Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/9xQMFDNHlzn8KDmAs2QR-WTM3Ow.roa
File: 9xQMFDNHlzn8KDmAs2QR-WTM3Ow.roa (raw, json)
Hash identifier: VGvF90wNKsah0sSjcd8KoPeZp6eEtRtWuwfZUUbTt3k=
Subject key identifier: F7:14:0C:14:33:47:97:39:FC:28:39:80:B3:64:11:F9:64:CC:DC:EC
Certificate issuer: /CN=dc44e19e2bb4e7023cc1ba10d49b74ede4bf865c
Certificate serial: 018A69FF8C7CC2848FCCFBFD1BA89A166D61
Authority key identifier: DC:44:E1:9E:2B:B4:E7:02:3C:C1:BA:10:D4:9B:74:ED:E4:BF:86:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/9xQMFDNHlzn8KDmAs2QR-WTM3Ow.roa
Signing time: Wed 06 Sep 2023 10:17:49 +0000
ROA not before: Wed 06 Sep 2023 10:17:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206747
IP address blocks: 25.129.198.0/23 maxlen: 23
2a08:600:ee::/47 maxlen: 47
2a08:600:99::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:69:ff:8c:7c:c2:84:8f:cc:fb:fd:1b:a8:9a:16:6d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc44e19e2bb4e7023cc1ba10d49b74ede4bf865c
Validity
Not Before: Sep 6 10:17:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7140c1433479739fc283980b36411f964ccdcec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:61:8a:70:50:ae:d8:c8:19:f5:d4:14:5a:41:
41:15:a3:a0:74:e1:34:8b:25:71:d3:d9:e8:6c:2c:
cf:8a:65:e2:62:a3:96:da:13:ab:4d:e4:4f:d8:93:
db:25:fb:54:34:e4:06:be:36:6c:b6:c0:bc:8c:f5:
29:02:89:9c:f5:ce:49:32:fe:d4:a2:bd:81:cd:c4:
49:94:bc:9e:4a:72:fb:91:80:3c:6d:07:c5:93:aa:
1c:0c:0b:30:99:fd:1f:2f:a8:e4:45:80:e8:13:26:
ef:48:76:3e:02:ad:00:2a:44:31:c7:69:7e:97:6e:
c9:b8:df:3f:48:1b:26:42:db:1e:7e:81:c4:d9:0b:
45:e6:a6:ac:eb:81:c8:3b:68:cf:20:dc:f9:33:06:
ef:5f:c6:29:2e:02:9b:fe:89:31:59:f5:8a:7b:99:
3c:05:45:8f:f5:77:4d:d8:8d:d0:bb:0e:69:a3:e2:
3c:f7:ae:89:2e:37:90:83:fa:7e:70:10:2c:e4:a6:
a8:e7:6c:cf:63:1c:d8:23:c0:f5:72:00:7a:75:c8:
b1:9c:66:1c:f2:c1:1d:32:a6:1b:e9:ce:a2:0a:03:
cc:bb:02:f8:22:e6:1e:32:0a:ea:18:f8:d1:3c:b4:
3d:04:76:ca:35:34:5f:6f:65:e7:fe:7f:d7:34:12:
af:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:14:0C:14:33:47:97:39:FC:28:39:80:B3:64:11:F9:64:CC:DC:EC
X509v3 Authority Key Identifier:
keyid:DC:44:E1:9E:2B:B4:E7:02:3C:C1:BA:10:D4:9B:74:ED:E4:BF:86:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/9xQMFDNHlzn8KDmAs2QR-WTM3Ow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
25.129.198.0/23
IPv6:
2a08:600:99::/48
2a08:600:ee::/47
Signature Algorithm: sha256WithRSAEncryption
7b:8f:05:aa:50:2b:79:f8:21:51:95:5b:2e:42:29:d3:f4:6b:
10:a6:6e:ee:1d:1f:e7:9c:ca:ab:ac:d7:dc:07:e2:68:dc:92:
95:0c:af:05:95:6a:2d:8b:18:60:19:7f:24:87:9e:f6:24:ea:
34:1a:47:f3:34:6a:66:ba:13:ee:68:16:99:73:b6:bc:55:cc:
97:a7:79:17:7e:bb:db:db:dd:57:b4:84:fb:26:b8:67:56:52:
0f:1d:12:c1:25:3a:61:bd:75:72:a4:11:9c:88:43:8f:ec:56:
1d:43:de:d1:f9:78:5b:e9:69:b8:1a:d2:c2:9b:32:5d:0f:06:
61:8f:0d:59:a1:85:7f:66:cd:c3:0f:ad:5e:e7:65:3b:9f:c0:
d5:88:e3:cf:dc:06:32:a3:cc:71:58:1a:d9:08:1b:43:66:e9:
2a:84:38:ff:76:55:7c:e2:40:83:30:05:10:86:d5:77:11:f4:
a4:bb:1f:76:f0:9b:a0:73:7c:dd:aa:0c:b2:d7:55:82:53:92:
23:cc:0f:b8:2c:0d:f0:c0:f4:f3:9e:c9:36:08:b8:0b:f8:b1:
f7:6a:ba:7b:cf:65:04:63:23:a9:95:2e:62:d8:bc:57:f2:58:
2d:17:23:b5:0d:8a:56:f9:ec:e8:de:00:34:c3:d8:f0:c4:71:
fe:2c:1a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:23 2025 by rpki-client