Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/b97294-2802-4d05-9155-1098d6d88de8/1/o8FtOpXE04ICGeFi1VQpHhhLb8M.roa
File: o8FtOpXE04ICGeFi1VQpHhhLb8M.roa (raw, json)
Hash identifier: zeFhMgY5til0x/zR0rZhsHLcZ+ejhvIoy/lYkCSzAqc=
Subject key identifier: A3:C1:6D:3A:95:C4:D3:82:02:19:E1:62:D5:54:29:1E:18:4B:6F:C3
Certificate issuer: /CN=13ea78b28f054f72f5226ae3ec454980ed2a10c9
Certificate serial: 03B4FB58
Authority key identifier: 13:EA:78:B2:8F:05:4F:72:F5:22:6A:E3:EC:45:49:80:ED:2A:10:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-p4so8FT3L1Imrj7EVJgO0qEMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/b97294-2802-4d05-9155-1098d6d88de8/1/o8FtOpXE04ICGeFi1VQpHhhLb8M.roa
Signing time: Sat 01 Jan 2022 14:58:48 +0000
ROA not before: Sat 01 Jan 2022 14:58:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9095
IP address blocks: 160.75.0.0/16 maxlen: 24
161.9.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62192472 (0x3b4fb58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ea78b28f054f72f5226ae3ec454980ed2a10c9
Validity
Not Before: Jan 1 14:58:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a3c16d3a95c4d3820219e162d554291e184b6fc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f7:f5:7c:35:5a:e3:53:f2:cf:69:a1:ee:4c:
2b:a3:9e:e5:cd:7e:c2:92:1e:c5:a8:53:62:1d:e6:
2c:de:26:ed:ec:72:cf:cb:a5:1c:49:b2:88:f3:d0:
00:b9:08:9a:9f:fc:cb:b5:cb:63:87:de:bf:3e:e2:
ea:df:d6:2f:77:ae:80:ca:fa:2e:18:6e:62:c1:ab:
52:28:b5:6d:81:12:a7:03:ed:70:01:b1:5d:66:bd:
30:d8:6f:ee:6c:2b:cc:7c:74:b9:f9:dc:02:4d:89:
89:a7:c0:41:ed:17:42:90:bc:e4:54:f7:fd:80:37:
65:0c:02:f1:8e:f6:d2:eb:23:6c:f3:fd:e2:fa:80:
a1:94:e7:88:d3:49:2a:82:7b:a5:26:b7:04:b6:21:
9a:98:91:ee:3b:e0:aa:2d:c3:3c:65:62:61:f3:8d:
21:5c:3c:72:e8:e5:ea:b0:01:7d:70:7a:99:df:5b:
4d:a8:bd:e1:c5:3f:23:cf:6e:a8:05:7e:72:9a:d0:
da:26:ab:94:62:f5:c6:dd:18:53:eb:f1:09:65:5f:
e7:0d:4b:cd:19:cf:46:ee:8a:eb:d3:0a:fb:e2:2f:
f0:df:09:dc:45:04:f3:bf:d9:12:9e:28:60:44:0c:
0b:84:4a:ce:cc:22:d9:5f:1d:14:e5:53:04:24:2d:
9f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C1:6D:3A:95:C4:D3:82:02:19:E1:62:D5:54:29:1E:18:4B:6F:C3
X509v3 Authority Key Identifier:
keyid:13:EA:78:B2:8F:05:4F:72:F5:22:6A:E3:EC:45:49:80:ED:2A:10:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-p4so8FT3L1Imrj7EVJgO0qEMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b97294-2802-4d05-9155-1098d6d88de8/1/o8FtOpXE04ICGeFi1VQpHhhLb8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b97294-2802-4d05-9155-1098d6d88de8/1/E-p4so8FT3L1Imrj7EVJgO0qEMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.75.0.0/16
161.9.0.0/17
Signature Algorithm: sha256WithRSAEncryption
55:20:61:a0:0c:3d:5a:d5:e1:e7:2e:b3:6a:ec:cf:6b:44:54:
dd:26:61:a4:21:f8:1d:69:36:c6:a6:8b:b1:c3:bb:98:ee:91:
4c:3c:a7:3e:56:83:ae:8c:f5:c1:3b:d9:15:70:89:c3:23:df:
2c:f1:ce:e4:31:a6:1b:04:d8:3a:fa:db:fb:1e:42:7f:e2:3b:
9f:84:9f:01:ed:37:f1:c4:5a:77:2b:e7:db:81:8b:86:01:55:
76:1d:85:6b:b4:df:30:13:43:69:49:ee:e4:66:e7:3b:00:d3:
a7:1d:53:a0:ba:45:eb:6a:c8:68:11:ee:83:83:15:a8:25:a9:
7b:bd:24:21:b1:86:0c:1d:b0:7f:e1:8c:f6:72:b3:88:f5:24:
7f:77:41:5a:60:55:21:41:c3:e5:3f:ae:1a:6a:42:50:d6:3d:
cd:fb:66:c0:a5:44:a9:55:6d:c5:6b:66:0a:13:41:6c:91:63:
bd:6d:ea:b0:7c:8d:9f:34:76:64:c0:7c:96:0f:48:72:4b:a2:
b9:d0:59:20:d3:73:b1:22:8b:81:3a:41:4a:38:5d:87:03:9a:
ba:60:81:5c:a1:a4:db:30:19:db:90:f5:b9:30:7a:bf:4c:59:
35:c3:0b:6d:59:de:09:45:51:80:85:35:6e:92:7d:14:8c:89:
f4:6d:58:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:28 2025 by rpki-client