Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/0ss3mqLuBHviNhAgqXLAN1vg7qY.roa
File: 0ss3mqLuBHviNhAgqXLAN1vg7qY.roa (raw, json)
Hash identifier: Cdd7g0lLNWVPHx/HSkFqz9ye0cue+90QIrqHIQAyL2A=
Subject key identifier: D2:CB:37:9A:A2:EE:04:7B:E2:36:10:20:A9:72:C0:37:5B:E0:EE:A6
Certificate issuer: /CN=af88c8bd2da8be279c1772a1110aa388f0ef1102
Certificate serial: 06916841
Authority key identifier: AF:88:C8:BD:2D:A8:BE:27:9C:17:72:A1:11:0A:A3:88:F0:EF:11:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/0ss3mqLuBHviNhAgqXLAN1vg7qY.roa
Signing time: Sat 01 Jan 2022 03:56:18 +0000
ROA not before: Sat 01 Jan 2022 03:56:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 553
IP address blocks: 134.155.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110192705 (0x6916841)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af88c8bd2da8be279c1772a1110aa388f0ef1102
Validity
Not Before: Jan 1 03:56:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d2cb379aa2ee047be2361020a972c0375be0eea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b7:3a:ba:c0:9e:31:ce:01:b1:9a:2c:9a:33:
58:4e:da:ec:98:cc:55:48:aa:6e:58:91:be:1c:d0:
f0:55:c5:4b:cd:30:82:7d:9d:b1:c5:90:32:61:bd:
6d:fa:a7:8a:5d:22:27:ea:58:00:f4:47:7e:08:f7:
4d:b9:1a:03:0d:45:06:56:47:e8:08:08:8b:cc:22:
c6:63:0e:1a:4f:66:69:bf:17:8a:83:5e:bb:12:8e:
f5:42:9e:9e:c4:6f:fc:a5:7c:58:90:21:ef:ac:e1:
cf:26:63:36:bb:2d:0e:16:b6:f8:d6:4e:17:8d:20:
ac:8d:9c:bf:f1:52:00:3c:f2:00:1f:c6:39:54:b0:
8c:03:e1:27:c8:8a:c6:be:10:1d:fe:45:c5:2a:89:
94:a8:94:22:49:b5:af:7b:58:69:82:bb:36:e3:1e:
f0:4c:91:9f:9e:e2:8c:75:35:68:ee:6f:f6:f8:b7:
c3:e9:07:99:cf:70:6c:3e:7d:b0:e6:02:ae:53:8d:
d6:0a:56:06:c6:f9:03:a7:f6:bf:da:9f:fa:45:2c:
5f:5c:19:65:8e:67:b3:e2:bf:c5:27:b6:48:58:2e:
30:6a:e8:c4:89:33:48:4b:b6:9c:ac:1e:6b:b7:1d:
9c:54:83:b4:2c:58:6a:d3:0a:5a:d9:cf:dd:7a:28:
48:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:CB:37:9A:A2:EE:04:7B:E2:36:10:20:A9:72:C0:37:5B:E0:EE:A6
X509v3 Authority Key Identifier:
keyid:AF:88:C8:BD:2D:A8:BE:27:9C:17:72:A1:11:0A:A3:88:F0:EF:11:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/0ss3mqLuBHviNhAgqXLAN1vg7qY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.155.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b3:3a:cd:1b:6c:b0:cf:85:77:67:45:06:4c:d0:7a:cc:bf:cf:
da:5f:90:03:50:a2:92:a3:36:45:24:9c:16:af:ea:6d:1a:b2:
75:9b:2c:a5:ed:b4:0d:7a:10:6e:8d:f4:f6:f4:f7:91:40:4b:
92:c7:29:be:50:d9:57:16:66:71:a7:93:45:6e:29:47:4d:3d:
8a:b7:8c:5f:a6:8d:b9:f7:df:33:91:63:55:ad:e3:a6:bf:95:
ee:6c:64:bf:ab:ef:60:a3:63:ad:ff:50:3a:36:dd:31:97:88:
dd:86:62:32:cd:92:83:3d:47:ca:f5:31:6a:10:2c:be:e3:1a:
7c:e9:a9:7d:cc:18:f3:c6:05:2e:ce:68:72:08:a3:de:89:f1:
f2:2e:af:7e:c1:32:5f:b1:10:91:2b:4f:97:60:bf:f1:47:fa:
60:1a:71:a8:56:43:48:a7:d1:6e:a0:96:f6:e8:9c:34:19:87:
91:bf:81:83:d9:2c:80:02:b5:ba:6b:46:45:6c:35:e8:5a:c7:
b4:18:8d:00:dd:1f:45:ed:1f:bf:ab:6a:42:af:80:44:1f:07:
b9:07:a8:54:dd:68:53:8d:2d:52:ca:19:d2:c7:3d:15:22:c4:
3f:07:6f:fc:6b:cf:9f:1b:82:23:69:0e:be:b9:a6:c6:dc:59:
99:70:67:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:28:38 2025 by rpki-client