Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/9z2cRFITyHGI77OBCrhc2kHZpGw.roa
File: 9z2cRFITyHGI77OBCrhc2kHZpGw.roa (raw, json)
Hash identifier: 4g3VUQAICEjx+qU3qEcvZe6BCqPSZwPqvtle6mPo5/M=
Subject key identifier: F7:3D:9C:44:52:13:C8:71:88:EF:B3:81:0A:B8:5C:DA:41:D9:A4:6C
Certificate issuer: /CN=3ebc9e51baab3c3e6ab699fcb443f007f546c3fb
Certificate serial: 01856FE6E97EFB8296D78D4F94ED71F73E15
Authority key identifier: 3E:BC:9E:51:BA:AB:3C:3E:6A:B6:99:FC:B4:43:F0:07:F5:46:C3:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PryeUbqrPD5qtpn8tEPwB_VGw_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/9z2cRFITyHGI77OBCrhc2kHZpGw.roa
Signing time: Mon 02 Jan 2023 00:34:42 +0000
ROA not before: Mon 02 Jan 2023 00:34:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1161
IP address blocks: 131.155.0.0/16 maxlen: 16
192.31.168.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:e6:e9:7e:fb:82:96:d7:8d:4f:94:ed:71:f7:3e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ebc9e51baab3c3e6ab699fcb443f007f546c3fb
Validity
Not Before: Jan 2 00:34:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f73d9c445213c87188efb3810ab85cda41d9a46c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ce:4f:af:a0:24:46:a1:1d:18:25:96:5f:02:
fe:18:1d:3c:91:12:8b:52:51:32:59:bc:27:de:17:
55:23:5e:c4:d5:4d:6d:79:c1:24:85:5b:67:c7:2e:
3b:af:64:39:35:fe:fa:db:03:17:62:64:37:62:24:
99:47:79:0e:6b:13:d4:05:64:66:df:3c:f3:fe:c7:
2a:20:68:e2:d2:ac:1d:dd:30:10:14:5d:bd:6b:68:
40:41:ed:23:4a:7f:2c:f4:e1:49:72:33:c9:9b:e7:
10:d6:03:ba:cf:57:ca:93:65:ea:6c:8b:87:a4:2f:
fe:d2:04:a9:34:70:8d:e2:ac:c3:dd:ee:f5:d3:d2:
6e:f1:05:6c:d9:67:d8:85:ce:06:b6:b7:bc:28:1e:
fd:74:9b:2a:9e:8a:16:87:b6:6a:e2:85:4d:3b:fe:
9d:ea:79:93:b1:39:5f:87:74:58:04:02:e4:8e:46:
ec:18:9b:30:ee:87:aa:0e:bc:98:1f:71:2a:d1:b5:
29:4b:61:98:f5:a5:ce:c0:78:73:10:c8:e9:0a:17:
1b:32:f8:17:ac:65:90:b5:30:31:86:84:38:bd:06:
af:ff:60:8c:cb:18:f4:7a:6e:3d:e9:83:8a:53:48:
fd:74:9c:b9:be:1b:3f:23:e9:33:e3:97:a0:24:7b:
62:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:3D:9C:44:52:13:C8:71:88:EF:B3:81:0A:B8:5C:DA:41:D9:A4:6C
X509v3 Authority Key Identifier:
keyid:3E:BC:9E:51:BA:AB:3C:3E:6A:B6:99:FC:B4:43:F0:07:F5:46:C3:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PryeUbqrPD5qtpn8tEPwB_VGw_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/9z2cRFITyHGI77OBCrhc2kHZpGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.155.0.0/16
192.31.168.0/22
Signature Algorithm: sha256WithRSAEncryption
45:3d:2f:12:ff:5b:67:5c:3a:17:88:62:81:bb:d1:1e:bb:6d:
a0:c4:b5:b8:02:d5:a5:8c:07:e5:0d:e9:6d:37:84:53:92:25:
87:df:62:b4:5f:08:2e:bb:72:ed:8e:57:b0:d1:14:ed:3f:04:
06:e5:cc:aa:06:03:7f:01:7a:e4:9e:e8:db:c3:18:ff:fe:5d:
d2:77:6a:7f:85:8e:0f:4d:31:17:d6:49:23:46:c8:95:8a:ae:
5c:86:03:33:7f:69:5e:62:0a:53:ae:b2:46:ab:12:8b:62:90:
40:40:64:25:98:a2:b7:c4:49:2a:91:f7:bd:31:db:af:40:b4:
7e:f3:8f:7d:9f:5d:18:4b:41:a5:55:13:36:e7:3f:70:2d:de:
0b:a9:3a:dd:ff:50:8d:2a:0b:71:e3:18:5e:70:c5:a3:b3:4d:
71:1a:07:8f:8c:cc:a5:e0:c4:3a:8a:eb:93:0e:29:a7:1e:53:
0c:a2:ce:e2:92:53:e7:a8:74:bc:3d:6e:32:d4:70:37:93:68:
b0:4b:c2:40:8d:2d:bd:94:6b:db:40:4a:de:63:93:7f:26:a4:
b2:bb:de:98:63:87:ef:f4:c1:23:1d:2a:b7:65:7b:b4:ca:66:
83:1f:ec:10:3d:ba:5b:7d:85:a1:30:c9:9f:cc:d1:13:43:71:
e8:6a:1c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:33 2025 by rpki-client