Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/42zeARJ3tYL9lxZPz3_xi3VjjaQ.roa
File: 42zeARJ3tYL9lxZPz3_xi3VjjaQ.roa (raw, json)
Hash identifier: IzV8guPKk8VDLIw1ujnM2Xl+Oe9DMReuqhtD9OCsrdg=
Subject key identifier: E3:6C:DE:01:12:77:B5:82:FD:97:16:4F:CF:7F:F1:8B:75:63:8D:A4
Certificate issuer: /CN=1778cfc09a363a73cc8dda362a2c9e8223d7dad6
Certificate serial: 0132B5EC
Authority key identifier: 17:78:CF:C0:9A:36:3A:73:CC:8D:DA:36:2A:2C:9E:82:23:D7:DA:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/42zeARJ3tYL9lxZPz3_xi3VjjaQ.roa
Signing time: Tue 29 Mar 2022 16:34:04 +0000
ROA not before: Tue 29 Mar 2022 16:34:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60664
IP address blocks: 153.92.124.0/24 maxlen: 24
157.97.78.0/23 maxlen: 23
153.92.64.0/24 maxlen: 24
153.92.66.0/24 maxlen: 24
153.92.65.0/24 maxlen: 24
153.92.68.0/24 maxlen: 24
153.92.67.0/24 maxlen: 24
153.92.70.0/24 maxlen: 24
153.92.69.0/24 maxlen: 24
153.92.71.0/24 maxlen: 24
153.92.162.0/24 maxlen: 24
153.92.161.0/24 maxlen: 24
153.92.164.0/24 maxlen: 24
153.92.163.0/24 maxlen: 24
153.92.165.0/24 maxlen: 24
153.92.166.0/24 maxlen: 24
153.92.160.0/24 maxlen: 24
153.92.167.0/24 maxlen: 24
153.92.169.0/24 maxlen: 24
153.92.168.0/24 maxlen: 24
153.92.170.0/24 maxlen: 24
153.92.172.0/24 maxlen: 24
153.92.171.0/24 maxlen: 24
153.92.174.0/24 maxlen: 24
153.92.173.0/24 maxlen: 24
157.180.192.0/24 maxlen: 24
157.180.193.0/24 maxlen: 24
157.180.195.0/24 maxlen: 24
157.180.194.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20100588 (0x132b5ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1778cfc09a363a73cc8dda362a2c9e8223d7dad6
Validity
Not Before: Mar 29 16:34:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e36cde011277b582fd97164fcf7ff18b75638da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6d:c0:06:7c:f6:30:d1:ee:c5:09:8d:0c:d3:
77:81:2e:dc:7d:12:f1:a8:a3:65:30:1a:d1:02:56:
5b:82:3c:13:13:51:ef:e7:5e:db:76:e8:0d:d6:21:
67:2e:31:83:e3:0f:98:7a:95:cb:a4:fc:c0:82:38:
72:cf:90:18:1d:06:88:76:58:b6:5b:59:2a:f5:89:
b4:15:2c:a2:38:73:e0:96:a1:97:47:c7:74:87:be:
c2:91:62:e7:17:84:b7:92:73:b3:77:8f:c0:a3:d9:
f6:b6:53:5f:ff:67:89:66:bc:f3:ce:51:4a:88:61:
08:ed:90:2f:35:2b:ad:34:3a:23:b0:49:4b:44:25:
49:23:b6:69:dc:5d:ba:c0:90:4d:5b:d8:6a:2f:b4:
eb:00:f2:75:9d:b6:9b:09:22:bc:49:69:51:45:10:
8f:52:d9:34:e2:74:b9:3c:01:5f:50:80:f0:56:87:
f8:70:42:e9:7c:d7:3c:27:c1:b6:77:6d:e9:0c:b2:
25:5c:d4:33:cc:b0:ea:f8:c2:0d:55:72:f1:c5:b0:
45:df:57:33:6c:5a:fa:54:31:f6:4c:2f:4c:b6:b4:
dc:60:b9:11:8f:76:29:4e:db:32:dc:9f:a4:98:29:
b0:da:30:67:2d:94:da:a2:fb:94:6a:5b:16:e0:9a:
c2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:6C:DE:01:12:77:B5:82:FD:97:16:4F:CF:7F:F1:8B:75:63:8D:A4
X509v3 Authority Key Identifier:
keyid:17:78:CF:C0:9A:36:3A:73:CC:8D:DA:36:2A:2C:9E:82:23:D7:DA:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/42zeARJ3tYL9lxZPz3_xi3VjjaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.92.64.0/21
153.92.124.0/24
153.92.160.0-153.92.174.255
157.97.78.0/23
157.180.192.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:8e:a2:ff:68:64:5a:0d:9e:0a:09:76:1b:f2:22:e5:68:a3:
f2:f6:21:a1:d7:2a:33:16:bc:d7:ca:d6:89:1d:a3:1b:3f:f3:
ae:9e:87:1f:11:86:71:a4:0c:44:f0:0a:ef:2b:f9:5f:3a:c3:
51:5c:3d:44:d7:c9:7d:45:18:76:e7:7e:07:19:fe:36:89:02:
93:9d:38:15:10:ab:04:53:74:0a:98:14:36:b1:2e:dc:c5:cc:
f9:b0:f2:e1:66:80:e2:21:62:08:16:12:ca:a3:24:be:4d:9a:
ec:67:3a:09:79:87:f6:0c:91:56:eb:a9:a2:fc:48:d4:43:90:
db:ae:8b:ed:78:61:cf:8f:98:39:43:46:1d:0f:84:f5:58:d2:
3c:0a:58:5b:7e:4a:c5:ce:34:bf:bd:37:1f:6d:94:c6:c4:ab:
19:bc:9a:7e:0e:87:af:04:f5:7b:c6:7d:e3:dd:74:ab:68:09:
0e:59:df:e5:78:03:01:10:cc:2e:ce:08:cb:a2:84:1f:7b:1e:
e2:28:b6:84:41:c7:73:e6:66:ac:1a:cf:f9:e2:31:64:b7:65:
c2:f5:38:80:31:be:5e:ac:5b:d8:56:93:31:83:66:08:e2:84:
10:c9:18:f7:32:6a:c6:8c:ee:3f:de:05:d3:77:52:0a:e7:e0:
25:2b:91:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:33:25 2025 by rpki-client