Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/gPyengXvmX1TuVOZ7C3tqa8J64s.roa
File: gPyengXvmX1TuVOZ7C3tqa8J64s.roa (raw, json)
Hash identifier: ou5jbmatreeL7JKOalebnaQ8PBQOYTecxH/mFWwKitw=
Subject key identifier: 80:FC:9E:9E:05:EF:99:7D:53:B9:53:99:EC:2D:ED:A9:AF:09:EB:8B
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 018570950B9300660C5FAE735D172D8D1E0D
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/gPyengXvmX1TuVOZ7C3tqa8J64s.roa
Signing time: Mon 02 Jan 2023 03:44:54 +0000
ROA not before: Mon 02 Jan 2023 03:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16262
IP address blocks: 87.251.73.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:0b:93:00:66:0c:5f:ae:73:5d:17:2d:8d:1e:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Jan 2 03:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80fc9e9e05ef997d53b95399ec2deda9af09eb8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:41:26:bf:b6:69:bf:54:28:f7:49:0b:6e:b6:
ee:06:5d:48:bf:89:fe:fb:ba:f0:9e:2f:57:81:74:
98:aa:da:c2:a4:2e:da:51:d2:85:d7:d9:3c:1e:6c:
ac:31:ec:fd:c7:02:7f:0f:76:8d:b8:ba:17:19:92:
9b:07:f5:dd:37:ba:97:60:b6:a6:b2:23:d3:ee:3e:
28:30:88:a6:45:95:12:c3:5f:46:6c:e3:db:2f:bf:
bf:58:b7:37:13:1a:89:d0:26:91:3b:66:5b:ad:60:
37:a3:ff:ab:46:bf:de:36:3a:c1:05:25:28:6c:7a:
4b:0b:e8:2a:e6:d4:24:67:86:44:e3:8a:ba:1f:4b:
f1:c2:a9:4b:a2:c0:15:f0:3a:d9:1c:32:da:5e:8d:
18:54:d0:b3:32:ae:2e:b5:cd:05:ae:e6:f1:86:66:
ff:41:e0:f9:cd:ea:6d:3f:a5:32:09:c8:40:d4:a4:
9d:3e:fb:3b:bd:6d:39:69:06:41:5f:87:ec:c7:c4:
a3:fc:30:d5:57:85:bb:f3:47:8f:8a:79:55:3b:98:
8e:be:ae:28:47:ff:85:1c:a9:d6:e3:a9:a1:bd:50:
e2:12:29:dc:8a:48:a2:f6:00:49:d6:c7:07:02:96:
f9:de:af:ac:ae:96:3f:8c:40:a6:ca:b7:a9:ca:04:
00:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:FC:9E:9E:05:EF:99:7D:53:B9:53:99:EC:2D:ED:A9:AF:09:EB:8B
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/gPyengXvmX1TuVOZ7C3tqa8J64s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.251.73.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:62:6b:55:a4:3b:d6:cf:d5:84:e3:a2:78:6e:67:09:45:37:
3f:f9:94:3d:56:25:8e:d5:99:f7:25:c1:96:4b:de:16:63:d2:
c2:75:22:a8:0c:08:cd:11:56:6d:a2:27:17:3c:2d:d7:fb:23:
22:37:9e:f0:76:a4:ce:d9:47:02:d1:74:11:f7:ca:60:4c:3e:
92:18:3b:96:51:95:96:65:23:53:5d:0a:49:cd:4f:11:d6:a8:
e6:33:9c:97:2d:35:18:d3:2a:89:77:b1:78:e2:53:27:d5:0f:
17:75:a4:7a:eb:4b:bb:02:3e:ec:bf:64:d6:22:9b:e7:3b:8b:
be:71:59:ce:15:24:e8:b9:8f:fa:71:68:17:88:fc:43:d0:34:
5d:a9:77:4f:1a:b0:94:e1:b6:7d:93:f0:b1:b5:9f:02:1b:26:
8d:6a:2e:ac:2a:a0:ee:40:f8:5d:6a:c3:90:8e:84:d0:7d:2f:
70:af:39:62:2c:e9:6b:53:04:b9:18:b0:8f:f0:b5:4d:88:a3:
f3:fa:f4:0b:04:ba:60:50:f3:32:bd:0c:39:b2:df:a1:a0:17:
c3:32:70:b4:53:0e:16:4e:c5:27:43:55:91:e0:99:42:da:82:
40:5f:31:ae:d2:2c:19:dc:54:6d:eb:0c:dd:ac:fc:78:31:ac:
ff:b6:e8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:01:05 2025 by rpki-client