Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/d3ydx_XtqxRpfmoTgtOSXA_xwu8.roa
File: d3ydx_XtqxRpfmoTgtOSXA_xwu8.roa (raw, json)
Hash identifier: sei/olOf8Bc+xxDck+nUSPCz6TkxrjKDuVFAPf1ol2A=
Subject key identifier: 77:7C:9D:C7:F5:ED:AB:14:69:7E:6A:13:82:D3:92:5C:0F:F1:C2:EF
Certificate issuer: /CN=00ad6d83c8083729d7a9d8571d65ce97e058b821
Certificate serial: 018774C175678E4C02656ADD794B38734F78
Authority key identifier: 00:AD:6D:83:C8:08:37:29:D7:A9:D8:57:1D:65:CE:97:E0:58:B8:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK1tg8gINynXqdhXHWXOl-BYuCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/d3ydx_XtqxRpfmoTgtOSXA_xwu8.roa
Signing time: Wed 12 Apr 2023 09:17:28 +0000
ROA not before: Wed 12 Apr 2023 09:17:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15743
IP address blocks: 192.166.176.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:74:c1:75:67:8e:4c:02:65:6a:dd:79:4b:38:73:4f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00ad6d83c8083729d7a9d8571d65ce97e058b821
Validity
Not Before: Apr 12 09:17:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=777c9dc7f5edab14697e6a1382d3925c0ff1c2ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9d:b9:69:58:2d:7a:ab:e3:32:68:5a:96:3c:
02:22:bb:88:99:ad:c0:23:12:f1:b3:69:82:8f:54:
57:83:a7:5f:28:ba:c4:e6:42:bc:fb:e1:97:fa:1b:
61:86:d6:b5:9d:ea:78:53:7f:10:00:e5:0f:fe:5e:
48:f0:ec:94:76:9b:0e:8f:09:fb:81:49:4c:e5:c2:
6d:1a:4c:22:0d:9d:cc:85:a7:9e:24:22:e7:ff:ea:
62:de:5e:14:4a:b7:df:d7:cb:41:d3:84:26:b5:90:
e8:a7:26:75:0f:4b:5d:25:02:16:a3:27:7f:b2:0f:
2e:09:ff:d9:c8:7c:61:6c:a2:71:ed:dd:15:50:00:
23:30:9f:69:21:72:19:59:8c:33:2a:45:5b:e0:3a:
ee:cf:7a:ea:fb:ae:a9:af:1a:31:1b:c9:69:50:d0:
72:ba:74:d0:e9:40:32:90:4a:3e:58:0a:55:e6:2f:
75:0d:d1:d3:82:61:b6:56:91:a6:e7:2b:7c:2c:a5:
e3:53:16:63:ae:7e:b6:52:e3:82:dd:18:e0:ea:7c:
86:39:b3:5e:6b:6c:6e:b2:a5:31:83:cc:b2:2b:4c:
00:0a:56:2e:34:73:30:e1:ef:77:bf:64:df:74:2c:
5a:5d:86:aa:b3:21:04:3d:f8:a3:e3:de:8e:c9:ee:
f5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:7C:9D:C7:F5:ED:AB:14:69:7E:6A:13:82:D3:92:5C:0F:F1:C2:EF
X509v3 Authority Key Identifier:
keyid:00:AD:6D:83:C8:08:37:29:D7:A9:D8:57:1D:65:CE:97:E0:58:B8:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK1tg8gINynXqdhXHWXOl-BYuCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/d3ydx_XtqxRpfmoTgtOSXA_xwu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.166.176.0/21
Signature Algorithm: sha256WithRSAEncryption
1a:24:08:9c:ca:07:14:2e:7b:f6:bb:db:dd:68:7e:64:71:06:
48:54:a6:a7:67:ff:dc:03:fe:ad:89:e2:3e:81:32:e7:10:3d:
ac:b8:51:f2:69:0c:4e:d5:33:25:cd:cc:54:91:d7:ed:67:9a:
9f:35:0e:05:97:f3:c9:fd:83:de:e6:50:b6:32:48:35:c5:cd:
cf:49:e9:20:48:2a:df:36:c6:61:3f:a3:46:a6:d1:77:9c:44:
8e:ed:c3:b8:ef:20:03:67:99:36:43:ed:03:2c:d9:2a:3b:6b:
26:da:f0:a3:8b:7f:a6:98:2c:5f:4a:34:b9:d4:ab:85:97:80:
7f:ab:cc:8b:36:75:87:f6:84:af:b8:a2:5e:56:9d:a0:62:4c:
86:37:f5:f5:d7:f4:5b:a2:15:b1:04:ed:c1:d7:24:c1:fc:4f:
8c:b4:1d:ab:e5:e2:6c:94:66:61:19:26:a9:a0:d6:df:59:19:
c3:a3:a3:fa:c3:36:06:0d:12:f1:72:9e:7f:15:b6:2b:7c:d5:
ef:97:87:ae:5c:ae:64:91:e9:64:6a:80:ab:aa:ec:52:d0:9b:
84:c4:43:23:36:6c:41:45:cf:a2:83:1f:b7:77:b1:12:f1:02:
48:ee:89:13:0f:62:24:fa:4c:5b:f2:89:84:df:da:9e:67:63:
ae:db:1e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:32 2025 by rpki-client