Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/Vw9NQHUr9TQb0nLdtZJz2VwATRI.roa
File: Vw9NQHUr9TQb0nLdtZJz2VwATRI.roa (raw, json)
Hash identifier: LP5kPSpfoKL7ZF71rJiKZyaqUDKUDiLNHnsZp+fKwvo=
Subject key identifier: 57:0F:4D:40:75:2B:F5:34:1B:D2:72:DD:B5:92:73:D9:5C:00:4D:12
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 018963E3DAFF6E146F33C4D6A201E7225436
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/Vw9NQHUr9TQb0nLdtZJz2VwATRI.roa
Signing time: Mon 17 Jul 2023 12:47:04 +0000
ROA not before: Mon 17 Jul 2023 12:47:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210147
IP address blocks: 217.113.31.0/24 maxlen: 24
217.113.9.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:63:e3:da:ff:6e:14:6f:33:c4:d6:a2:01:e7:22:54:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Jul 17 12:47:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=570f4d40752bf5341bd272ddb59273d95c004d12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:17:21:e2:7a:bc:33:5b:3e:08:8f:c6:67:8f:
2a:b0:e2:2e:9e:5e:0c:51:79:e5:79:4e:00:b0:f8:
2b:cb:cf:99:30:a7:02:0b:69:94:1c:51:36:36:df:
d6:23:12:4c:d4:a3:00:53:3a:3e:e9:b8:dd:74:b5:
aa:80:bb:5a:3a:1e:9e:d7:f4:bb:dd:98:a7:7d:2f:
cd:10:1e:67:a0:56:8f:b3:e1:f8:1b:8d:d5:a2:87:
a9:c1:47:8f:11:c5:12:fe:74:45:ab:61:cc:22:fb:
0b:44:88:e9:6a:82:8f:e0:9e:24:7f:6e:d2:da:e6:
b3:20:1e:4f:55:59:09:2c:4b:1f:ab:90:66:f3:77:
79:29:65:e2:4a:60:db:3d:88:42:2b:5b:07:0b:23:
62:49:71:7b:59:80:2f:2f:b2:50:c6:e2:7b:a8:59:
bb:c9:73:41:bb:eb:c9:11:ad:f8:b0:91:cc:b6:52:
05:92:75:77:ed:13:36:96:ce:bb:97:ac:e5:e8:e9:
7f:60:d1:5b:de:e1:e0:ac:5a:3e:a3:c5:04:ec:e4:
b6:73:79:17:22:cd:de:4b:a9:30:7b:fa:c4:82:bb:
6f:2f:9c:b8:39:dc:84:0b:ed:9b:6c:35:81:af:bb:
ad:a3:9c:d8:e5:81:d7:6a:62:cf:4a:42:28:2c:70:
a8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:0F:4D:40:75:2B:F5:34:1B:D2:72:DD:B5:92:73:D9:5C:00:4D:12
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/Vw9NQHUr9TQb0nLdtZJz2VwATRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.113.9.0/24
217.113.31.0/24
Signature Algorithm: sha256WithRSAEncryption
63:f8:54:82:95:17:2a:32:14:0c:6c:ac:39:d1:14:a5:0b:f9:
40:c0:9c:6f:01:4d:04:da:b8:9c:46:0e:51:41:08:9b:56:e2:
a9:ce:63:a0:4c:1a:e3:ad:4d:77:6c:60:11:dc:69:52:3a:4a:
60:de:e8:5d:e1:d0:a6:23:60:59:c3:fd:d2:05:bd:00:99:65:
f1:32:3d:2b:47:96:51:12:67:81:42:23:c1:d8:4e:27:ac:5a:
83:cc:01:20:53:5b:b1:07:19:b9:61:3c:e7:7e:b8:70:39:8c:
35:e7:52:a0:ec:9e:b6:a4:7a:4b:c3:cf:60:d7:1f:e2:9d:2d:
10:21:75:2c:fc:34:f7:bf:64:c7:f4:d4:02:ca:83:a6:a7:21:
eb:b2:f9:c2:32:d2:93:21:9a:43:09:7a:08:02:47:01:eb:8a:
04:69:e8:57:6e:5d:a6:2f:84:57:e1:5c:b4:79:e8:2c:ea:15:
6f:06:22:37:5f:8f:3f:d4:08:f2:d5:25:a8:f9:e5:2c:02:a2:
b3:28:71:79:11:62:fa:8e:e0:e4:ac:f4:a4:32:54:f3:c8:bc:
d3:77:d2:99:f1:20:17:41:ec:17:de:86:20:20:ce:be:99:e0:
5e:dc:16:4b:dd:9f:f2:63:91:a8:c7:4c:f0:1d:0b:d0:04:6b:
dc:76:59:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:11:20 2025 by rpki-client