Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/uFa3IuQI9DIs-SjDTA1ZsuDOJWQ.roa
File: uFa3IuQI9DIs-SjDTA1ZsuDOJWQ.roa (raw, json)
Hash identifier: dIrEOPKgOBMF5yAo8w4Q244X8fOR1tkVUZkbF8wB+SM=
Subject key identifier: B8:56:B7:22:E4:08:F4:32:2C:F9:28:C3:4C:0D:59:B2:E0:CE:25:64
Certificate issuer: /CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
Certificate serial: 37A12FC1
Authority key identifier: A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/uFa3IuQI9DIs-SjDTA1ZsuDOJWQ.roa
Signing time: Sat 01 Jan 2022 12:55:26 +0000
ROA not before: Sat 01 Jan 2022 12:55:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57367
IP address blocks: 217.9.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 933310401 (0x37a12fc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
Validity
Not Before: Jan 1 12:55:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b856b722e408f4322cf928c34c0d59b2e0ce2564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:74:e2:7d:b8:d0:32:c5:38:d7:34:0b:95:01:
3a:32:d6:19:1c:c2:fd:99:81:61:53:f9:f7:a0:49:
d3:96:d2:36:12:01:5f:ee:e4:0f:c8:45:f9:fb:68:
fb:43:9e:d1:25:68:10:ac:8c:1d:87:32:9f:45:ba:
1e:09:d9:62:d6:b7:1b:04:50:15:de:de:43:09:c1:
0f:6f:e7:ab:e6:aa:27:38:a0:b7:fe:46:35:14:1b:
54:6d:8e:af:75:24:37:a1:75:12:fb:45:21:ee:23:
ce:3f:c7:dc:77:88:6a:f4:c6:02:1e:d1:51:79:7f:
33:a7:0e:28:c5:d9:a2:04:f9:e2:b1:34:81:b5:11:
91:c5:5a:10:31:f9:85:bd:3a:0a:c3:3a:c1:f5:b4:
08:ec:85:66:95:a8:e3:4f:46:2a:b5:e8:13:45:72:
13:95:66:97:50:a5:b5:73:52:0b:68:4f:41:e8:81:
3c:d7:53:a5:61:b7:dd:bd:36:bf:fd:75:84:22:5e:
55:d7:89:09:1b:2e:c5:43:18:e7:63:d9:86:b1:f9:
f8:b3:c6:e1:b7:9a:c4:7c:45:06:42:19:9d:6d:35:
6e:36:04:f0:43:ca:7f:19:1e:49:ab:8c:43:58:32:
c8:7e:15:42:e9:f1:e3:91:e4:42:f3:99:84:b7:ee:
d1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:56:B7:22:E4:08:F4:32:2C:F9:28:C3:4C:0D:59:B2:E0:CE:25:64
X509v3 Authority Key Identifier:
keyid:A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/uFa3IuQI9DIs-SjDTA1ZsuDOJWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.9.3.0/24
Signature Algorithm: sha256WithRSAEncryption
dc:ae:2a:4a:dc:a2:a5:e9:e9:6f:0e:6d:d4:50:47:38:e4:6e:
6c:4a:42:2a:55:d5:4e:a3:11:64:de:6d:d2:51:29:79:3d:11:
fb:db:91:0b:82:3e:e2:41:30:10:41:eb:c0:35:b2:cf:f1:a7:
28:eb:1b:26:9f:8f:c8:54:27:2a:ab:92:76:93:4f:ed:e0:23:
b0:19:ea:51:c3:e6:79:e5:2c:1a:cd:31:5b:43:ba:0b:61:44:
1f:2d:0b:10:3a:8c:77:c9:cb:0f:33:02:a6:8f:6f:ca:44:8b:
65:0b:0b:85:2d:cf:be:ae:bc:4a:11:69:b4:a5:5f:58:ad:57:
0f:be:98:97:10:7b:c6:31:82:46:cd:d1:5a:de:38:be:b2:96:
dd:87:8b:b7:2f:6f:5d:1d:62:c1:e7:fc:bd:f0:50:75:5c:fa:
9a:cd:be:83:e7:f3:dc:88:b9:99:1d:d9:67:d1:9c:9b:9d:1f:
ec:5b:55:6a:d5:51:0c:53:53:b5:7a:44:93:60:43:c0:b4:e4:
8c:b3:d2:d0:1e:41:ee:7a:0b:65:2d:4c:9d:83:4a:1b:69:b7:
6b:d6:77:20:6b:5e:ad:cd:a3:39:5e:74:e8:52:fa:84:db:00:
0b:95:2d:83:1b:aa:22:7a:e9:c4:f0:12:82:34:26:76:b0:bf:
5e:8f:25:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:37:07 2025 by rpki-client