Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/3gE4ZzL4ujqLR_uff0vLTbCFaR4.roa
File: 3gE4ZzL4ujqLR_uff0vLTbCFaR4.roa (raw, json)
Hash identifier: 8bi+pjOQ+F0XEFStPM0uIIM/t9xnxsiU1JLqBJxsrfo=
Subject key identifier: DE:01:38:67:32:F8:BA:3A:8B:47:FB:9F:7F:4B:CB:4D:B0:85:69:1E
Certificate issuer: /CN=5d39d15bd2fcc84771ba6aa29aa54428b21cef60
Certificate serial: 018389EDD60CCB93F5AD1DB89B7768B9156B
Authority key identifier: 5D:39:D1:5B:D2:FC:C8:47:71:BA:6A:A2:9A:A5:44:28:B2:1C:EF:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTnRW9L8yEdxumqimqVEKLIc72A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/3gE4ZzL4ujqLR_uff0vLTbCFaR4.roa
Signing time: Thu 29 Sep 2022 15:46:48 +0000
ROA not before: Thu 29 Sep 2022 15:46:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34093
IP address blocks: 217.197.144.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:89:ed:d6:0c:cb:93:f5:ad:1d:b8:9b:77:68:b9:15:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d39d15bd2fcc84771ba6aa29aa54428b21cef60
Validity
Not Before: Sep 29 15:46:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=de01386732f8ba3a8b47fb9f7f4bcb4db085691e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7a:13:15:42:74:7c:16:d3:73:f2:a6:2d:2d:
84:8b:e9:9b:fe:73:1f:35:bb:8a:0d:7a:2a:18:0f:
f2:29:ad:29:a3:de:d0:8e:29:9d:e7:6a:af:30:36:
f8:83:d3:a6:1e:38:6c:a9:ce:30:df:16:cb:9a:cb:
3c:a6:00:5b:af:73:fe:a4:4d:7b:2e:bc:cd:3f:3f:
0a:63:26:91:a2:88:15:48:6f:00:5c:84:ef:3c:fa:
56:77:61:66:be:fc:c4:69:80:7b:c0:3c:c6:e1:57:
47:09:d9:b1:de:ff:9c:ea:39:02:7c:6e:7a:ff:0d:
0d:d0:13:d4:41:09:27:b3:86:30:15:2a:23:6d:76:
1d:f0:c9:45:37:a8:5a:e4:b7:75:18:aa:32:0e:a2:
55:f5:33:39:0f:d2:ce:19:5d:25:00:bd:46:4c:13:
e5:25:d3:5d:8d:55:dc:e9:47:21:2a:78:3b:e0:af:
51:cd:ed:46:aa:1f:ea:8a:34:07:3e:6c:5b:e8:5f:
23:31:bd:84:e4:af:09:68:dc:46:44:43:3f:64:ee:
61:9d:c0:62:79:bc:a2:ee:15:1e:92:4b:98:8a:a3:
5f:01:ae:70:00:69:ad:36:5b:8f:a9:a3:7d:52:fd:
80:bf:41:b2:7d:fd:e1:7f:25:36:57:15:a5:79:b2:
98:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:01:38:67:32:F8:BA:3A:8B:47:FB:9F:7F:4B:CB:4D:B0:85:69:1E
X509v3 Authority Key Identifier:
keyid:5D:39:D1:5B:D2:FC:C8:47:71:BA:6A:A2:9A:A5:44:28:B2:1C:EF:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTnRW9L8yEdxumqimqVEKLIc72A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/3gE4ZzL4ujqLR_uff0vLTbCFaR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/XTnRW9L8yEdxumqimqVEKLIc72A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.197.144.0/20
Signature Algorithm: sha256WithRSAEncryption
11:c8:5d:5c:3c:a3:27:c7:c7:d8:15:4b:fa:f3:5a:4d:85:80:
0d:76:63:6d:81:65:39:e4:cb:ac:3e:49:1e:f5:f3:0f:f1:0d:
20:59:71:79:4f:41:82:f6:01:b1:3e:fd:02:0e:a8:7a:91:5d:
2a:0e:f1:91:f0:8c:77:5f:38:dd:36:d2:b5:1e:59:d9:97:85:
53:c5:6b:10:fe:85:92:ec:d4:2e:0b:28:a9:cc:0a:36:1a:91:
d4:79:ab:a6:e9:74:2a:b2:1a:53:49:f8:d4:31:39:73:cd:bc:
6e:39:aa:4b:22:93:39:3b:74:67:d1:d4:df:ab:5f:18:b1:4d:
1a:a7:c0:bf:af:95:94:de:ec:9b:1b:54:e0:5f:f5:0c:b6:01:
56:3a:0b:ba:fc:ac:ce:37:4c:f1:d0:26:66:23:5a:a5:b4:8a:
91:94:0f:9f:29:43:a3:d4:ae:ed:eb:32:cd:3e:d9:f9:3d:92:
2b:ee:51:6b:07:61:c3:36:50:c9:d1:5f:b9:42:e7:2f:f3:75:
a8:09:03:ab:3b:0e:f1:76:77:9d:64:30:7b:c2:f8:40:a4:e1:
4f:00:2f:8e:53:a5:48:46:69:2c:aa:54:93:f3:1f:d8:53:58:
39:c8:c8:5b:57:c9:b2:fc:15:03:c6:03:88:eb:04:cd:0a:4d:
e8:7c:77:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:19 2025 by rpki-client