Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/Rie3OiQK0rac58M6V2PC2BEQv4I.roa
File: Rie3OiQK0rac58M6V2PC2BEQv4I.roa (raw, json)
Hash identifier: hZBWeNGF0LDexgVd6AS/ejOHak5OJmXrzH4lL5cqMFQ=
Subject key identifier: 46:27:B7:3A:24:0A:D2:B6:9C:E7:C3:3A:57:63:C2:D8:11:10:BF:82
Certificate issuer: /CN=075fdb0de4051347a21e9628ac41736734cb4f2b
Certificate serial: 0186C691DE0E29E7BD21240B96C96D9F7A5D
Authority key identifier: 07:5F:DB:0D:E4:05:13:47:A2:1E:96:28:AC:41:73:67:34:CB:4F:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/Rie3OiQK0rac58M6V2PC2BEQv4I.roa
Signing time: Thu 09 Mar 2023 13:31:33 +0000
ROA not before: Thu 09 Mar 2023 13:31:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25400
IP address blocks: 79.174.16.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c6:91:de:0e:29:e7:bd:21:24:0b:96:c9:6d:9f:7a:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=075fdb0de4051347a21e9628ac41736734cb4f2b
Validity
Not Before: Mar 9 13:31:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4627b73a240ad2b69ce7c33a5763c2d81110bf82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b4:d5:b4:61:30:fe:80:94:6d:ce:84:44:f8:
73:d5:bd:5e:e4:4a:91:7c:42:99:12:7c:c1:e9:5e:
d1:01:31:22:bf:ff:32:6b:31:14:90:0a:1c:62:7c:
04:3c:c3:77:62:ed:2b:59:e5:4d:d3:20:be:91:f4:
71:c0:bb:2e:22:a4:01:a6:6a:27:f8:a3:2b:57:6b:
ee:9f:c5:96:e9:eb:35:d3:17:14:5a:fc:18:c2:05:
92:1e:7d:ef:e9:17:a3:6d:17:cc:d7:ef:35:34:8d:
35:cc:57:d1:8d:1b:8d:e9:a8:d4:41:10:65:82:36:
a0:9a:c5:a8:58:db:d7:92:45:9d:1d:6b:5d:92:bb:
73:19:2c:43:1a:2b:a7:fe:89:38:af:d3:8c:3b:d2:
20:40:ef:92:67:6a:59:a8:ad:53:b0:79:24:e8:84:
28:8b:9a:66:f9:ec:05:c1:6b:5f:b5:a7:37:5f:2e:
c7:6a:51:c5:8e:3c:77:d8:00:28:36:2c:f4:2e:32:
26:a7:c5:07:36:2b:f8:93:b3:b7:85:8f:46:ed:e6:
21:9a:0b:6b:d0:6a:6a:29:49:47:d6:13:3f:9d:96:
34:84:59:54:d6:82:8b:27:d7:92:55:8b:7d:22:64:
26:bb:3e:7d:df:6e:b9:01:9d:77:3e:fb:14:75:0b:
ff:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:27:B7:3A:24:0A:D2:B6:9C:E7:C3:3A:57:63:C2:D8:11:10:BF:82
X509v3 Authority Key Identifier:
keyid:07:5F:DB:0D:E4:05:13:47:A2:1E:96:28:AC:41:73:67:34:CB:4F:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/Rie3OiQK0rac58M6V2PC2BEQv4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.174.16.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:00:17:c7:09:90:ac:20:fe:65:63:8e:69:43:d9:6a:b7:28:
01:e9:94:72:37:b6:12:08:e3:53:57:d6:89:2d:a3:78:44:c0:
8f:26:3c:c4:6c:da:98:c5:f6:d6:99:92:7c:c0:54:42:33:79:
f3:e5:23:a6:27:14:86:2b:4a:94:a3:aa:e4:ea:b7:26:de:ac:
65:89:e2:54:e7:1f:15:2a:52:55:c7:a4:59:5a:6b:9e:88:ed:
bc:18:1f:41:73:c3:6f:36:85:31:be:5b:80:4e:c1:1f:e1:4a:
a9:30:8d:9e:f6:44:aa:9f:d6:f1:90:bb:0a:b9:1e:49:f6:6a:
1b:eb:bf:04:c2:73:50:ed:af:f8:46:2e:13:92:c8:96:9d:cc:
24:8a:20:5b:58:12:40:91:48:bd:9d:a3:d0:57:70:ae:e7:ba:
c9:74:60:0a:c8:63:a2:71:ab:94:bb:61:d6:2a:a0:4c:b6:01:
30:34:35:84:25:c7:0d:9b:88:d1:27:94:c3:59:87:28:3b:f0:
47:66:71:53:a0:ac:76:f6:72:37:89:7c:45:6d:c5:39:db:9a:
06:08:ef:f4:72:58:d3:92:3c:52:e5:20:a9:5a:e0:ff:f8:19:
bb:04:72:71:4c:93:55:73:00:9c:50:70:94:e3:93:a5:a8:83:
dc:75:ee:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:43:47 2025 by rpki-client