Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/773e49-f4ea-47a7-8a60-d42d4e9c767d/1/O2H1ud4Qy3olr5jYYj7eRZxEWrU.roa
File: O2H1ud4Qy3olr5jYYj7eRZxEWrU.roa (raw, json)
Hash identifier: YoFEVJRUvetNWFXXdqodQYteJbaBNVULauXhO856byg=
Subject key identifier: 3B:61:F5:B9:DE:10:CB:7A:25:AF:98:D8:62:3E:DE:45:9C:44:5A:B5
Certificate issuer: /CN=67a4ec38f2ff69d2505f7f62e94c3bd798b58552
Certificate serial: 04A3040A
Authority key identifier: 67:A4:EC:38:F2:FF:69:D2:50:5F:7F:62:E9:4C:3B:D7:98:B5:85:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z6TsOPL_adJQX39i6Uw715i1hVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/773e49-f4ea-47a7-8a60-d42d4e9c767d/1/O2H1ud4Qy3olr5jYYj7eRZxEWrU.roa
Signing time: Sat 01 Jan 2022 15:05:58 +0000
ROA not before: Sat 01 Jan 2022 15:05:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39657
IP address blocks: 217.30.3.0/24 maxlen: 24
217.30.0.0/23 maxlen: 23
217.30.0.0/22 maxlen: 22
217.30.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77792266 (0x4a3040a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67a4ec38f2ff69d2505f7f62e94c3bd798b58552
Validity
Not Before: Jan 1 15:05:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3b61f5b9de10cb7a25af98d8623ede459c445ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:51:78:e7:b0:a8:5d:b5:0d:53:b4:a6:e8:9b:
f3:58:80:22:bf:51:73:18:15:67:f7:f2:7c:22:59:
11:e3:cc:c7:7e:ea:f6:16:ec:49:ce:9b:0e:9b:e0:
5c:88:cc:96:b1:b4:19:dc:03:7c:6a:60:a9:f9:ac:
14:f8:d3:7c:bb:c9:04:38:76:62:75:32:22:ed:99:
07:ae:4e:11:a5:62:ee:6b:ec:59:4a:c1:90:ca:a1:
1c:4f:fe:fc:39:7f:39:11:3d:f8:5f:3c:bc:a8:3e:
11:37:ce:1b:40:79:65:75:e0:5b:2d:10:61:40:a9:
e0:30:b6:54:2c:d3:cc:c1:2f:9f:67:3a:ea:6c:ad:
07:c0:93:eb:ef:7c:7b:b6:0a:ea:6d:b5:34:f9:13:
f7:9e:ba:63:9e:43:dc:3e:e6:96:e8:e1:d4:fc:f7:
13:f4:96:43:5d:df:f4:a4:bd:b4:3b:fc:81:b3:ab:
07:f8:d8:b3:94:ad:27:c3:b6:67:04:c7:1f:4e:98:
89:fe:02:14:ec:b2:a8:eb:81:b9:34:41:8c:ee:3c:
74:83:e3:a7:af:f5:94:e4:08:f6:b4:dd:55:a8:1a:
be:9d:6a:90:a5:6c:19:c0:2b:88:2f:4e:d7:d6:9f:
1d:49:c7:91:d8:32:02:c1:75:c4:87:0a:2e:d5:1d:
ab:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:61:F5:B9:DE:10:CB:7A:25:AF:98:D8:62:3E:DE:45:9C:44:5A:B5
X509v3 Authority Key Identifier:
keyid:67:A4:EC:38:F2:FF:69:D2:50:5F:7F:62:E9:4C:3B:D7:98:B5:85:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z6TsOPL_adJQX39i6Uw715i1hVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/773e49-f4ea-47a7-8a60-d42d4e9c767d/1/O2H1ud4Qy3olr5jYYj7eRZxEWrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/773e49-f4ea-47a7-8a60-d42d4e9c767d/1/Z6TsOPL_adJQX39i6Uw715i1hVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.30.0.0/22
Signature Algorithm: sha256WithRSAEncryption
99:1d:57:51:d9:43:72:39:df:36:28:b8:db:6a:80:ef:ac:7b:
5a:47:8b:18:59:06:42:f9:d7:ca:ad:18:ab:e6:ba:6d:e0:f8:
7c:68:ac:b1:9a:f7:2a:74:11:e5:98:88:a6:15:05:3b:93:28:
51:af:72:e6:48:3f:68:20:7d:03:12:5f:7a:53:6c:be:2c:cb:
cb:94:8c:f2:7f:22:cf:b4:b5:b7:c2:eb:f1:7b:e7:0f:95:b2:
0c:0a:d7:d9:51:33:f4:32:b7:93:a3:5b:47:a5:ad:93:f7:61:
da:3c:21:96:dc:26:e9:d3:c7:bf:93:e3:60:55:f7:0e:08:0f:
ef:d3:da:e8:85:30:e1:40:e3:83:ae:a8:5d:93:bf:38:19:d5:
e7:61:01:74:03:3b:7f:fe:7c:67:7f:2f:8a:3b:9a:f3:42:06:
a3:b1:c7:89:68:fa:13:b4:a1:52:ae:9f:b5:ea:ee:e0:72:2f:
16:24:9e:93:3c:43:95:d1:50:74:9d:82:cf:0c:0b:52:7a:95:
bd:9b:1e:3c:a5:9d:58:2c:b4:49:f1:dd:87:23:a1:1b:97:29:
97:ed:30:fa:60:60:5c:c4:cf:f9:0c:0b:52:fe:7c:70:aa:2f:
53:4f:66:10:38:f7:71:5e:22:01:a3:89:3e:a8:1c:0d:1a:71:
d9:2c:fa:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:40:54 2025 by rpki-client