Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/dH4cT2zMBriPlig9tmEau4Tgh8U.roa
File: dH4cT2zMBriPlig9tmEau4Tgh8U.roa (raw, json)
Hash identifier: oG/MXM7EaaIuXJybbn7TJ96HO3TB79WMxsM8RIXIDF4=
Subject key identifier: 74:7E:1C:4F:6C:CC:06:B8:8F:96:28:3D:B6:61:1A:BB:84:E0:87:C5
Certificate issuer: /CN=826be1fb71af48d6b318510aa8bdf9a815f33db8
Certificate serial: 5276
Authority key identifier: 82:6B:E1:FB:71:AF:48:D6:B3:18:51:0A:A8:BD:F9:A8:15:F3:3D:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmvh-3GvSNazGFEKqL35qBXzPbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/dH4cT2zMBriPlig9tmEau4Tgh8U.roa
Signing time: Fri 29 Apr 2022 18:43:28 +0000
ROA not before: Fri 29 Apr 2022 18:43:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 63023
IP address blocks: 192.166.224.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21110 (0x5276)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826be1fb71af48d6b318510aa8bdf9a815f33db8
Validity
Not Before: Apr 29 18:43:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=747e1c4f6ccc06b88f96283db6611abb84e087c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:35:c1:7a:bb:d8:6f:7c:bf:80:91:9f:52:b8:
f3:d3:bb:c2:8e:a9:63:28:b1:0d:bc:50:44:7d:a6:
f6:8f:d5:62:4a:55:d4:28:e4:a1:07:e8:73:17:49:
ce:d4:89:35:79:d7:d7:6b:48:c5:31:9b:c1:8e:47:
d7:f9:33:7d:90:12:97:b1:b3:7c:68:1b:f9:03:6b:
c7:7e:e5:92:eb:ef:9c:32:ad:b0:65:9b:d0:c5:15:
17:dd:76:3e:fe:90:9a:68:60:62:ae:81:cc:ce:a3:
98:f7:7f:ae:83:9a:ae:90:da:5e:83:8b:29:5b:c1:
1f:6c:53:a5:c1:ee:13:20:0a:c2:2a:ed:f5:ba:91:
68:7d:f7:51:ea:c7:d9:f0:ed:b3:28:71:c9:f2:77:
9d:1b:05:c0:7e:c3:25:67:5a:5b:f3:18:dc:fc:c1:
c1:7b:95:4a:8e:7d:31:4f:d1:17:e2:09:28:9a:d6:
90:4c:6c:c7:a1:03:13:32:7f:fb:9b:82:c5:b4:61:
f7:c7:9d:55:7b:da:0a:59:48:b3:38:b2:4d:a2:46:
db:20:c9:d8:c7:d5:6b:ec:03:1a:85:93:5a:09:60:
cc:9c:32:7b:09:ce:e8:32:fc:17:dc:db:47:94:43:
09:a2:e0:84:d8:b4:bb:8c:62:b6:c2:b4:2a:0c:39:
a7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:7E:1C:4F:6C:CC:06:B8:8F:96:28:3D:B6:61:1A:BB:84:E0:87:C5
X509v3 Authority Key Identifier:
keyid:82:6B:E1:FB:71:AF:48:D6:B3:18:51:0A:A8:BD:F9:A8:15:F3:3D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmvh-3GvSNazGFEKqL35qBXzPbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/dH4cT2zMBriPlig9tmEau4Tgh8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/gmvh-3GvSNazGFEKqL35qBXzPbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.166.224.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:2b:a0:d7:a8:c5:ac:76:d6:c7:14:6f:6a:a2:65:af:cd:70:
3e:b1:ba:82:83:09:3a:6d:b4:22:c4:18:59:46:67:6f:c3:c8:
f3:8d:1f:73:7a:10:c3:15:7b:cb:ce:02:5e:e4:c3:32:98:96:
12:4c:79:03:6b:db:bc:11:bf:58:c7:fe:82:28:8c:44:42:e3:
51:ec:76:08:c5:65:e6:a8:c1:1e:78:5f:ab:4f:ff:58:8f:00:
fa:77:d4:c8:94:7c:3f:c2:6d:45:a9:1a:b4:e9:7c:6c:ef:58:
6e:e3:07:1f:0f:a3:bf:2f:9c:d2:7d:fa:dd:e3:59:03:bb:ba:
44:c8:fb:e1:d5:31:04:0f:bb:82:69:78:fe:e6:64:a2:c2:38:
43:23:ba:ac:97:aa:d9:47:cc:4f:25:45:68:9e:dc:b4:8b:7d:
28:25:63:bf:6d:8a:af:8a:70:2f:2b:8c:1d:da:06:cc:84:a0:
19:9a:bb:ab:32:2f:0f:a5:b5:42:12:46:0e:b4:75:a2:c2:9c:
30:0a:82:67:07:ac:f0:43:0f:49:61:82:9e:29:05:bc:1c:09:
82:2a:5a:6a:2a:ca:68:aa:43:dc:6d:9f:0d:23:74:6a:2b:79:
d4:ac:1f:3c:7f:8a:63:4e:49:6b:87:e2:08:c7:92:1b:b1:70:
94:3b:56:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:38:32 2025 by rpki-client