Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/dhZGgIOEk95mb2T2FsgZjwdtS8Y.roa
File: dhZGgIOEk95mb2T2FsgZjwdtS8Y.roa (raw, json)
Hash identifier: AnqiA2GG8eAzLQAtKGswtu/+h/gEcwneLfKvPoMLVJM=
Subject key identifier: 76:16:46:80:83:84:93:DE:66:6F:64:F6:16:C8:19:8F:07:6D:4B:C6
Certificate issuer: /CN=550d4c571d8bfbfdd8fa3a170f99fb3afab411d1
Certificate serial: 03393F1A
Authority key identifier: 55:0D:4C:57:1D:8B:FB:FD:D8:FA:3A:17:0F:99:FB:3A:FA:B4:11:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/dhZGgIOEk95mb2T2FsgZjwdtS8Y.roa
Signing time: Sat 01 Jan 2022 03:51:17 +0000
ROA not before: Sat 01 Jan 2022 03:51:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209271
IP address blocks: 176.119.220.0/24 maxlen: 24
2a0a:ac0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54083354 (0x3393f1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=550d4c571d8bfbfdd8fa3a170f99fb3afab411d1
Validity
Not Before: Jan 1 03:51:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=76164680838493de666f64f616c8198f076d4bc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:64:c7:40:5e:4f:ce:6a:95:dd:89:2d:1f:07:
0f:28:08:46:f5:7e:b0:dd:4a:3f:fb:bf:40:19:fc:
84:6c:1d:8e:f2:bb:83:20:38:7c:07:dd:e6:39:cb:
ec:02:80:29:8d:73:00:e2:ba:d9:cc:ea:94:15:3f:
e3:b3:fa:d5:b1:4e:36:b5:8b:54:87:ab:b3:32:2b:
72:9f:45:39:c7:01:d6:b2:48:c4:c4:cb:41:82:43:
66:7a:4f:37:e3:2f:93:51:d4:b7:32:2e:7f:9d:34:
75:40:e1:7d:c2:29:ef:9e:5b:59:8d:26:00:91:e0:
16:f3:4f:4c:82:89:b0:21:0b:db:a5:07:ed:af:5d:
e6:d7:57:7c:bb:bc:cc:15:db:df:a5:39:cc:7b:5b:
36:c2:46:8d:43:cc:1a:a2:cb:34:a5:3e:1a:c4:5e:
21:a8:cb:1b:29:f9:20:47:e8:cf:08:57:c7:c9:35:
51:01:a3:8e:c8:42:87:f8:3c:83:cf:bb:6c:4a:72:
3b:ce:77:8a:8f:54:f0:4d:1b:e3:84:b8:ae:7d:97:
84:60:c1:fa:f0:87:d7:c4:ae:38:b6:fe:70:0e:35:
56:af:31:a2:63:ca:c8:06:a6:ec:75:f2:0f:9e:30:
f7:58:68:21:a1:77:f2:67:b8:65:7b:91:f2:08:25:
8b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:16:46:80:83:84:93:DE:66:6F:64:F6:16:C8:19:8F:07:6D:4B:C6
X509v3 Authority Key Identifier:
keyid:55:0D:4C:57:1D:8B:FB:FD:D8:FA:3A:17:0F:99:FB:3A:FA:B4:11:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/dhZGgIOEk95mb2T2FsgZjwdtS8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.119.220.0/24
IPv6:
2a0a:ac0::/29
Signature Algorithm: sha256WithRSAEncryption
5e:ff:30:4c:2b:f4:e1:e8:1f:30:2d:f7:ff:a2:8c:82:6a:5b:
99:8d:78:95:47:b5:16:9b:21:e8:41:bf:7d:a3:42:82:30:c1:
96:2b:1c:f3:74:16:79:f5:bd:fb:e7:11:b7:88:52:02:7f:c2:
40:f4:6f:75:2b:02:23:50:58:d4:ac:d1:1c:34:7c:4b:65:4d:
21:d2:d6:68:b9:78:33:fb:07:eb:db:f2:70:1a:42:5f:a5:dc:
2c:cf:20:33:e0:8e:bf:95:38:a0:ce:29:8f:f9:e7:80:37:34:
54:88:64:8b:6b:c1:dd:a9:61:65:4f:de:07:8f:e1:85:ae:d2:
42:97:61:04:df:e3:a8:5f:ba:e9:c2:b8:d8:f1:71:3f:ce:96:
ad:42:cd:65:22:66:03:0b:11:e1:77:d8:54:4b:e1:3a:2e:70:
52:0b:04:45:92:3c:fd:eb:a6:9c:94:a2:c3:85:7a:45:2a:cc:
6e:52:61:8c:06:6c:3a:f8:7b:52:f8:1a:2d:69:f2:58:de:9a:
46:34:b3:6b:0c:b2:c6:59:7d:8a:70:f1:ee:5e:f7:6f:92:c0:
c2:d6:48:e4:ca:da:41:a6:4a:07:37:86:df:d5:20:62:50:d9:
8c:64:ea:28:fb:07:84:e8:6c:e5:3f:73:dd:d7:54:c8:eb:be:
b0:21:d5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 21:16:30 2025 by rpki-client