Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/fN9963iC8wgE-Xbb1RR7YU3-z6c.roa
File: fN9963iC8wgE-Xbb1RR7YU3-z6c.roa (raw, json)
Hash identifier: E5ajTAVmEcHEhc0GEGE5Pba8FtE1ucx/aknnJnwzMl0=
Subject key identifier: 7C:DF:7D:EB:78:82:F3:08:04:F9:76:DB:D5:14:7B:61:4D:FE:CF:A7
Certificate issuer: /CN=992b86095ce558d2e9618728a44228a27be9098f
Certificate serial: 018BA950AA706FE7978694CB22DB3CADB6FD
Authority key identifier: 99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/fN9963iC8wgE-Xbb1RR7YU3-z6c.roa
Signing time: Tue 07 Nov 2023 10:25:17 +0000
ROA not before: Tue 07 Nov 2023 10:25:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35077
IP address blocks: 166.108.128.0/19 maxlen: 24
166.108.128.0/18 maxlen: 18
45.13.32.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a9:50:aa:70:6f:e7:97:86:94:cb:22:db:3c:ad:b6:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=992b86095ce558d2e9618728a44228a27be9098f
Validity
Not Before: Nov 7 10:25:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7cdf7deb7882f30804f976dbd5147b614dfecfa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1c:ea:d8:1a:1c:36:29:6d:32:9f:8d:36:24:
fa:fb:f5:dd:f6:10:e5:a6:51:40:aa:b2:98:b3:76:
fd:f8:dd:f7:7e:bb:df:2b:4f:d9:e2:1e:b5:57:11:
6e:77:85:56:2e:9b:73:6a:7a:06:94:0d:c4:98:e3:
82:fb:d0:68:33:f4:58:23:35:2d:ed:6a:1b:b6:25:
a9:54:6b:2a:5a:01:d8:74:7c:55:f1:6f:6a:4f:27:
26:99:7d:a7:b4:af:d6:aa:48:64:22:a6:4c:f8:c3:
92:85:a2:86:72:81:3b:47:f1:fd:15:86:a8:31:ee:
31:20:71:00:bb:0f:1a:e6:ea:c2:b1:b3:25:6f:b7:
6d:33:c0:b6:b9:43:51:96:a2:69:fd:be:12:a0:41:
3a:6f:bf:6c:76:e4:ee:2e:a9:75:3f:c6:05:14:ae:
1c:8e:f9:ee:5c:ba:2a:0c:bb:08:85:6a:55:d8:57:
f7:74:92:f3:0d:65:57:88:af:84:a7:f2:bc:e1:df:
5a:98:1a:51:47:48:64:24:19:48:42:f2:64:2a:eb:
f6:12:b7:d8:de:f7:96:20:b1:24:58:26:75:c9:5a:
ce:e8:8d:76:02:a8:35:46:18:9d:82:ee:54:25:29:
21:00:e7:a8:af:d1:04:50:fa:66:2a:a7:21:22:30:
69:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:DF:7D:EB:78:82:F3:08:04:F9:76:DB:D5:14:7B:61:4D:FE:CF:A7
X509v3 Authority Key Identifier:
keyid:99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/fN9963iC8wgE-Xbb1RR7YU3-z6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.32.0/22
166.108.128.0/18
Signature Algorithm: sha256WithRSAEncryption
84:83:2a:81:5d:c8:0b:64:12:c4:fd:ce:8d:db:fe:9e:c0:db:
85:84:b5:fd:75:b4:ef:0e:2a:fe:a2:02:88:22:77:a1:d1:4f:
fe:d9:72:0a:50:60:12:65:99:cb:36:37:f1:fb:71:8a:e3:3f:
4c:ed:e6:9a:a9:3c:db:cb:72:82:7d:5d:8f:1e:0c:85:b2:35:
d0:25:6a:aa:81:eb:0f:dc:53:ff:f7:ca:e0:ac:99:69:7f:de:
5e:b9:7b:b9:14:e6:92:17:7e:04:a6:cd:e2:03:e7:39:ea:9b:
56:d7:67:ae:39:be:53:8d:b3:37:a1:4e:32:7d:5e:cd:10:a3:
d8:c6:2e:a3:88:b5:a0:03:f0:14:8c:95:56:49:eb:6f:f7:b1:
23:68:13:5e:8b:52:a7:da:b8:d3:93:0e:e4:cf:22:06:5e:3a:
8d:7e:d2:a7:10:48:08:5d:d1:bf:3e:05:b6:31:b6:f4:a9:62:
4d:5c:77:9e:e0:11:03:f7:9d:4b:2d:b5:9b:97:5c:b6:4a:51:
9a:5c:ab:6a:5d:95:51:83:ef:1d:d3:4b:32:77:af:d7:8a:8d:
d5:f9:5d:ef:19:6d:eb:54:9a:89:ea:42:04:f0:72:0c:7c:39:
03:71:2b:84:a9:e7:df:92:5d:eb:4e:a3:83:d1:7b:ab:13:f5:
fb:f0:be:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:32:47 2025 by rpki-client