b:3c:ff:3a:59:bb:84:a9:02:88:06:83:ec:e5:97:40:
8e:bc:57:32:c4:09:20:5a:46:17:55:87:71:74:b5:75:2f:e2:
93:3c:7e:81:b9:16:d8:f2:0f:88:4c:41:ff:df:46:82:ab:ac:
a6:64:aa:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:43:47 2025 by rpki-client