Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/rpXVQFpZz7QKZUyWPsT-_tNne1w.roa
File: rpXVQFpZz7QKZUyWPsT-_tNne1w.roa (raw, json)
Hash identifier: dTLWv8RkacLZgsJkOSzoxnXcBr9cFV3K4Mf9OQN/Hy8=
Subject key identifier: AE:95:D5:40:5A:59:CF:B4:0A:65:4C:96:3E:C4:FE:FE:D3:67:7B:5C
Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123
Certificate serial: 01856C53CFA113164E9BD42AAFBA2C22762E
Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/rpXVQFpZz7QKZUyWPsT-_tNne1w.roa
Signing time: Sun 01 Jan 2023 07:55:09 +0000
ROA not before: Sun 01 Jan 2023 07:55:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200955
IP address blocks: 84.47.143.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:cf:a1:13:16:4e:9b:d4:2a:af:ba:2c:22:76:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123
Validity
Not Before: Jan 1 07:55:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ae95d5405a59cfb40a654c963ec4fefed3677b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0b:e5:bf:1d:1c:ff:7e:63:29:37:bc:40:0c:
fc:e7:df:ec:d1:e3:90:fc:3c:36:e9:d3:29:2d:73:
c9:83:16:db:4f:60:0d:35:f1:4f:3e:df:34:fb:b6:
82:6a:cb:3d:9d:b3:4f:a7:13:9a:32:f8:74:42:34:
17:33:fd:46:79:f1:34:e6:94:0b:d8:cd:0c:00:51:
f3:cb:c5:f4:f5:0f:9a:10:63:c2:5d:fc:30:a4:26:
05:e1:3c:50:5c:be:27:0b:cb:a5:06:0d:c5:3b:2e:
77:e4:5e:03:36:a9:54:00:a3:6b:4e:81:f0:d2:0e:
b7:06:04:82:a2:dc:2c:be:56:e9:5f:35:cc:41:16:
e8:ed:f2:46:d4:38:47:72:94:8e:87:b7:75:76:31:
c6:b7:a0:54:a0:80:e2:e6:0a:f6:26:68:52:a9:df:
36:69:bd:69:ea:f9:7b:70:9c:ca:0c:5b:f6:03:84:
64:e0:7b:4a:85:98:7a:8d:df:1c:84:56:9c:d2:e4:
a2:8a:65:f5:1e:63:8c:8a:37:e2:98:b3:3c:de:f8:
e0:36:8c:bd:75:16:1f:30:5a:4b:64:e4:ee:e3:58:
9d:76:05:37:17:3a:ca:9d:32:15:20:f4:0d:a9:36:
3d:be:32:4a:98:e2:41:1d:44:91:06:c8:5e:88:ef:
38:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:95:D5:40:5A:59:CF:B4:0A:65:4C:96:3E:C4:FE:FE:D3:67:7B:5C
X509v3 Authority Key Identifier:
keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/rpXVQFpZz7QKZUyWPsT-_tNne1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.47.143.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:24:49:ef:92:c1:15:a3:34:ea:30:25:b1:dc:14:fa:5b:ac:
88:ff:09:c3:e9:3a:d7:36:86:09:57:83:01:fd:5d:39:7a:f2:
04:66:61:30:7f:9d:1a:46:80:08:b3:c1:49:79:45:7c:0f:5a:
65:27:f2:84:02:b1:38:44:d7:ec:60:8f:e7:f8:60:74:fc:d9:
58:d5:cc:aa:81:b7:88:4a:76:b4:b5:30:bf:3a:f7:56:b2:b2:
73:16:67:13:e8:94:ab:4d:a8:fc:d9:23:b9:08:83:d9:aa:7d:
48:84:2c:47:21:f8:e7:87:3a:66:9e:c9:93:c1:fb:19:40:b0:
08:ec:b9:aa:87:d9:9b:36:ae:86:1d:fd:3d:0b:ba:7e:84:1a:
6a:af:7a:fe:b6:b3:0a:99:f5:de:42:d8:a0:77:c3:13:29:4f:
c9:27:19:a8:68:93:7f:88:fa:cd:25:23:36:61:86:bf:ce:21:
e6:ad:bb:20:97:ee:d6:3d:86:20:5d:d1:e3:78:4c:aa:7d:6b:
cc:c1:a1:d3:0d:bf:85:93:18:1f:4b:37:35:46:6d:c2:4b:73:
fb:72:5c:d5:30:12:02:65:3a:c7:62:e5:35:ac:1f:15:c1:6e:
12:bd:b0:4f:5b:8d:ff:2b:4c:76:40:74:2c:f1:ac:29:37:53:
eb:30:f4:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:23:08 2025 by rpki-client