Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lFYFmTBHFq5xmKV8oImxZCXHAXQ.roa
File: lFYFmTBHFq5xmKV8oImxZCXHAXQ.roa (raw, json)
Hash identifier: KG4X93k3YTQxBy9aGtPngWf8jy9+tp+BExdu7wbTpzg=
Subject key identifier: 94:56:05:99:30:47:16:AE:71:98:A5:7C:A0:89:B1:64:25:C7:01:74
Certificate issuer: /CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
Certificate serial: 018571FA3287DCD337EE23EBF525350FADAF
Authority key identifier: A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lFYFmTBHFq5xmKV8oImxZCXHAXQ.roa
Signing time: Mon 02 Jan 2023 10:15:00 +0000
ROA not before: Mon 02 Jan 2023 10:15:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28776
IP address blocks: 217.9.4.0/24 maxlen: 24
217.9.6.0/24 maxlen: 24
217.9.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:fa:32:87:dc:d3:37:ee:23:eb:f5:25:35:0f:ad:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
Validity
Not Before: Jan 2 10:15:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94560599304716ae7198a57ca089b16425c70174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e9:f1:45:5b:f4:a7:2a:dd:3e:31:16:21:03:
fe:4d:31:71:5c:a4:11:fb:3b:cf:0a:9d:45:f4:62:
5c:d7:cc:3d:49:5d:6d:f9:ef:17:f1:4c:8e:d8:75:
a7:77:5c:79:a7:56:16:64:bf:b0:bb:1c:4f:36:c0:
aa:b8:9c:70:ea:53:e8:ab:57:a9:2a:1c:dd:7b:5b:
99:a1:f8:3e:40:7e:47:2c:ec:93:b2:9c:63:d8:aa:
29:79:59:62:a0:75:62:01:94:1b:d3:86:ee:43:82:
7d:48:d1:e6:60:36:08:89:a8:7a:d7:81:5a:6c:58:
7d:73:0f:8f:6e:57:82:94:ae:f0:23:02:5e:5e:70:
f0:b6:f5:fd:95:00:04:8e:a2:b9:e9:ea:d7:5e:47:
59:19:7d:c8:60:86:81:e3:2e:07:81:c5:9d:73:8a:
16:c0:09:2e:f3:83:3e:47:aa:20:2f:89:a8:15:7e:
e5:86:d9:a8:1a:23:65:8d:41:d3:1c:34:0c:18:12:
67:45:26:c3:28:02:0a:96:a9:66:4c:5b:d9:ec:16:
93:08:65:05:08:03:9f:0a:c3:ec:e5:62:fb:7b:2d:
28:f4:a7:64:cd:0e:82:77:35:70:f1:7d:7e:94:95:
de:af:b2:97:9d:5a:14:93:44:aa:ae:db:25:22:45:
6c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:56:05:99:30:47:16:AE:71:98:A5:7C:A0:89:B1:64:25:C7:01:74
X509v3 Authority Key Identifier:
keyid:A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lFYFmTBHFq5xmKV8oImxZCXHAXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.9.4.0-217.9.6.255
Signature Algorithm: sha256WithRSAEncryption
33:b5:f8:cb:49:88:be:b9:b4:06:70:7f:76:fc:b5:62:8d:62:
d8:b6:bc:21:8d:c6:fe:9e:7c:af:8d:97:38:b6:64:7f:2e:58:
4d:2e:24:4c:80:3f:32:3b:0c:44:97:e7:72:ce:23:92:f1:01:
11:34:09:7f:66:db:f6:28:c7:a9:7f:26:15:d8:f6:27:69:fe:
d8:44:5d:de:5a:80:3b:f6:68:27:3e:e1:af:97:03:24:30:dc:
99:63:7b:9b:0a:e1:b2:f9:3c:8e:57:5c:df:f6:59:fb:a3:32:
67:a6:f4:33:07:db:d6:4c:c9:54:7b:bd:6e:da:80:59:85:45:
45:97:9e:96:29:b6:f9:e2:6d:38:3a:bd:25:97:7f:47:95:1f:
75:85:97:72:ed:b6:45:7f:ff:da:df:7d:e9:ea:f1:85:42:4f:
ce:d5:48:77:28:5b:bc:07:a5:5f:cd:ea:2b:31:f9:b5:5d:82:
47:f5:35:8a:64:78:e0:ab:0e:a9:d4:cb:b2:49:a8:df:ec:be:
9c:c2:a6:9a:09:5c:29:7c:a7:91:ba:23:ef:b6:bc:b4:bc:e2:
83:78:67:d3:da:9a:5e:de:dc:50:a4:99:ed:5a:bf:e5:12:0a:
10:41:5b:00:18:49:85:8b:2f:e4:d3:ba:5a:ea:0f:20:55:e8:
f6:fe:57:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:44:02 2025 by rpki-client