Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/3CNa6owYvZCde-11Md5qZ1n-GtE.roa
File: 3CNa6owYvZCde-11Md5qZ1n-GtE.roa (raw, json)
Hash identifier: q+8OgrGpKDB5PlBqfAehZXu9xwIB30EXtjBDXk5rUfk=
Subject key identifier: DC:23:5A:EA:8C:18:BD:90:9D:7B:ED:75:31:DE:6A:67:59:FE:1A:D1
Certificate issuer: /CN=cff374657f57078f3ca2c71109d35927c2248681
Certificate serial: D70377
Authority key identifier: CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/3CNa6owYvZCde-11Md5qZ1n-GtE.roa
Signing time: Sat 01 Jan 2022 12:57:01 +0000
ROA not before: Sat 01 Jan 2022 12:57:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57422
IP address blocks: 176.100.4.0/23 maxlen: 23
176.100.0.0/23 maxlen: 23
176.100.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14091127 (0xd70377)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff374657f57078f3ca2c71109d35927c2248681
Validity
Not Before: Jan 1 12:57:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dc235aea8c18bd909d7bed7531de6a6759fe1ad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:79:2f:eb:10:ec:28:f4:52:db:59:34:af:26:
70:1c:1b:d2:c0:38:98:2f:ca:6b:ee:9a:36:a7:a1:
d6:ac:16:ec:11:58:06:e7:71:45:d1:a8:9c:96:4d:
4d:4e:98:ce:00:9c:20:b7:97:86:19:26:ed:0e:25:
d6:a6:a0:ab:84:9e:63:a4:b6:f5:f2:6e:2f:d0:8d:
0d:14:e9:f8:30:fd:04:5c:d2:4b:0e:39:6d:8e:11:
8b:e9:9a:bf:62:a5:bf:e8:f6:7d:f3:05:19:d8:53:
52:9b:a1:f0:57:d9:6c:91:66:e5:9c:c1:ed:78:31:
ac:c0:10:9e:d7:ca:58:ce:86:98:ce:5f:7d:bf:c1:
6a:55:27:0e:e4:d5:88:7f:ca:09:c8:79:03:7f:93:
f6:36:a5:4b:78:53:c4:59:35:91:9f:3e:53:28:0a:
7f:46:00:5b:a9:52:13:1f:ba:04:66:ea:6d:8c:e2:
81:d1:b9:53:31:0a:74:10:05:2a:97:20:86:c7:6e:
d3:6a:cf:6e:b3:76:88:0d:9a:13:ef:1f:c6:37:c2:
1a:5a:0e:e1:9e:82:d4:12:96:85:f6:07:c1:e2:e4:
f9:e8:07:4f:40:1d:89:e6:dc:d6:44:de:b3:dd:bb:
49:38:00:32:56:d6:43:6f:cb:8c:e1:89:b3:17:80:
d2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:23:5A:EA:8C:18:BD:90:9D:7B:ED:75:31:DE:6A:67:59:FE:1A:D1
X509v3 Authority Key Identifier:
keyid:CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/3CNa6owYvZCde-11Md5qZ1n-GtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.100.0.0/23
176.100.4.0/23
176.100.7.0/24
Signature Algorithm: sha256WithRSAEncryption
71:e2:6b:bf:61:90:e3:be:66:17:53:12:d6:dd:64:ed:15:55:
61:f4:6d:bb:2a:a6:b9:66:bc:7d:0b:86:76:12:49:f3:c4:1f:
20:16:bc:36:30:80:45:4c:39:81:e7:88:8d:55:15:f1:9d:9f:
ad:79:5e:34:a8:a0:9f:a7:b2:0c:4a:b3:e1:20:0f:4c:c7:91:
df:26:d3:0e:a7:d1:2a:30:2e:97:3d:d6:8c:7b:65:1a:9f:c9:
17:98:d1:d3:51:8a:1f:4a:4f:be:69:33:c0:23:b2:33:a0:d1:
68:99:3f:68:2e:34:4a:f5:84:7b:b8:f9:26:77:b7:da:50:c5:
79:1d:4a:56:9f:ed:09:59:63:5a:9e:46:b5:29:24:7c:d2:57:
9c:63:51:e1:aa:2b:20:2c:4c:4d:b8:65:9b:11:4c:b3:d9:95:
8c:04:c0:07:3c:81:3f:0e:ce:38:ff:0d:6e:a8:86:e8:92:f3:
1c:2a:9c:a5:8e:e7:ea:05:60:19:d1:75:56:dc:b0:99:92:68:
72:e1:76:55:59:88:6e:e2:bd:d2:54:0e:4c:78:76:9c:18:79:
6a:c4:d1:6d:98:5d:93:f8:71:6f:c6:30:f3:64:dd:e3:d2:2c:
25:0a:d4:1d:7e:61:0a:36:3e:24:2d:82:bf:f5:46:83:8f:98:
7a:02:4a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:08:05 2025 by rpki-client