Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/d3TPFeDnxUUFREmpOy2W1HEBY8Q.roa
File: d3TPFeDnxUUFREmpOy2W1HEBY8Q.roa (raw, json)
Hash identifier: mkP6zdrNHaFNxi5cFD7R6acEaUUiMW13bQD5mc3a/pI=
Subject key identifier: 77:74:CF:15:E0:E7:C5:45:05:44:49:A9:3B:2D:96:D4:71:01:63:C4
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018B964E9B70FEEF349D2B9AF43E90438362
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/d3TPFeDnxUUFREmpOy2W1HEBY8Q.roa
Signing time: Fri 03 Nov 2023 17:50:15 +0000
ROA not before: Fri 03 Nov 2023 17:50:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 176.221.20.0/22 maxlen: 22
109.111.56.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:96:4e:9b:70:fe:ef:34:9d:2b:9a:f4:3e:90:43:83:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Nov 3 17:50:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7774cf15e0e7c545054449a93b2d96d4710163c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ce:35:69:ba:05:2d:52:12:33:b4:d0:0a:cb:
0e:3f:bf:1d:3c:c7:d3:32:26:0b:2f:8c:ac:e0:bd:
43:f7:9d:c1:48:5e:b9:f9:07:63:81:f0:67:dc:23:
ed:c2:73:f9:5e:d3:d9:19:2e:0d:0b:27:f1:72:0c:
1e:b2:b6:25:f0:15:0a:0b:c0:f5:7e:8e:5b:95:0b:
79:30:77:22:a1:9e:fb:e1:99:4f:55:4c:d3:e9:89:
a8:4b:c8:7b:1f:72:4f:a9:45:8b:6a:d9:38:ac:72:
6f:62:78:01:28:04:75:f6:50:b6:7f:a6:e4:a0:53:
92:ce:e0:7f:70:9e:30:fd:bf:5e:78:41:1c:da:4e:
7d:fb:dd:be:f0:88:3c:5a:d4:9b:1f:d1:53:7e:46:
e0:64:50:8d:d1:20:81:7b:75:b3:36:6e:94:9d:10:
f0:41:53:44:ee:66:4f:7f:74:fd:4b:31:8c:74:63:
14:18:79:89:2f:dd:82:aa:34:60:cf:b9:10:de:51:
85:bd:69:87:7a:d4:41:60:73:62:56:88:16:a6:21:
05:e0:c3:ce:40:4c:16:e3:39:c1:62:65:ce:55:13:
1f:2c:88:45:35:22:a4:4d:55:63:f7:dc:92:fe:44:
6a:8e:89:aa:37:2b:68:ce:df:0b:60:79:41:d0:a6:
b2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:74:CF:15:E0:E7:C5:45:05:44:49:A9:3B:2D:96:D4:71:01:63:C4
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/d3TPFeDnxUUFREmpOy2W1HEBY8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.56.0/22
176.221.20.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:2d:8f:af:bf:8c:ea:e8:ec:10:4e:b8:a2:e9:e8:03:cf:89:
b5:b6:4b:dd:11:05:51:66:b8:9b:22:ee:67:64:61:e7:ed:c9:
3d:8c:7a:55:5a:2a:30:ea:53:ba:32:53:32:cd:85:82:0d:65:
26:18:f3:14:2f:ec:48:9d:ba:6f:28:56:23:6c:40:1d:f4:76:
1d:6f:42:63:7f:e6:c7:5a:3c:55:91:04:6a:93:4d:e9:44:6a:
31:ac:9e:a5:dc:11:81:2d:d8:70:0a:21:0b:08:c7:8c:68:45:
08:b0:0b:8f:8d:cf:0a:a5:fc:b9:8a:2e:9b:e3:fa:37:e1:92:
fb:3e:96:0e:a1:8d:7e:3a:bc:84:c5:cf:d9:43:c2:33:ad:67:
54:82:9a:09:a1:c3:79:c9:bb:6d:c0:a4:0a:5e:8a:4c:65:c3:
d3:01:f5:fd:ad:ed:be:ae:ce:33:fc:c3:52:f0:2a:bf:77:88:
2e:df:19:81:86:a9:f3:1f:53:3c:89:00:3b:e0:36:67:b9:91:
e7:59:7f:f0:f7:39:9f:7a:8f:81:cc:81:06:79:09:52:1d:42:
3a:d8:0a:94:22:cc:6b:3b:95:91:7c:9a:8c:62:df:6a:5a:f1:
a4:ce:98:71:24:bf:3e:55:65:eb:6e:00:67:62:19:be:fd:bb:
72:f4:0d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:27:54 2025 by rpki-client