Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/ND7hDgu5MNVWQOvd8wyXO6pQP3s.roa
File: ND7hDgu5MNVWQOvd8wyXO6pQP3s.roa (raw, json)
Hash identifier: uCWGnkIU+EJXAurdy1qB5Sr3T+EAlcIU8eb7/CIAckI=
Subject key identifier: 34:3E:E1:0E:0B:B9:30:D5:56:40:EB:DD:F3:0C:97:3B:AA:50:3F:7B
Certificate issuer: /CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Certificate serial: 10BF7F19
Authority key identifier: 17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/ND7hDgu5MNVWQOvd8wyXO6pQP3s.roa
Signing time: Sat 01 Jan 2022 13:02:20 +0000
ROA not before: Sat 01 Jan 2022 13:02:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200574
IP address blocks: 88.199.101.0/24 maxlen: 24
88.199.103.0/24 maxlen: 24
88.199.102.0/24 maxlen: 24
94.40.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 280985369 (0x10bf7f19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Validity
Not Before: Jan 1 13:02:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=343ee10e0bb930d55640ebddf30c973baa503f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:53:5c:c2:1d:16:34:a0:ff:b5:34:d1:6f:93:
51:f1:a2:db:79:30:5b:d2:fb:30:e9:c4:c0:1d:e6:
4c:e9:e8:9b:57:01:1c:05:bd:fb:35:94:f9:ba:77:
f9:53:b4:86:69:9c:86:6e:5d:1d:b0:ef:7e:9e:03:
9d:0e:14:f3:c5:4d:03:58:74:88:0b:97:79:e9:ba:
eb:7b:5a:56:98:50:18:0f:86:69:2c:14:25:23:1d:
e8:72:64:54:f1:da:0e:6f:54:39:f8:a1:7a:ae:bd:
fe:ae:f7:10:2f:74:83:37:5d:01:fa:5c:63:40:16:
1b:47:a0:29:1d:9d:e5:e3:0f:34:41:49:71:7b:91:
31:8b:09:76:61:a0:13:6c:7f:e5:6d:90:f0:11:7e:
d2:59:b3:ff:71:43:f5:4a:54:fc:72:55:10:73:1b:
ec:f9:14:0d:36:e2:1b:88:eb:98:2f:e9:33:ab:5c:
8f:45:74:9f:9f:7e:f0:30:c0:10:51:2c:88:98:b9:
53:f5:6a:0b:6a:02:67:92:eb:bf:7a:fb:93:69:84:
ac:46:3b:76:38:19:cc:d8:37:c5:5e:6f:db:db:8a:
2f:4f:39:9f:a9:e9:6f:dc:d5:65:29:98:e8:e1:62:
e0:59:57:ea:0b:f2:3b:a4:02:c1:a9:76:94:2a:3e:
82:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:3E:E1:0E:0B:B9:30:D5:56:40:EB:DD:F3:0C:97:3B:AA:50:3F:7B
X509v3 Authority Key Identifier:
keyid:17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/ND7hDgu5MNVWQOvd8wyXO6pQP3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.199.101.0-88.199.103.255
94.40.61.0/24
Signature Algorithm: sha256WithRSAEncryption
12:0b:fa:7b:54:dd:82:d7:74:ce:42:18:17:4f:4c:13:f4:c8:
f2:b6:73:00:2a:43:43:2f:c0:6d:7c:20:51:44:38:0b:b0:d5:
48:0a:df:a6:44:06:6e:ce:60:e4:8e:32:81:01:e9:fc:9e:aa:
a5:43:a1:94:6f:0d:13:9d:2a:24:b3:b4:7c:6e:6d:5f:22:e4:
2e:5c:11:09:2d:0c:38:35:06:b2:57:f2:97:30:6f:9a:9f:5c:
2b:91:76:9b:26:89:a0:08:5e:06:cd:23:10:16:ab:72:79:13:
4a:fe:d6:72:25:c8:6f:d6:b5:bc:6d:c1:c0:4e:12:58:1f:6c:
7d:63:37:34:fb:1f:93:ca:fc:89:a8:3e:fe:3c:4c:56:ea:9a:
3b:7c:f9:49:98:50:10:aa:fa:a9:c4:cc:0e:c9:61:7c:1c:30:
a0:d7:b4:a2:5d:9e:66:de:e7:55:4f:35:50:3b:c2:d6:3d:70:
51:32:61:9a:ae:91:55:63:a0:1b:57:15:35:dd:2e:84:9b:a3:
24:2c:6f:c3:8d:9a:a0:e1:9a:03:b7:c7:ea:bf:e3:97:3d:17:
83:d0:4a:0b:0f:c3:32:c6:cc:4e:87:71:62:99:e3:3e:25:81:
ce:39:2d:80:41:7b:d6:6c:f7:99:84:d5:f9:53:96:16:05:92:
89:b2:b8:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:40:14 2025 by rpki-client