Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/1-AXuekYc0c2zzjxSZaBzkBCILs.roa
File: 1-AXuekYc0c2zzjxSZaBzkBCILs.roa (raw, json)
Hash identifier: JMr5pY3gGOs/pctrSIbw2tZh9vdD6ZdZFn3QAe/QffM=
Subject key identifier: D7:E0:17:B9:E9:18:73:47:36:CF:38:F1:49:96:81:CE:40:42:20:BB
Certificate issuer: /CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4
Certificate serial: 0D226B77
Authority key identifier: 46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/1-AXuekYc0c2zzjxSZaBzkBCILs.roa
Signing time: Sat 01 Jan 2022 00:50:12 +0000
ROA not before: Sat 01 Jan 2022 00:50:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3215
IP address blocks: 83.137.241.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 220359543 (0xd226b77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4
Validity
Not Before: Jan 1 00:50:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d7e017b9e918734736cf38f1499681ce404220bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8e:05:4d:b3:f5:2c:33:36:7a:1d:8f:f5:be:
2a:fc:80:89:86:44:af:ea:f9:e7:c6:e3:86:af:ea:
17:a8:b6:95:79:5c:fa:26:fd:37:44:7c:ed:da:94:
c9:55:5b:4b:15:94:e1:30:c4:42:5c:fc:65:6f:f6:
2d:f8:df:89:76:91:1b:51:95:56:ec:c9:75:b4:b1:
fd:e7:7c:aa:40:87:8c:ed:7f:23:8f:77:a5:7b:07:
85:74:79:66:a8:e7:80:e8:f8:16:0b:78:5b:92:47:
eb:7f:15:99:ed:d9:d8:74:8c:be:9a:1e:11:b9:5b:
be:9c:03:6d:17:8f:e0:f0:4a:e0:18:46:ed:d8:a6:
79:e2:f3:a5:76:89:ae:b2:85:f6:a6:65:25:5c:3a:
ac:be:87:6f:47:ae:cb:1d:8e:63:56:f1:23:9d:cb:
88:69:66:da:2b:15:2f:59:8a:75:74:d4:04:54:7b:
40:d2:7e:cc:3e:ca:fb:f8:2d:88:cb:ab:c9:07:ea:
e2:5a:89:6e:e3:15:04:cb:4d:8b:47:88:d4:a8:f7:
93:e5:68:2f:6c:aa:1a:0b:24:d2:27:86:a9:b4:f4:
1f:fb:cd:76:a6:ef:29:34:59:5e:18:58:7f:e9:59:
fe:a4:fb:5a:9b:c2:68:f1:16:cd:ad:66:c4:19:ee:
ca:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E0:17:B9:E9:18:73:47:36:CF:38:F1:49:96:81:CE:40:42:20:BB
X509v3 Authority Key Identifier:
keyid:46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/1-AXuekYc0c2zzjxSZaBzkBCILs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.241.0/24
Signature Algorithm: sha256WithRSAEncryption
86:8c:76:be:19:55:9d:c2:28:ea:4c:77:d2:ed:62:c2:a3:b0:
50:4b:60:5a:44:14:f2:f1:9b:03:09:da:ff:6b:ca:92:4d:89:
f4:fd:09:c6:70:d7:ad:02:5b:32:2e:b7:2c:d5:06:7f:8e:7e:
bc:54:d6:d3:1a:1e:e5:af:77:67:44:08:c9:90:08:ec:0a:f9:
6f:67:d9:d2:f3:7f:67:29:0e:a3:b3:da:94:ee:ae:2a:eb:fd:
dd:24:75:4e:0f:c4:e6:2a:5f:04:15:88:d2:53:c9:fe:15:93:
47:1f:d5:ba:c0:38:d9:b9:b4:c7:d8:67:eb:80:72:0a:db:1e:
8d:af:e6:a8:59:c7:8f:71:a8:2a:e1:86:94:57:a7:72:0c:7a:
ae:46:59:ec:4b:ff:c8:c1:08:44:59:b8:e2:44:95:0b:f5:d2:
22:64:da:f0:52:ea:a0:be:36:03:29:06:e2:15:96:8e:df:2e:
f8:49:c2:62:a5:b3:3d:a4:5f:ad:59:9f:5b:c2:61:d8:40:e1:
b3:95:6c:da:c9:57:32:1f:5e:de:a5:ad:e3:df:1f:d5:3b:6e:
7d:3a:c7:da:a1:bf:cb:2f:1e:78:a9:63:2e:e3:f9:0f:7b:1c:
04:81:d9:c6:f6:22:e9:13:c3:4a:bb:05:f7:63:9a:9e:5e:c8:
cb:b5:74:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:26:52 2025 by rpki-client