Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/_pEPaPZzuzKh0ezLVffT2LODa-o.roa
File: _pEPaPZzuzKh0ezLVffT2LODa-o.roa (raw, json)
Hash identifier: Ebwm5OPX3SjpVS2OYoWjnTcHHfjBAfs3e0HTbgzbEV0=
Subject key identifier: FE:91:0F:68:F6:73:BB:32:A1:D1:EC:CB:55:F7:D3:D8:B3:83:6B:EA
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018779E9D9D1DA3116232587F4C1D0B47EA2
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/_pEPaPZzuzKh0ezLVffT2LODa-o.roa
Signing time: Thu 13 Apr 2023 09:19:41 +0000
ROA not before: Thu 13 Apr 2023 09:19:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 109.111.52.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:79:e9:d9:d1:da:31:16:23:25:87:f4:c1:d0:b4:7e:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Apr 13 09:19:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe910f68f673bb32a1d1eccb55f7d3d8b3836bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:20:a2:f8:ea:61:b7:c9:cf:cc:16:26:b8:48:
fa:88:0a:99:5e:39:9e:67:6e:6a:ef:13:5f:59:5d:
82:7a:93:1f:c6:56:98:46:0e:7d:5a:92:0d:1b:f3:
ef:89:e0:b0:e8:41:a0:95:21:3b:51:71:50:91:6a:
ba:53:7b:a7:75:95:c9:51:9e:0a:57:0f:84:e1:4c:
85:77:7a:01:3b:4e:75:a2:aa:94:d2:6f:6d:4c:29:
2a:a4:99:cf:3c:4b:ed:81:99:52:e1:cb:5c:2a:a2:
0e:ee:7a:85:26:46:44:7e:7e:21:eb:55:2d:c3:c4:
77:11:21:7f:6a:5f:28:70:ac:ef:2d:11:6e:2f:a3:
a6:c0:18:49:e3:7b:43:f0:c2:f2:0f:1a:29:a0:46:
29:67:1b:c8:e1:d5:2c:2c:35:e2:e2:06:51:0e:e4:
50:cf:16:81:61:d0:58:b9:2f:82:37:92:49:78:fc:
fa:ae:11:da:52:e8:7a:79:f8:a3:8c:88:fa:68:1e:
79:64:c7:6e:11:e2:47:0d:a3:0c:0e:33:9b:82:29:
2e:d5:0d:82:24:44:62:54:a4:ba:f4:9c:7d:69:69:
41:ba:07:a9:5b:cc:9f:1f:a9:14:16:a0:81:10:1b:
2f:fe:ce:ee:a6:84:e9:5b:07:f3:67:59:87:e1:fe:
2e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:91:0F:68:F6:73:BB:32:A1:D1:EC:CB:55:F7:D3:D8:B3:83:6B:EA
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/_pEPaPZzuzKh0ezLVffT2LODa-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.52.0/22
Signature Algorithm: sha256WithRSAEncryption
59:db:d9:66:b2:ab:61:71:71:14:12:48:75:3b:41:15:0d:8c:
1e:cd:79:af:82:2c:4c:16:bb:c9:cc:61:3f:a9:0b:ff:43:c7:
3e:86:86:f2:e9:4a:5f:6c:c0:ca:03:56:71:28:4a:51:c8:e3:
16:d3:2a:8e:c7:23:0c:bf:5a:d3:d4:63:a6:9e:ae:85:7f:4b:
07:df:9b:10:f0:5a:79:1b:31:d2:f1:c9:0b:6d:23:e2:bf:96:
62:6b:74:a6:5c:fa:e2:42:f5:62:53:c1:6c:40:80:dd:e8:b3:
1c:97:a0:4d:12:2c:f8:cc:6c:b8:ab:2a:ef:cc:5d:89:a0:59:
c0:bd:b0:51:f2:f3:d6:55:e3:f4:8f:c8:92:95:80:ab:e5:78:
e8:ff:f1:57:5c:97:7e:ed:91:bc:7a:ec:0f:a2:37:96:96:35:
76:fa:8e:3b:8d:41:89:44:09:d9:0f:c9:9b:e8:45:fa:4d:d7:
b5:9d:82:d8:d1:81:3d:b1:ad:eb:d8:08:1b:45:33:f3:17:8b:
81:4a:47:c6:70:e5:78:bf:27:b6:48:e5:00:12:71:9f:90:b5:
88:97:27:72:de:93:dd:02:09:85:59:75:81:6c:53:1e:9d:1b:
f0:64:e3:1c:46:42:d9:7a:85:0e:55:22:dd:1d:af:74:05:17:
85:04:71:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:28:42 2025 by rpki-client