Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/ApnIc9yCS2L-kpEc-az8u29RkbM.roa
File: ApnIc9yCS2L-kpEc-az8u29RkbM.roa (raw, json)
Hash identifier: 2A7p5cCUicSI8Hazl1Zy14CV+ieMsWAYCBhkXy5ryHA=
Subject key identifier: 02:99:C8:73:DC:82:4B:62:FE:92:91:1C:F9:AC:FC:BB:6F:51:91:B3
Certificate issuer: /CN=4a9d166c6484738972e9b33938165f4489a5168c
Certificate serial: 01866B251396FC6F3AD3532A31FDCB1D7C98
Authority key identifier: 4A:9D:16:6C:64:84:73:89:72:E9:B3:39:38:16:5F:44:89:A5:16:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/ApnIc9yCS2L-kpEc-az8u29RkbM.roa
Signing time: Sun 19 Feb 2023 19:27:17 +0000
ROA not before: Sun 19 Feb 2023 19:27:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50955
IP address blocks: 83.242.96.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6b:25:13:96:fc:6f:3a:d3:53:2a:31:fd:cb:1d:7c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a9d166c6484738972e9b33938165f4489a5168c
Validity
Not Before: Feb 19 19:27:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0299c873dc824b62fe92911cf9acfcbb6f5191b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:59:e2:cd:6f:a8:ea:87:a9:d3:5a:4a:06:13:
af:7c:b1:72:bf:69:ea:91:25:ac:50:59:0a:e8:65:
41:6c:dc:09:28:81:42:ba:32:a7:6d:9a:19:19:ac:
4a:d8:d1:7c:13:54:b5:5a:e1:87:f3:b1:61:69:c3:
60:3f:27:02:3f:30:12:8a:da:64:40:a0:8c:d4:6c:
3b:a6:c4:b1:9d:29:74:a2:75:90:e1:7e:1e:fe:83:
a7:58:72:cb:76:25:d7:b7:19:cd:1c:72:2a:f6:7f:
83:59:37:e2:b4:4c:ef:ac:07:7c:04:2d:e6:ab:f0:
d4:ef:cf:4a:cf:aa:e4:9d:cd:bb:31:eb:dc:2b:ed:
98:05:61:80:0f:3a:b2:a8:2b:87:44:f7:da:d9:00:
8a:e3:4d:5a:d1:75:9c:ce:2d:e8:c4:08:15:76:0d:
52:08:03:3c:d9:89:dc:3f:f3:dc:38:c2:1c:95:9e:
22:eb:f7:2a:ca:de:1b:ca:4c:64:69:78:74:20:e3:
ff:07:a7:cd:48:c2:a1:52:13:99:93:41:de:bb:20:
d1:e4:15:32:23:ba:d4:f2:f0:00:b1:23:b6:04:31:
2e:9a:dc:f3:81:1e:c0:12:8f:ab:49:32:d6:17:0e:
b3:b4:6a:27:d0:ce:4e:25:a4:1c:99:5d:2e:fe:b2:
7e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:99:C8:73:DC:82:4B:62:FE:92:91:1C:F9:AC:FC:BB:6F:51:91:B3
X509v3 Authority Key Identifier:
keyid:4A:9D:16:6C:64:84:73:89:72:E9:B3:39:38:16:5F:44:89:A5:16:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/ApnIc9yCS2L-kpEc-az8u29RkbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.242.96.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:12:1f:23:39:5e:04:e5:ea:5a:62:13:4d:bf:57:8e:b4:a5:
78:28:76:82:26:50:df:e0:5d:95:3e:e8:37:b8:ff:3e:2a:3d:
a0:e9:74:ce:71:65:c7:10:c9:2f:24:35:b4:b8:67:6e:9c:bc:
97:b0:46:1a:63:56:ab:ef:e8:ff:e6:9f:a2:08:89:2a:7b:32:
fb:23:ff:79:d2:11:57:7c:f2:49:e2:27:c7:74:ea:31:6c:a3:
97:fd:a5:a7:8c:fd:20:f4:00:1e:53:1e:01:c8:bf:bc:77:cb:
7d:95:8f:1b:71:c6:cf:18:30:30:87:1e:6c:36:17:5c:34:64:
76:ab:10:b6:19:7a:0c:fe:96:02:42:cc:e9:6a:1e:94:7f:a4:
83:a1:c4:38:8a:31:b8:35:ef:62:44:a0:27:c0:9a:9f:92:5a:
30:24:fd:c8:8d:6b:ec:c3:d8:47:45:aa:1a:e1:5a:71:81:b8:
c9:0a:43:e3:c0:48:df:74:70:e2:39:72:f5:16:88:92:7f:77:
4d:55:cc:c2:4e:01:ab:c8:60:3c:9b:0a:16:e2:14:9d:d5:96:
5b:51:c5:2d:e1:ce:fb:a1:3e:0c:8f:97:5b:b8:67:d2:02:e1:
74:43:24:0b:2a:c9:e9:d2:fb:b6:6e:94:a1:aa:9b:aa:4f:00:
b0:49:8c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:22:27 2025 by rpki-client