Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/pty7HQXxnIyM4H-7YZ-Eg9CC04U.roa
File: pty7HQXxnIyM4H-7YZ-Eg9CC04U.roa (raw, json)
Hash identifier: gS6cdGVOyqX+p2MclxN5G432KAq1AKuCzX/PfcTikOc=
Subject key identifier: A6:DC:BB:1D:05:F1:9C:8C:8C:E0:7F:BB:61:9F:84:83:D0:82:D3:85
Certificate issuer: /CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
Certificate serial: 018571FA347F06624F86442710AFA7B73279
Authority key identifier: A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/pty7HQXxnIyM4H-7YZ-Eg9CC04U.roa
Signing time: Mon 02 Jan 2023 10:15:00 +0000
ROA not before: Mon 02 Jan 2023 10:15:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 196975
IP address blocks: 217.9.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:fa:34:7f:06:62:4f:86:44:27:10:af:a7:b7:32:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
Validity
Not Before: Jan 2 10:15:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6dcbb1d05f19c8c8ce07fbb619f8483d082d385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:26:30:95:8f:a5:ad:65:64:bc:33:e2:b4:b5:
9a:bc:10:83:4c:d0:f7:68:84:5a:c3:57:b4:b6:d5:
d7:f5:73:ed:30:1a:26:43:77:2f:4e:18:ee:1b:2a:
63:65:bb:d3:44:db:ee:13:ff:d0:4a:f4:d7:38:d7:
04:4c:d6:00:89:b9:b7:24:34:cf:48:8b:b4:96:bd:
5a:b1:60:ff:e6:b4:9a:e7:92:b9:d7:8b:0b:15:ae:
b7:13:38:ba:01:a9:f0:e5:c8:46:3a:9f:07:e6:3f:
a8:88:c2:a2:70:fa:a7:ec:fc:79:10:55:bf:da:20:
af:8e:6e:31:cf:8b:9c:c3:66:0b:f0:fb:2a:db:4d:
c5:b1:80:35:20:99:ba:c6:89:bc:89:4d:c6:18:32:
be:43:6f:d6:a5:3c:25:9c:1f:2a:44:40:c4:39:1d:
4d:1e:08:1e:ad:df:96:a7:19:f6:81:d9:42:e6:cc:
84:6a:53:a5:d2:6b:b3:bf:5d:42:a3:b5:94:00:0a:
4b:51:f4:99:3b:24:96:90:d6:dc:02:30:c8:4e:57:
c9:39:92:23:ab:d3:16:4d:9b:96:fd:6a:15:34:5b:
04:a3:5f:07:58:e3:97:79:26:da:42:d7:56:9f:b6:
e3:e7:17:fb:f0:bf:52:11:93:fe:93:d1:6f:e5:dd:
ac:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:DC:BB:1D:05:F1:9C:8C:8C:E0:7F:BB:61:9F:84:83:D0:82:D3:85
X509v3 Authority Key Identifier:
keyid:A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/pty7HQXxnIyM4H-7YZ-Eg9CC04U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.9.3.0/24
Signature Algorithm: sha256WithRSAEncryption
86:89:84:52:fe:b0:43:6c:d7:02:d1:d1:4c:fd:34:de:4f:ec:
e4:5d:a5:98:6b:a5:63:59:54:42:b3:3f:2f:85:64:49:07:bc:
e8:e9:3d:56:83:33:d6:ea:29:5b:b2:6c:0e:2a:2c:bf:ff:00:
d4:d5:6f:ba:f9:be:68:16:51:3e:3d:79:df:9b:de:f7:38:18:
76:4c:79:bf:04:46:11:23:e7:a8:f1:ed:02:b1:68:eb:c9:01:
4f:0c:2e:9a:d0:96:34:c1:04:a2:c7:8b:0b:73:49:5c:c0:33:
f8:46:5d:c4:be:74:1a:19:f6:b2:cb:ea:85:18:f9:a0:ac:55:
b5:5f:dc:c1:d9:61:c6:d4:f3:06:b7:e2:6d:fe:44:68:bc:c7:
e6:a7:69:a5:c5:d2:3f:4a:c9:6f:a1:6e:99:1c:f6:03:4c:71:
66:09:61:e6:f1:a0:fe:69:bf:9e:84:d3:1f:54:7b:e4:e2:b5:
0c:b6:22:a3:ad:22:ed:c5:e4:59:14:67:a4:e7:66:b0:01:07:
46:be:ec:ba:f1:87:50:4c:71:f1:c2:32:54:8f:64:24:a8:82:
be:28:d4:82:0e:a4:94:85:80:e8:5f:47:5f:85:b6:92:ba:88:
f5:84:9b:1d:46:0c:5c:f8:bc:ce:fd:cb:52:c6:d3:8c:54:a6:
78:cc:4c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:40:49 2025 by rpki-client