Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/003DbK98UiFYF4DZByBE9KhaFrE.roa
File: 003DbK98UiFYF4DZByBE9KhaFrE.roa (raw, json)
Hash identifier: 8m3XpKtEECvls1fhlvtrWY0EP4FynlMGm9odAEk3tNM=
Subject key identifier: D3:4D:C3:6C:AF:7C:52:21:58:17:80:D9:07:20:44:F4:A8:5A:16:B1
Certificate issuer: /CN=4074a7895875cf2c678544f6ce6f4b239f4929fb
Certificate serial: 01856FF97BA70938ED79A764FF69EA0B2376
Authority key identifier: 40:74:A7:89:58:75:CF:2C:67:85:44:F6:CE:6F:4B:23:9F:49:29:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHSniVh1zyxnhUT2zm9LI59JKfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/003DbK98UiFYF4DZByBE9KhaFrE.roa
Signing time: Mon 02 Jan 2023 00:54:59 +0000
ROA not before: Mon 02 Jan 2023 00:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5564
IP address blocks: 213.128.224.0/19 maxlen: 24
194.247.64.0/19 maxlen: 24
2a00:5580::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:7b:a7:09:38:ed:79:a7:64:ff:69:ea:0b:23:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4074a7895875cf2c678544f6ce6f4b239f4929fb
Validity
Not Before: Jan 2 00:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d34dc36caf7c5221581780d9072044f4a85a16b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:4e:a4:7c:78:e2:70:ac:cf:33:26:e5:4a:e3:
36:79:cd:bf:3a:db:c9:70:fa:39:7f:dc:ba:26:16:
e1:a3:a4:b1:4e:75:d0:2b:02:66:4c:48:ba:bd:1c:
10:86:27:58:78:c1:c5:f4:22:d7:c6:fc:6a:b3:9c:
f1:eb:cd:0f:76:22:e1:23:d2:26:93:fc:b2:d4:c0:
d2:7c:0b:b8:37:93:1b:ce:1c:a7:0e:c1:5a:23:d9:
b0:87:b5:2b:4a:21:59:ae:b5:65:45:6a:9a:bf:60:
92:72:bd:f6:f2:30:a3:d9:69:23:93:9c:c2:ce:6f:
cc:50:df:d3:99:07:7e:cc:e0:ed:73:87:e5:e2:08:
42:f7:a3:63:67:d9:cb:c2:d8:25:b2:2f:a5:a2:8b:
5c:74:1f:90:ad:78:de:1f:2e:f9:b4:20:2c:93:2d:
c5:fe:18:fe:05:d1:64:15:0c:dd:80:e6:db:df:2e:
3a:ca:f6:7e:91:20:f0:97:a8:f4:82:c7:c4:e9:09:
eb:e0:5a:83:21:96:10:3c:89:a2:39:1a:7f:74:bb:
a0:7c:05:77:64:24:ce:55:f4:63:7a:47:93:da:a2:
a5:d4:e3:b1:29:b2:3f:7c:6f:71:31:d6:64:15:cc:
95:ec:64:83:76:db:87:49:1e:57:0c:5c:a8:dd:83:
cf:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:4D:C3:6C:AF:7C:52:21:58:17:80:D9:07:20:44:F4:A8:5A:16:B1
X509v3 Authority Key Identifier:
keyid:40:74:A7:89:58:75:CF:2C:67:85:44:F6:CE:6F:4B:23:9F:49:29:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHSniVh1zyxnhUT2zm9LI59JKfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/003DbK98UiFYF4DZByBE9KhaFrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.247.64.0/19
213.128.224.0/19
IPv6:
2a00:5580::/29
Signature Algorithm: sha256WithRSAEncryption
6d:52:32:57:a4:35:a2:b6:d9:b9:c3:3b:85:34:19:e4:26:95:
19:67:97:5b:e2:24:81:65:d8:64:50:7f:b3:55:95:a0:8c:d9:
ed:a0:b6:c4:88:79:30:65:61:5b:5f:84:c7:38:bd:59:8e:06:
4a:8a:a7:3d:c2:1c:87:c3:c6:32:a6:50:d0:3e:eb:4e:68:d0:
41:ec:b6:6a:d1:3a:33:73:94:dd:dd:3a:b4:4f:43:45:40:8d:
f5:ff:5f:c9:57:21:a8:97:4a:58:4d:35:1c:b4:af:9c:59:9a:
2f:91:61:19:27:f9:6a:54:12:9a:40:32:36:41:d6:97:63:8b:
9d:6b:bc:b5:68:32:7d:0c:97:8c:91:36:75:1f:5b:0f:91:10:
de:f0:31:98:08:ae:3a:46:43:29:d5:37:44:8b:ad:65:c2:34:
0f:95:19:f9:d1:60:7e:db:ba:37:03:75:fa:f0:d3:d0:c9:03:
65:1e:95:81:15:27:df:5f:08:16:0b:0e:65:a0:1c:b9:d2:f9:
e9:10:85:d7:42:06:6e:6f:04:15:9d:0e:e4:1f:8f:62:26:98:
f0:be:dc:46:08:cb:0c:8a:0b:03:18:a4:bc:32:bd:a6:63:37:
9e:89:38:98:83:a2:4d:65:e3:18:da:7e:ef:bc:01:f3:fa:4e:
62:59:44:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:37:02 2025 by rpki-client