Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/RUCnrT77z_N6I7h1rBXlYA4qeZc.roa
File: RUCnrT77z_N6I7h1rBXlYA4qeZc.roa (raw, json)
Hash identifier: ntVH3qrFyDcdYghLIFpJpzRjEPwPBAPC9BaT0b6+SGs=
Subject key identifier: 45:40:A7:AD:3E:FB:CF:F3:7A:23:B8:75:AC:15:E5:60:0E:2A:79:97
Certificate issuer: /CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Certificate serial: 10C378B7
Authority key identifier: 17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/RUCnrT77z_N6I7h1rBXlYA4qeZc.roa
Signing time: Sat 01 Jan 2022 13:02:21 +0000
ROA not before: Sat 01 Jan 2022 13:02:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201695
IP address blocks: 94.40.87.0/24 maxlen: 24
82.160.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 281245879 (0x10c378b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Validity
Not Before: Jan 1 13:02:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4540a7ad3efbcff37a23b875ac15e5600e2a7997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:32:c6:58:64:59:50:f7:04:8d:4d:ba:33:f0:
9e:68:35:c9:b3:84:9b:e1:89:db:5c:75:2c:50:db:
6b:69:07:c9:04:f1:86:e8:80:f4:73:11:ae:e5:17:
37:3b:a5:6d:3d:8d:d7:ab:7a:2d:34:49:0f:9d:db:
3e:0c:1b:2a:e5:2d:b1:bf:24:d7:e1:89:15:6a:30:
bc:8c:a6:6a:59:67:dc:a6:70:ea:6d:00:41:1e:09:
46:09:b6:7a:a1:a2:63:97:be:7f:14:0b:78:1b:11:
24:92:52:49:59:dc:cd:b1:81:b8:22:db:4b:6e:6f:
f3:f3:5b:3e:c3:b9:1e:a0:c6:bc:e0:f4:b0:97:98:
c8:67:56:25:89:fe:86:09:4d:02:6d:81:63:64:f2:
a1:3a:56:a8:86:7e:d9:d0:9a:b9:78:86:eb:88:36:
07:53:ee:0a:30:de:d1:9b:a9:6b:f4:7a:16:a3:36:
bc:06:c9:9c:09:fa:8c:9b:a5:eb:85:2b:39:e7:88:
50:49:ee:f7:a1:cc:c9:63:6b:a8:cc:85:0f:b3:59:
59:6b:e4:d0:f0:90:25:6f:a4:18:de:a0:69:74:45:
8a:e1:a5:a0:35:b3:4b:53:ca:8c:bf:11:76:4d:57:
9c:e3:dc:bc:20:0b:0b:fa:ae:a9:b1:b1:ab:fc:33:
11:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:40:A7:AD:3E:FB:CF:F3:7A:23:B8:75:AC:15:E5:60:0E:2A:79:97
X509v3 Authority Key Identifier:
keyid:17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/RUCnrT77z_N6I7h1rBXlYA4qeZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.160.134.0/24
94.40.87.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:d9:14:bb:e2:60:cf:00:11:55:a8:26:ef:22:c3:31:dd:e7:
6a:ca:75:9c:c1:a3:28:2e:c8:39:5d:f3:4f:2f:fc:f5:fa:38:
d1:30:9a:a9:ce:e4:32:35:3a:49:a2:79:d2:62:87:f4:f7:0b:
50:70:f5:2b:78:05:53:2b:08:02:d8:03:3c:0c:15:52:28:34:
93:4b:66:b3:7e:d5:a4:48:47:bd:1a:d3:b7:25:9c:8c:fa:f3:
c7:50:29:71:2d:3c:f6:47:8a:28:f3:04:e8:53:c3:ac:25:ba:
a4:db:56:3d:0b:b7:7c:f7:b9:b7:0d:34:74:f6:ba:66:d0:38:
be:bf:e0:6e:6a:5f:f5:ea:26:72:8a:3c:83:31:2c:a3:f7:e1:
68:24:1c:0f:48:2d:0c:32:76:40:7f:8a:2f:cb:1a:79:bf:3a:
db:f3:fb:32:b9:b1:43:2e:49:a4:b5:6a:c1:a3:70:dc:da:ce:
96:83:d8:86:17:52:f6:cb:9c:cf:ef:dd:17:92:56:08:c8:a2:
87:af:14:90:59:5b:1c:eb:4e:2e:80:45:12:f8:78:81:0a:d5:
bb:80:4c:c0:2e:dc:31:4d:97:ed:ed:bd:0e:74:13:50:78:64:
98:2a:38:d4:f0:b9:4b:db:9f:d1:54:f7:c5:3e:cb:73:83:7c:
9d:66:ea:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:12 2025 by rpki-client