Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/87iT4c8JLCOJ06x66WJEGUaF05w.roa
File: 87iT4c8JLCOJ06x66WJEGUaF05w.roa (raw, json)
Hash identifier: z3TRwHklyOKD7wNG+hDNO25Wu+ZzaZH5jdMlVv5lbZM=
Subject key identifier: F3:B8:93:E1:CF:09:2C:23:89:D3:AC:7A:E9:62:44:19:46:85:D3:9C
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0188F73884126221933B2044410288C933E8
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/87iT4c8JLCOJ06x66WJEGUaF05w.roa
Signing time: Mon 26 Jun 2023 10:20:56 +0000
ROA not before: Mon 26 Jun 2023 10:20:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 109.122.42.0/24 maxlen: 24
109.122.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f7:38:84:12:62:21:93:3b:20:44:41:02:88:c9:33:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jun 26 10:20:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3b893e1cf092c2389d3ac7ae96244194685d39c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ba:0d:cd:0e:b4:05:aa:ef:20:b4:48:aa:1f:
b3:4f:45:eb:2b:37:f0:ad:34:c5:4b:a0:2b:d7:99:
e5:af:83:c6:93:8e:e7:99:cc:0f:04:91:d9:ab:82:
52:5d:44:09:b5:dc:31:9f:b5:00:ee:b8:08:29:03:
5e:dd:9d:0b:0f:11:9c:97:19:cf:b2:64:1a:62:d9:
80:dd:6d:1a:b5:ec:7e:d2:80:71:04:59:9b:f0:6c:
32:7c:d0:77:a1:3f:61:a6:12:82:e0:bf:ac:33:98:
4c:bb:ab:15:ea:52:db:81:7f:0c:47:0a:8a:1f:64:
da:a8:8b:d8:79:e8:10:56:09:9d:35:83:08:a7:52:
8d:13:25:a1:9f:c4:10:48:1e:41:8c:37:10:4a:82:
ab:12:20:9e:43:a6:e6:49:81:72:12:45:97:3d:99:
13:91:00:7e:aa:44:95:46:1c:d6:b0:cc:47:4b:65:
66:8d:07:a6:9a:39:59:51:6f:54:37:ca:6d:e9:a7:
40:0b:f3:13:fd:7c:8b:a7:38:bb:a1:26:a7:88:e3:
94:a7:0b:85:84:b6:9a:a0:40:6a:2f:21:c5:ed:cc:
eb:03:58:4c:ec:cc:b2:1a:34:ff:59:9d:3f:90:1c:
c7:39:57:ed:1d:bc:1a:ea:72:21:3f:47:91:72:68:
3b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B8:93:E1:CF:09:2C:23:89:D3:AC:7A:E9:62:44:19:46:85:D3:9C
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/87iT4c8JLCOJ06x66WJEGUaF05w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.42.0/24
109.122.46.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:da:c4:74:5d:dc:85:58:d5:59:c5:f8:af:fd:9d:31:95:91:
c3:68:02:f5:e6:92:2c:aa:9b:2a:8e:9b:d7:40:f8:45:59:20:
68:e7:f7:a8:bb:a9:32:a0:8d:9b:95:c4:ee:97:58:30:df:bb:
02:38:56:ea:f2:91:21:ed:9e:9d:7e:8c:fd:d3:1e:a8:11:0f:
7d:f9:c9:28:1a:57:2b:9a:79:1c:63:4e:12:0d:17:58:a6:1c:
fe:97:e1:56:89:81:c0:b0:06:b5:99:d8:2f:f3:61:d1:7e:5f:
d7:fe:8a:9d:ef:12:9e:c5:12:20:6e:82:65:8a:29:c1:18:90:
a2:57:ba:14:42:52:07:b1:f8:2a:e0:3a:50:a6:68:6a:42:73:
f1:2d:a8:22:61:00:96:2a:fe:70:de:83:6f:16:7e:77:fb:a0:
77:87:7b:e3:73:44:3b:8d:4e:d1:b4:cf:ce:6e:8f:f5:85:e1:
27:ab:50:55:24:0c:3c:56:85:f1:43:03:b1:c7:bb:e4:a9:49:
8c:b2:8d:3b:cb:dd:3f:75:77:80:d5:1f:8f:94:1a:e3:08:9d:
71:96:e3:24:8d:0e:9b:4c:e7:38:a1:14:3a:17:73:1f:8a:95:
b1:eb:9f:2a:e2:7c:2b:65:0e:4f:6f:9a:ec:db:a1:05:cf:fa:
42:10:76:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 21:47:50 2025 by rpki-client