Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/rVD5FvDy8O5TiPUO4abvxp3dQHA.roa
File: rVD5FvDy8O5TiPUO4abvxp3dQHA.roa (raw, json)
Hash identifier: 9EGOYMHOJkLI1LdB0ETZrCOML0CgaCW6sarqEEHRyF4=
Subject key identifier: AD:50:F9:16:F0:F2:F0:EE:53:88:F5:0E:E1:A6:EF:C6:9D:DD:40:70
Certificate issuer: /CN=833e0e480411b9c88e916def90fc3a901026394a
Certificate serial: 0183836095D3A735D7D85ECEBABE2DC4B2CF
Authority key identifier: 83:3E:0E:48:04:11:B9:C8:8E:91:6D:EF:90:FC:3A:90:10:26:39:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/rVD5FvDy8O5TiPUO4abvxp3dQHA.roa
Signing time: Wed 28 Sep 2022 09:14:48 +0000
ROA not before: Wed 28 Sep 2022 09:14:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 185.7.73.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:83:60:95:d3:a7:35:d7:d8:5e:ce:ba:be:2d:c4:b2:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e0e480411b9c88e916def90fc3a901026394a
Validity
Not Before: Sep 28 09:14:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ad50f916f0f2f0ee5388f50ee1a6efc69ddd4070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:86:c4:ca:47:f5:ba:50:ba:99:1a:85:c8:38:
7d:b0:ed:62:f0:4d:7d:d0:95:e0:e4:82:6c:d7:fc:
42:bf:45:b9:8d:65:b1:34:50:18:8b:05:04:70:c4:
85:4b:87:a2:73:ed:37:f0:64:f3:43:0b:6b:04:7a:
53:be:57:89:ea:88:79:48:3b:3d:96:45:49:ec:8b:
0a:e3:29:bc:e8:6d:52:18:dd:7c:91:30:ae:d1:2d:
ba:c9:8a:e6:b9:7b:ab:10:8c:99:86:bf:90:6a:d2:
25:7c:29:57:40:6a:cb:94:68:00:8b:31:f2:0c:b2:
49:71:0e:78:c9:de:96:55:1f:91:f4:ef:70:99:67:
59:44:52:18:e1:ce:ab:14:d1:99:db:3b:9e:1b:bb:
1d:8f:4b:7c:a0:ce:72:d1:26:71:51:f4:f7:a8:7d:
6a:61:fd:18:26:3a:3e:fa:9a:d8:17:ea:d5:15:af:
81:e4:9f:af:a8:1b:06:af:b0:7a:65:21:33:68:57:
84:0b:61:bf:1f:2a:75:63:37:63:dd:1b:91:e8:04:
1e:64:64:ed:49:52:ef:ae:d6:62:32:d5:6d:cb:60:
88:99:f2:66:d5:92:a4:25:f5:e0:75:47:01:d9:30:
6e:dd:c9:7c:96:86:14:2b:e0:74:96:14:9f:09:46:
9c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:50:F9:16:F0:F2:F0:EE:53:88:F5:0E:E1:A6:EF:C6:9D:DD:40:70
X509v3 Authority Key Identifier:
keyid:83:3E:0E:48:04:11:B9:C8:8E:91:6D:EF:90:FC:3A:90:10:26:39:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/rVD5FvDy8O5TiPUO4abvxp3dQHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.73.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:d9:e3:6a:7d:2e:4f:cc:e7:c9:95:f3:d5:15:8b:5e:c3:df:
65:35:4a:2e:4b:24:5b:6a:b7:ab:82:7f:d9:9d:72:a9:fc:6c:
66:66:01:55:41:8a:e7:38:67:d9:77:d4:fc:e5:68:b4:6e:2c:
0f:b5:ab:5c:35:6a:b4:0e:10:c8:f0:89:53:22:df:22:37:f7:
59:89:08:d6:cf:96:f4:9c:52:02:eb:5a:4b:4e:77:88:d4:60:
6d:a5:54:99:4a:db:6b:7b:9d:1b:d3:be:a3:96:27:aa:a6:77:
a7:e1:d7:58:22:32:c6:81:b4:cc:0b:47:cd:10:03:57:00:5c:
5e:34:67:4a:0b:28:ab:ea:eb:f2:a3:62:09:b3:84:00:f5:be:
11:fb:43:79:b6:b5:67:1a:9a:cc:7f:f1:89:6c:2d:51:da:b5:
56:d3:83:60:0c:c7:18:a0:26:68:17:7e:93:84:9d:06:69:5b:
e2:75:6a:80:04:e5:d6:e0:5f:78:fe:f2:05:36:5a:6c:10:2a:
71:c8:10:d1:02:b8:29:fe:66:34:66:1e:e7:0c:35:6a:6b:2e:
3f:05:4d:97:1d:39:79:33:ed:cd:b3:3f:2f:a0:7c:a3:05:0a:
ec:23:2b:03:26:92:69:6a:4c:a2:39:33:94:8a:d6:9e:f8:ed:
af:34:a9:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:26:51 2025 by rpki-client