Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/3ilwPqzx6-VO8prRwz_2regqi3s.roa
File: 3ilwPqzx6-VO8prRwz_2regqi3s.roa (raw, json)
Hash identifier: T8vM1ZSwQR1S+Mnv7yEAvN/E0kSlTPwNrsIm60mWFz4=
Subject key identifier: DE:29:70:3E:AC:F1:EB:E5:4E:F2:9A:D1:C3:3F:F6:AD:E8:2A:8B:7B
Certificate issuer: /CN=e97124752c840067dd37e242e949dda34dcb4b4e
Certificate serial: 01856F3904AE5DBA8085DB029252E55798EF
Authority key identifier: E9:71:24:75:2C:84:00:67:DD:37:E2:42:E9:49:DD:A3:4D:CB:4B:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XEkdSyEAGfdN-JC6Undo03LS04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/3ilwPqzx6-VO8prRwz_2regqi3s.roa
Signing time: Sun 01 Jan 2023 21:24:45 +0000
ROA not before: Sun 01 Jan 2023 21:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56805
IP address blocks: 185.63.77.0/24 maxlen: 24
185.63.76.0/22 maxlen: 22
185.63.76.0/24 maxlen: 24
185.63.78.0/24 maxlen: 24
185.63.79.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:39:04:ae:5d:ba:80:85:db:02:92:52:e5:57:98:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e97124752c840067dd37e242e949dda34dcb4b4e
Validity
Not Before: Jan 1 21:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=de29703eacf1ebe54ef29ad1c33ff6ade82a8b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:10:f9:e7:59:85:f0:c3:14:a7:cf:72:d5:b9:
54:9c:b7:e6:ad:94:1b:ea:95:64:4f:c6:c7:62:6a:
6c:d5:d1:5c:72:ca:a0:3b:d3:00:dc:00:2e:c7:10:
c3:56:49:23:ae:05:be:8f:eb:a6:fb:c2:a9:8e:e6:
dc:6d:45:79:92:32:bb:82:e8:6b:80:51:59:34:57:
6c:57:7f:aa:28:5b:3c:3c:28:47:fa:8a:f8:d0:69:
f1:8d:cb:95:6a:c1:0f:28:1b:80:7f:72:4a:58:89:
6c:c9:47:e2:a4:35:6a:88:b4:b9:13:b2:83:03:67:
75:f8:e0:a1:f3:68:c5:f6:63:c5:9d:57:a8:a2:79:
c4:ee:1d:35:f4:46:f2:89:0c:17:f2:ce:32:a1:57:
54:f2:2d:03:00:ed:9f:7e:70:a9:03:44:62:12:4e:
52:e2:cd:8b:0e:21:3f:0e:95:02:0d:84:90:0f:60:
e2:69:91:1f:ef:89:ef:ca:5a:94:de:09:29:a1:fe:
75:d6:05:d9:31:99:45:95:e2:10:82:25:07:74:e1:
59:91:66:bd:d0:e8:be:5e:90:36:8c:a9:e0:02:8e:
97:b8:ef:28:39:95:52:33:2d:07:82:86:40:e2:2c:
f5:35:42:1c:ac:ae:82:04:9a:e8:3e:6d:63:c7:79:
81:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:29:70:3E:AC:F1:EB:E5:4E:F2:9A:D1:C3:3F:F6:AD:E8:2A:8B:7B
X509v3 Authority Key Identifier:
keyid:E9:71:24:75:2C:84:00:67:DD:37:E2:42:E9:49:DD:A3:4D:CB:4B:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XEkdSyEAGfdN-JC6Undo03LS04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/3ilwPqzx6-VO8prRwz_2regqi3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/6XEkdSyEAGfdN-JC6Undo03LS04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.76.0/22
Signature Algorithm: sha256WithRSAEncryption
71:fb:b8:fd:95:ff:d3:9f:0b:bb:fe:98:aa:dc:d3:8a:72:e0:
ee:d2:bf:f7:80:cd:2c:b7:a3:8a:5c:10:e3:73:02:be:f1:bf:
20:79:47:28:75:c1:1f:ad:5e:62:32:38:db:89:21:f6:c9:cb:
07:b6:a8:a0:b1:3f:09:96:f1:35:67:da:2f:e2:82:84:c0:97:
d5:bd:35:a7:7f:66:45:16:fa:d7:8d:b7:fd:9a:2e:8b:0f:d8:
b6:40:19:11:ce:af:80:10:99:ae:34:72:df:0a:5e:48:8f:f4:
f2:19:03:5d:f9:ef:6b:c0:f3:ec:5d:73:39:e5:fb:d8:05:ae:
d1:f5:2a:8b:ba:d5:db:8c:45:ef:db:0c:6a:bd:aa:6b:84:d2:
62:2b:ac:ff:47:77:66:76:52:ba:7b:2f:f9:5c:51:d8:8c:14:
e8:e1:41:73:39:d0:c5:62:4f:93:a2:bd:87:bc:57:c4:cb:f0:
6e:44:7d:48:74:fd:93:31:18:2d:b9:1b:b5:a7:1c:8c:10:4d:
b3:5e:88:c2:84:8b:b9:a9:fb:0c:73:bb:52:fd:ed:91:1d:8e:
f3:cf:9e:8c:10:73:ca:b1:a9:9b:f0:37:46:94:72:46:7d:71:
63:bd:c8:74:37:eb:27:6d:ba:94:6c:0a:a7:0f:99:de:fe:25:
db:9a:bd:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:37:33 2025 by rpki-client