Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/h4oAbeTHadxGYBxIWDbBuZqDQyM.roa
File: h4oAbeTHadxGYBxIWDbBuZqDQyM.roa (raw, json)
Hash identifier: CbVweC74akzYrfXjaw4cPmi+fiWVhHW4pOJqe5fUbm4=
Subject key identifier: 87:8A:00:6D:E4:C7:69:DC:46:60:1C:48:58:36:C1:B9:9A:83:43:23
Certificate issuer: /CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
Certificate serial: 097EF8D0
Authority key identifier: A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/h4oAbeTHadxGYBxIWDbBuZqDQyM.roa
Signing time: Tue 28 Jun 2022 15:43:02 +0000
ROA not before: Tue 28 Jun 2022 15:43:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61135
IP address blocks: 185.165.77.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159316176 (0x97ef8d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
Validity
Not Before: Jun 28 15:43:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=878a006de4c769dc46601c485836c1b99a834323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:5b:b5:36:b7:54:a5:ba:ba:d2:85:1c:26:11:
4c:c7:d7:5d:52:74:db:8e:fc:87:c6:33:4c:81:f8:
bc:bb:45:3d:b5:1b:18:03:19:17:38:79:0b:c8:ae:
b6:ad:73:84:a5:30:74:3a:6c:05:72:ca:7a:93:eb:
3c:42:d9:c6:fc:ff:f7:cc:ef:cf:60:fa:05:fd:88:
1f:08:51:5f:ef:6d:59:8c:88:b4:c3:a6:51:68:63:
e8:20:c2:3d:e2:4c:17:7a:1b:8b:f5:a7:d5:53:5a:
e7:c6:c0:36:8f:d7:35:c4:a9:2d:8b:c9:55:0a:f6:
35:f3:fd:5c:9c:33:50:4c:73:1f:2a:96:85:f7:87:
25:c9:3c:f5:df:13:69:99:e6:8b:8d:4e:4f:8d:72:
46:f3:f1:97:e9:a4:95:9b:c0:8c:bc:76:df:05:8f:
49:c1:a1:1d:0c:b0:b9:f2:5d:19:dc:36:b4:27:a8:
67:e7:a4:a2:fd:cb:6e:67:f7:d1:7d:44:ca:a6:dd:
72:e2:df:d0:7b:5c:4e:08:ae:0d:06:b6:6a:45:e7:
7f:73:ac:07:4b:a4:6f:63:10:96:0a:c0:63:e2:d4:
eb:a1:73:7a:54:5a:cd:0f:de:e2:99:c0:0c:22:26:
a2:8e:c3:be:44:47:b3:89:48:df:77:b0:03:cc:9b:
9f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:8A:00:6D:E4:C7:69:DC:46:60:1C:48:58:36:C1:B9:9A:83:43:23
X509v3 Authority Key Identifier:
keyid:A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/h4oAbeTHadxGYBxIWDbBuZqDQyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.77.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:53:ed:f8:ca:4d:5e:50:38:bc:67:0b:33:3f:43:da:15:db:
69:c8:72:ce:90:ea:64:fe:5d:89:7f:3f:e4:d3:c0:8a:e8:81:
d8:65:3a:0d:a1:21:b6:e1:a2:45:9b:42:a3:c3:1d:92:9f:5f:
fc:da:bc:3e:64:9d:3e:98:66:08:74:6f:0f:c6:fc:fd:04:a0:
be:77:18:29:b2:b8:0b:00:1a:6c:47:5e:74:28:ca:9d:6e:bb:
77:e3:2e:ce:2a:30:89:73:36:13:22:2e:ef:99:22:03:c9:af:
b6:03:49:91:c9:11:28:ff:fc:c0:d3:1c:4c:0b:03:46:a2:37:
1e:86:47:36:65:17:6c:3b:0a:ef:35:f9:21:af:dd:a7:7e:8c:
ee:58:75:ec:17:2a:e3:bd:b9:1e:cc:a8:ca:e4:92:ca:fc:1d:
ab:d3:ee:96:15:e9:01:e6:86:66:3c:7c:10:5a:d9:5f:fc:ba:
28:96:e2:eb:19:4e:e1:d8:d0:0e:b9:01:17:48:b7:91:05:28:
b0:67:4e:92:29:07:67:61:2f:86:87:1b:c6:0a:c8:5e:b0:29:
40:40:43:14:c3:5c:99:7d:1a:fa:25:31:a3:12:fc:94:43:fd:
bf:ff:14:e0:18:52:d0:fe:c3:88:4a:fd:61:85:e5:ac:2c:0d:
cd:3f:7a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 23:24:47 2025 by rpki-client