Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/hP0FkFUPcWHcJ6XlRbvkc69huBc.roa
File: hP0FkFUPcWHcJ6XlRbvkc69huBc.roa (raw, json)
Hash identifier: roF5s8jsjopNChi3FH84v+53I/750MxJzoPLyvajjGU=
Subject key identifier: 84:FD:05:90:55:0F:71:61:DC:27:A5:E5:45:BB:E4:73:AF:61:B8:17
Certificate issuer: /CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
Certificate serial: 018571FA31D936CCD31971CB99D304F6C049
Authority key identifier: A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/hP0FkFUPcWHcJ6XlRbvkc69huBc.roa
Signing time: Mon 02 Jan 2023 10:15:00 +0000
ROA not before: Mon 02 Jan 2023 10:15:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15577
IP address blocks: 217.9.0.0/24 maxlen: 24
217.9.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:fa:31:d9:36:cc:d3:19:71:cb:99:d3:04:f6:c0:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
Validity
Not Before: Jan 2 10:15:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=84fd0590550f7161dc27a5e545bbe473af61b817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:db:8d:2d:75:17:51:11:96:c8:84:8a:e3:6f:
4b:bd:ee:5a:f2:c0:cd:83:ec:01:0c:8d:c9:31:01:
e3:6d:61:04:4a:b3:21:83:b9:d2:51:b9:5a:84:e7:
b5:02:cd:e5:94:29:00:84:41:ac:e8:ae:4b:22:54:
36:c0:d2:b0:e9:4e:e3:2a:3b:1f:ba:58:47:3b:fc:
d2:f0:68:ca:81:c6:18:f7:e7:28:39:9e:d7:7d:ce:
13:99:ba:27:90:bc:69:10:4a:d5:c9:7a:ca:8e:b4:
08:a0:a9:6f:15:e4:c3:e9:f6:8b:2e:78:16:16:6b:
52:17:c1:c8:8a:06:58:d3:61:d2:d6:2e:19:ed:c5:
ed:41:23:5c:08:c9:41:db:3b:69:21:1f:a4:bd:c8:
4c:18:09:8b:20:5c:85:c4:2a:12:3e:65:60:8c:89:
0b:a4:45:90:c3:e1:68:d1:96:49:f6:9d:08:11:5a:
92:9c:00:c4:64:20:6c:a7:d6:f0:13:48:d9:aa:03:
f1:08:d4:fb:77:fe:c5:15:01:9f:72:e6:c9:e8:b1:
36:84:58:71:0d:6a:74:01:b2:16:da:88:06:b2:ce:
02:96:ac:b6:ae:09:52:cb:fe:01:ad:0c:50:b6:39:
c4:01:b1:98:4e:a1:d7:6b:b2:99:eb:4a:58:a7:8f:
79:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:FD:05:90:55:0F:71:61:DC:27:A5:E5:45:BB:E4:73:AF:61:B8:17
X509v3 Authority Key Identifier:
keyid:A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/hP0FkFUPcWHcJ6XlRbvkc69huBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.9.0.0/23
Signature Algorithm: sha256WithRSAEncryption
e7:3f:3a:e6:3f:ea:3a:84:7e:b8:65:3a:32:5d:99:4f:b0:2e:
d0:59:29:9c:0d:dd:1a:00:91:28:37:59:09:8e:0f:ae:04:51:
55:40:34:12:f3:f7:9b:c6:f4:73:d4:62:73:6e:23:2e:e0:30:
1e:fa:f8:84:6c:ad:58:0c:4d:dd:a9:59:45:b1:5b:de:3e:12:
3c:0b:6f:5d:3e:41:a7:4f:f5:e4:80:59:10:50:49:0a:cf:e4:
af:a2:10:ac:6a:5f:00:a6:0f:01:07:8a:65:18:f5:53:36:ec:
2d:3e:55:d2:57:a2:33:cc:9f:7c:7d:2d:17:fe:e6:0c:48:a1:
9a:81:73:d8:10:ca:67:ea:e7:aa:4b:0c:69:d3:66:f3:e2:39:
0c:c2:51:02:84:be:c6:3b:3d:82:22:66:45:c4:fd:83:df:bb:
3c:3a:a3:6e:df:5b:51:b5:a6:79:a9:cb:01:e0:11:54:29:86:
3f:d2:69:53:5b:59:78:70:8d:53:c6:4a:9e:6c:d3:49:da:0f:
9b:86:67:ec:68:c8:16:7a:d5:3a:96:d9:ef:a6:58:6e:ae:a4:
49:80:2c:af:da:10:10:76:cf:99:44:89:fa:be:8d:26:95:a2:
ac:d1:2f:5a:09:71:a2:a0:26:6f:bc:b8:ce:18:f0:18:e4:e5:
1b:07:e7:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:48:48 2025 by rpki-client