Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9438b7-39a2-4c95-af1a-cdb1fdc9d57d/1/83dvStWjQ80zvJ00_N514YoMJG0.roa
File: 83dvStWjQ80zvJ00_N514YoMJG0.roa (raw, json)
Hash identifier: ot5sAO5hqIKJ2SVCFaZyoGfRfwShZNe/r5fltYhCmS8=
Subject key identifier: F3:77:6F:4A:D5:A3:43:CD:33:BC:9D:34:FC:DE:75:E1:8A:0C:24:6D
Certificate issuer: /CN=efe01974743a3b3a28f7a64e2d871bf1e5e5f6e5
Certificate serial: 01856D13C8B40A434A20AAB9F805A8654BCB
Authority key identifier: EF:E0:19:74:74:3A:3B:3A:28:F7:A6:4E:2D:87:1B:F1:E5:E5:F6:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/9438b7-39a2-4c95-af1a-cdb1fdc9d57d/1/83dvStWjQ80zvJ00_N514YoMJG0.roa
Signing time: Sun 01 Jan 2023 11:24:51 +0000
ROA not before: Sun 01 Jan 2023 11:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13190
IP address blocks: 185.117.164.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:13:c8:b4:0a:43:4a:20:aa:b9:f8:05:a8:65:4b:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efe01974743a3b3a28f7a64e2d871bf1e5e5f6e5
Validity
Not Before: Jan 1 11:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3776f4ad5a343cd33bc9d34fcde75e18a0c246d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:92:3e:64:fd:a6:ce:8c:82:cf:2f:52:60:46:
49:5c:8d:52:15:50:3a:4e:e2:ad:2a:7c:75:c1:24:
48:af:24:91:09:d8:5a:89:66:09:a5:8e:7b:67:a9:
d3:9e:31:0c:d8:6e:91:7a:15:a8:b4:bc:68:76:b3:
ae:19:e6:55:97:f9:52:a4:88:27:de:9d:ca:08:5e:
15:e7:01:08:4c:b5:08:9e:62:6b:41:cb:50:4e:9b:
f4:44:48:e8:0e:d7:cc:cb:2d:cb:cf:cd:6f:28:b6:
8e:34:5f:64:43:63:3c:df:73:e7:99:de:d3:0f:f9:
ac:09:6a:54:6f:6d:43:71:8e:fd:92:5a:21:e0:cf:
51:1d:38:a6:80:8c:97:99:9f:17:36:1a:4f:9e:b4:
b4:9d:02:74:d0:5a:3c:8a:b5:3c:6d:52:84:26:3b:
92:22:0f:f5:23:70:f2:e8:d0:20:79:41:47:6e:a7:
98:97:9e:b5:67:85:b0:84:14:4f:21:7f:1a:e3:d5:
14:ee:20:ca:d5:81:5a:22:e9:a4:21:6c:1a:43:75:
da:00:1b:e9:57:d8:ed:71:d7:f8:3b:02:18:87:f7:
54:86:64:6e:bb:51:a2:48:39:ed:dd:70:eb:fb:b6:
9c:82:9b:eb:0b:0d:04:10:c6:88:a2:bd:4b:ae:0b:
35:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:77:6F:4A:D5:A3:43:CD:33:BC:9D:34:FC:DE:75:E1:8A:0C:24:6D
X509v3 Authority Key Identifier:
keyid:EF:E0:19:74:74:3A:3B:3A:28:F7:A6:4E:2D:87:1B:F1:E5:E5:F6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9438b7-39a2-4c95-af1a-cdb1fdc9d57d/1/83dvStWjQ80zvJ00_N514YoMJG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9438b7-39a2-4c95-af1a-cdb1fdc9d57d/1/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.164.0/22
Signature Algorithm: sha256WithRSAEncryption
34:07:9d:48:9a:be:00:88:6b:4e:c3:ee:15:ea:0f:4c:23:f5:
8f:1a:40:c0:19:d4:42:43:0f:a9:b2:ef:25:d5:cd:44:4b:95:
32:5a:d7:aa:89:b5:e2:4c:62:18:e9:6c:0d:b3:22:64:e7:b0:
9b:1c:c0:64:3b:99:73:a4:6a:aa:ed:9a:a2:ea:da:93:85:04:
80:d0:74:a1:2c:78:e7:39:fc:44:2a:ab:89:56:38:af:29:47:
e6:56:63:fa:18:52:7c:ad:b4:aa:4e:68:39:f9:5e:62:af:f2:
df:43:72:4a:ff:4c:58:fa:6b:ec:af:a7:2c:2e:15:af:5d:b5:
00:7a:73:41:b3:9a:25:3f:c9:2a:5d:20:e4:d7:ad:eb:b8:52:
20:0d:66:e1:60:e1:67:f5:3c:ad:e6:0d:e2:1c:86:2e:28:84:
3d:23:58:e6:d9:b0:7c:c4:b0:41:4a:9d:39:4b:57:6d:df:ea:
48:98:26:9c:06:f8:e3:24:85:52:bf:65:f0:e4:fd:f8:7a:ea:
9e:28:6d:7a:38:9f:a8:4a:e3:75:55:2c:d4:00:20:e5:74:8d:
cb:b4:fe:ce:8d:50:ea:a7:0a:32:82:4f:e8:5d:18:45:58:39:
d3:dd:50:05:b9:9b:8e:d0:13:bb:00:0f:5d:54:4c:f2:4b:e9:
50:2b:3e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:29:31 2025 by rpki-client