Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/07Tle_gN3ZZX6BzlIgVhLbo9I2g.roa
File: 07Tle_gN3ZZX6BzlIgVhLbo9I2g.roa (raw, json)
Hash identifier: XEvLdZpVSWrRE3z0gbQI6i+0OKliLJvc/a2vpl2hm/c=
Subject key identifier: D3:B4:E5:7B:F8:0D:DD:96:57:E8:1C:E5:22:05:61:2D:BA:3D:23:68
Certificate issuer: /CN=cb662ceeb726774b1b44c51ff1fc0df908bdebbc
Certificate serial: 018572CCB30807B7FB9024D96676A2017920
Authority key identifier: CB:66:2C:EE:B7:26:77:4B:1B:44:C5:1F:F1:FC:0D:F9:08:BD:EB:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/07Tle_gN3ZZX6BzlIgVhLbo9I2g.roa
Signing time: Mon 02 Jan 2023 14:04:55 +0000
ROA not before: Mon 02 Jan 2023 14:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31441
IP address blocks: 83.173.0.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:cc:b3:08:07:b7:fb:90:24:d9:66:76:a2:01:79:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb662ceeb726774b1b44c51ff1fc0df908bdebbc
Validity
Not Before: Jan 2 14:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3b4e57bf80ddd9657e81ce52205612dba3d2368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e7:5e:8f:87:84:fa:a8:a6:24:ed:f5:f9:7c:
aa:0b:e7:35:3f:95:99:11:c1:95:d2:e5:08:a5:67:
8d:0d:7b:b0:2d:94:c3:d6:7d:d3:e6:cc:40:a2:78:
65:5d:2a:71:47:81:34:a5:20:50:c7:cb:ab:f1:24:
95:7e:1d:38:9d:86:b8:52:cd:f6:53:76:73:7a:4c:
eb:0f:5b:2d:a2:21:8b:e2:7a:66:e9:5a:ad:68:8f:
1d:08:d3:66:1f:82:40:4f:b6:8d:a6:09:26:7e:6a:
d3:f5:f4:af:9e:7b:3c:30:1a:b0:e6:52:5b:d6:32:
7a:75:e3:86:75:07:57:04:be:47:a7:e2:d0:2d:b2:
e8:b5:eb:2e:1c:c5:02:52:be:ef:da:15:bd:8f:cf:
8a:7e:21:94:fc:d5:28:3f:8e:1f:ce:1f:fa:fd:b7:
2e:d3:f5:e6:d3:26:0c:c0:1a:94:68:12:2e:4b:36:
b3:f9:ad:5d:b9:bb:13:15:47:aa:89:e8:bd:66:1c:
9d:66:c3:01:b6:84:5f:19:53:c5:df:85:b8:aa:72:
56:05:9d:8e:d5:87:34:6a:fa:3a:c1:74:e9:20:96:
5c:a1:19:50:59:f0:b2:54:43:e7:f4:a6:01:98:df:
c4:99:99:2e:ca:9c:cc:e3:18:d6:0f:1e:ae:f7:e2:
40:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B4:E5:7B:F8:0D:DD:96:57:E8:1C:E5:22:05:61:2D:BA:3D:23:68
X509v3 Authority Key Identifier:
keyid:CB:66:2C:EE:B7:26:77:4B:1B:44:C5:1F:F1:FC:0D:F9:08:BD:EB:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/07Tle_gN3ZZX6BzlIgVhLbo9I2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.173.0.0/18
Signature Algorithm: sha256WithRSAEncryption
9c:2c:23:68:19:0f:d3:61:6c:6d:56:d6:6c:17:47:55:bd:c5:
71:98:33:a6:c6:12:73:9b:80:17:09:52:7c:cb:8a:ef:06:b5:
9b:ee:fb:94:e3:19:ee:6d:d5:20:01:e2:1d:88:29:14:77:f9:
39:75:75:fe:77:26:44:6a:20:0f:71:17:5f:28:29:86:d3:56:
e4:92:15:33:64:54:5f:cb:56:ab:db:a5:33:ca:7c:af:07:e3:
72:cc:b0:e4:b6:4c:b7:9f:65:6c:e2:0e:4f:98:65:d2:2a:3e:
21:76:4d:f1:a8:5e:dd:99:94:24:ae:a2:79:94:67:3f:13:1f:
56:6a:97:a9:2f:b2:f5:8d:f6:cd:6d:04:10:af:d4:87:65:f7:
d5:8b:ad:5d:fe:36:23:77:45:d3:dc:b9:50:9a:01:be:37:2e:
6b:cd:20:04:18:9f:55:fa:d9:5b:ad:06:b1:cf:ff:f2:cc:3c:
22:5f:bd:f9:c1:57:93:c2:de:01:5a:cc:08:fd:97:b0:58:90:
ee:ff:82:40:d9:1f:e1:5f:f2:87:71:6f:48:90:f7:c1:39:72:
22:f2:4d:4f:f2:a4:ce:61:af:19:4f:26:eb:3a:f9:9f:94:b3:
da:22:ec:8d:cd:cf:71:d9:76:5f:78:43:85:89:bd:46:5d:47:
11:81:1c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:53:36 2025 by rpki-client