Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/RS3Ak5Me683bUnUIHEpnCImLm7A.roa
File: RS3Ak5Me683bUnUIHEpnCImLm7A.roa (raw, json)
Hash identifier: NpZDCWnR+Amwv+xzPN8M8TU8LGf47SRRr9vO0kyLo7s=
Subject key identifier: 45:2D:C0:93:93:1E:EB:CD:DB:52:75:08:1C:4A:67:08:89:8B:9B:B0
Certificate issuer: /CN=96344400396d0af4cb79e3c94666671b7b391f55
Certificate serial: 01857227F3F1252FBBB932A42BCA794C1D7C
Authority key identifier: 96:34:44:00:39:6D:0A:F4:CB:79:E3:C9:46:66:67:1B:7B:39:1F:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljREADltCvTLeePJRmZnG3s5H1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/RS3Ak5Me683bUnUIHEpnCImLm7A.roa
Signing time: Mon 02 Jan 2023 11:04:59 +0000
ROA not before: Mon 02 Jan 2023 11:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16089
IP address blocks: 79.110.60.0/24 maxlen: 24
2a0c:3bc0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:27:f3:f1:25:2f:bb:b9:32:a4:2b:ca:79:4c:1d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96344400396d0af4cb79e3c94666671b7b391f55
Validity
Not Before: Jan 2 11:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=452dc093931eebcddb5275081c4a6708898b9bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:34:52:61:2d:4c:f7:cf:d2:57:12:a2:13:8f:
21:19:b9:17:b3:1e:0a:b8:d1:b9:0e:05:ac:e4:ae:
8a:18:f7:ac:0f:73:0c:a7:c9:56:9c:e0:1e:9b:74:
b6:45:9a:9b:6b:8f:96:82:a3:79:98:9b:b0:50:78:
7c:70:90:64:15:12:bf:fa:76:97:27:a5:d9:e1:6a:
db:ea:37:77:1b:93:32:8c:94:b0:d5:ea:d2:8f:5b:
34:58:a7:23:60:eb:7f:82:ce:14:c8:e3:7c:bf:be:
d5:b1:fc:fd:f2:d2:0c:f1:0d:eb:66:41:70:6c:44:
85:e6:b8:39:e5:5f:c1:07:70:bf:cb:e9:aa:be:e3:
ca:03:4d:c8:c4:a9:f5:e5:92:9b:b8:dc:1a:c6:be:
0a:71:92:27:71:7e:d7:c0:88:b4:50:67:91:51:b4:
70:03:99:d4:d0:00:8f:ef:ed:29:35:fd:25:4e:f6:
0e:b0:8c:7a:e8:d4:36:07:da:29:5e:fb:bb:b7:d5:
97:cf:70:0f:1b:dd:12:41:45:8b:02:5d:d7:83:ec:
3e:c1:a5:8b:ef:5b:40:b2:25:ec:76:7b:99:92:a0:
71:2e:72:7c:54:42:30:f8:92:61:bc:f4:a1:1e:6e:
f5:bc:e6:f8:97:3f:57:75:51:0a:8f:f6:d7:26:40:
df:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:2D:C0:93:93:1E:EB:CD:DB:52:75:08:1C:4A:67:08:89:8B:9B:B0
X509v3 Authority Key Identifier:
keyid:96:34:44:00:39:6D:0A:F4:CB:79:E3:C9:46:66:67:1B:7B:39:1F:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljREADltCvTLeePJRmZnG3s5H1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/RS3Ak5Me683bUnUIHEpnCImLm7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.60.0/24
IPv6:
2a0c:3bc0::/29
Signature Algorithm: sha256WithRSAEncryption
ac:a1:82:1e:1c:61:0c:6b:0d:04:96:af:82:b5:f5:03:2e:d8:
d8:da:4e:5d:d3:49:52:ca:70:5e:18:64:07:0b:d5:a9:1e:c3:
d6:2a:1c:56:5c:24:13:b6:d3:36:f1:3c:34:e2:05:48:25:af:
13:87:6b:94:b3:74:13:9a:9e:04:0d:49:8c:d8:40:4a:48:c3:
40:fb:67:2d:2d:26:99:21:73:02:af:e4:06:ee:77:b8:cd:03:
48:4b:d5:ee:ee:61:5b:32:4e:c8:37:1b:30:8b:99:a2:3d:5b:
fd:75:d6:de:4b:a5:8d:d6:9d:d5:ca:0d:5d:39:a6:be:19:a2:
68:1e:8f:a0:d4:f1:87:df:0e:fa:04:b3:1b:a9:f8:5a:32:34:
9b:32:a9:a3:23:f8:2a:f4:90:af:58:91:c2:94:89:00:ea:a2:
3a:f0:46:3f:91:4b:fe:50:ab:1e:65:91:95:33:31:b2:ee:80:
ba:ba:a7:75:0d:74:d2:be:0e:ac:8d:9f:a7:c8:60:c9:b4:45:
21:14:3f:8e:12:cc:8b:e2:e6:d9:7f:94:c7:a7:78:f6:46:03:
a2:64:07:fb:46:7d:82:75:66:48:bb:2a:f9:8c:61:26:ec:76:
ec:8c:36:16:d1:b9:30:f6:34:91:b2:69:18:2c:12:9d:c6:01:
f2:2f:1d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:41:48 2025 by rpki-client