Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/_e4cxziBZPbu-htpgOefEH-MT-c.roa
File: _e4cxziBZPbu-htpgOefEH-MT-c.roa (raw, json)
Hash identifier: VtlEBcalC9jrIClpKBMwWaZth2ffbjYVBexxXE3Y11k=
Subject key identifier: FD:EE:1C:C7:38:81:64:F6:EE:FA:1B:69:80:E7:9F:10:7F:8C:4F:E7
Certificate issuer: /CN=f77390fc61608c01785d1a80685ae9e56a5b2583
Certificate serial: 0DBFE778
Authority key identifier: F7:73:90:FC:61:60:8C:01:78:5D:1A:80:68:5A:E9:E5:6A:5B:25:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93OQ_GFgjAF4XRqAaFrp5WpbJYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/_e4cxziBZPbu-htpgOefEH-MT-c.roa
Signing time: Sat 01 Jan 2022 08:05:41 +0000
ROA not before: Sat 01 Jan 2022 08:05:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57024
IP address blocks: 146.0.24.0/24 maxlen: 24
2a01:9680::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 230680440 (0xdbfe778)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77390fc61608c01785d1a80685ae9e56a5b2583
Validity
Not Before: Jan 1 08:05:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fdee1cc7388164f6eefa1b6980e79f107f8c4fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:78:d0:53:f8:e8:73:4e:c4:91:3d:11:f2:c1:
85:00:44:01:95:47:30:e8:13:2d:cc:7e:a5:2c:57:
41:9f:68:48:6b:7a:19:b5:b4:2a:e9:fc:a0:e2:c8:
3a:46:9d:50:5b:a9:3f:25:c0:50:a4:49:5f:a2:ff:
b3:e3:55:d1:21:ef:16:6f:e5:9c:5d:91:e1:61:d0:
ed:30:25:01:85:71:ed:01:85:88:8b:00:a7:40:e1:
59:de:d5:3f:78:a1:18:c8:e6:ad:8a:e5:78:48:0e:
b8:ee:d8:7b:f3:60:8b:57:f5:33:85:db:f0:62:a7:
c2:c4:03:40:09:f4:ea:44:2f:16:3f:04:14:c9:20:
ca:0e:37:df:ca:15:bb:b1:11:37:b6:76:82:58:8e:
44:0e:94:f2:eb:be:f4:52:89:e7:e2:91:5a:c8:26:
fd:19:3c:0e:70:b5:b4:b3:d5:a5:00:4e:17:9d:2f:
c4:fd:40:39:53:9c:26:f9:fd:a2:e0:1f:51:96:49:
9b:35:9c:21:10:c7:a8:20:ac:55:7e:74:e3:de:e6:
50:c9:11:9f:b2:18:77:b3:2d:30:b1:b1:4f:87:6c:
c0:92:39:55:ab:b4:3d:04:87:4e:8f:43:8f:c5:7e:
7f:40:57:ed:2d:8d:ec:92:a7:0e:fc:81:cd:17:37:
79:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:EE:1C:C7:38:81:64:F6:EE:FA:1B:69:80:E7:9F:10:7F:8C:4F:E7
X509v3 Authority Key Identifier:
keyid:F7:73:90:FC:61:60:8C:01:78:5D:1A:80:68:5A:E9:E5:6A:5B:25:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93OQ_GFgjAF4XRqAaFrp5WpbJYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/_e4cxziBZPbu-htpgOefEH-MT-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/93OQ_GFgjAF4XRqAaFrp5WpbJYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.0.24.0/24
IPv6:
2a01:9680::/32
Signature Algorithm: sha256WithRSAEncryption
7e:6b:1e:0b:ef:bd:c3:ab:24:a4:68:c9:17:eb:7a:47:4b:4e:
67:15:ed:b9:fe:af:e8:e3:01:c6:2d:71:de:f4:37:2c:20:32:
9c:95:39:2a:02:0a:66:43:30:1e:52:d4:e5:a3:7a:bb:5e:05:
fb:a8:a7:c7:e1:44:ae:21:3e:1f:5a:20:0f:9d:a4:3d:0b:3b:
bc:b9:6e:84:f0:c0:eb:cb:64:60:c0:0c:88:57:55:33:5c:ef:
9c:92:fe:16:30:e2:27:48:92:70:c5:12:32:0e:5d:2e:5b:03:
8b:46:14:71:58:71:be:50:c5:c4:d3:46:b5:db:8e:b1:4a:56:
0b:7c:c1:d7:15:80:f6:75:d1:c1:d1:f7:36:d2:52:25:1f:54:
cf:35:16:11:ca:8c:ce:7d:22:b0:2b:fd:71:5f:ae:0d:b8:2a:
73:93:b4:24:b5:24:28:45:be:09:6d:b7:03:04:ce:d1:25:85:
76:c7:5d:02:ee:0a:5d:46:36:0c:6c:46:14:66:b1:34:15:37:
49:c5:5d:e1:25:ef:11:03:36:05:fc:c4:6e:56:39:75:7d:15:
dd:51:c7:63:cd:7a:ca:2e:ca:87:2c:a3:47:15:72:82:d3:4c:
83:b7:80:a2:b6:1d:7c:22:31:97:cc:60:03:04:78:00:6c:45:
57:6b:ef:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:43:18 2025 by rpki-client