Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/DcT0hGUFgBxNGYZdyIsi5qYmGhA.roa
File: DcT0hGUFgBxNGYZdyIsi5qYmGhA.roa (raw, json)
Hash identifier: dSfFbpEL8eyx5apKE7iV8h8B8qFYY+cNRvin5IjQHKI=
Subject key identifier: 0D:C4:F4:84:65:05:80:1C:4D:19:86:5D:C8:8B:22:E6:A6:26:1A:10
Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial: 1368E57D
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/DcT0hGUFgBxNGYZdyIsi5qYmGhA.roa
Signing time: Sat 01 Jan 2022 05:58:23 +0000
ROA not before: Sat 01 Jan 2022 05:58:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40999
IP address blocks: 83.125.8.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 325641597 (0x1368e57d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Validity
Not Before: Jan 1 05:58:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0dc4f4846505801c4d19865dc88b22e6a6261a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:17:46:17:8d:1a:43:df:35:f5:26:78:ae:2c:
76:6c:a4:3e:e1:29:01:d4:38:70:9b:a4:a0:91:4f:
c6:8e:bd:ee:86:66:6a:ef:1d:82:b9:68:ba:31:80:
92:44:a6:2b:ad:36:a9:d0:4d:31:a9:d1:da:f6:28:
d7:32:43:e3:dd:bc:74:93:38:f8:28:b3:ae:56:e3:
d8:70:b9:ee:b6:a2:69:cc:d3:2a:1a:35:e3:95:15:
21:cc:7d:ff:f5:f4:db:e0:7b:ad:59:84:fa:6f:ea:
83:e9:80:06:ab:00:c5:a2:f8:77:43:5c:13:4c:44:
0b:ab:4c:44:ac:3c:43:e7:fa:33:5a:86:6c:41:25:
2c:52:57:80:bd:6e:88:0b:40:12:2c:1a:1a:0f:7c:
a2:18:aa:ac:ee:7b:e2:73:90:27:08:57:cf:e4:9a:
90:0f:d1:81:f1:5b:8c:5d:88:2f:22:61:44:bd:8b:
f7:d1:4a:1d:0e:07:cd:4b:c6:d2:90:c3:e3:41:e0:
56:23:08:54:d3:01:f9:c2:f0:e0:a5:73:e6:c0:55:
91:1f:9a:c7:81:cc:4e:8e:fa:78:ec:ab:0d:9d:1b:
9c:b4:de:07:04:39:9b:20:7b:3c:03:cd:d7:25:f8:
a9:ad:ea:11:f1:05:5c:9c:da:9e:7f:a5:38:c5:40:
b4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C4:F4:84:65:05:80:1C:4D:19:86:5D:C8:8B:22:E6:A6:26:1A:10
X509v3 Authority Key Identifier:
keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/DcT0hGUFgBxNGYZdyIsi5qYmGhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.125.8.0/22
Signature Algorithm: sha256WithRSAEncryption
67:22:62:50:68:10:65:c1:03:69:31:9e:84:33:d4:25:54:03:
cd:10:a0:61:eb:cc:f5:04:e6:8b:eb:ce:f8:b8:4a:97:48:7c:
66:05:bd:d7:ab:79:c1:49:70:b7:cc:38:92:d0:ca:e4:6c:69:
4c:bb:90:fd:b4:5d:6c:13:cb:28:73:be:69:c2:47:13:e4:69:
77:79:33:b6:1b:2b:0f:fc:4c:30:57:f8:c4:0f:3e:e2:2b:3f:
27:09:05:0c:9f:a6:3a:69:f9:9e:83:6e:5d:73:f4:71:5e:d3:
e1:1c:f4:e8:20:9d:68:99:43:7b:8c:28:8b:98:68:cf:f1:1c:
5c:c1:9d:25:9a:49:6d:b6:47:9f:a0:1a:8e:9c:d4:c6:dd:5f:
63:7e:8c:ce:ba:fe:84:b4:58:c5:7b:b1:be:54:9b:32:c3:60:
43:c8:a1:83:0c:b8:f8:de:e2:d3:85:46:c8:be:20:94:bd:94:
54:86:b4:52:af:31:c3:4c:ee:6a:e6:08:34:53:5f:0d:92:0e:
a4:c7:d1:91:fb:60:ab:c7:cb:8f:14:a6:b8:f4:35:0e:12:63:
42:54:20:d7:6b:4f:ef:21:34:dc:83:86:b7:6f:0d:0a:df:94:
65:c9:fd:84:09:f6:4f:69:3c:18:cd:99:fc:86:f3:b0:c3:32:
50:5c:28:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:23:28 2025 by rpki-client