Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/39db6c-f23b-4c9b-9f79-734994c52c1f/1/_GIqCpr3cu81FS8zc6Qu7OeH7hE.roa
File: _GIqCpr3cu81FS8zc6Qu7OeH7hE.roa (raw, json)
Hash identifier: OvTomIYkrM2dXjU4vIlqNnVfVAXjJibrvSpPrtPjLIs=
Subject key identifier: FC:62:2A:0A:9A:F7:72:EF:35:15:2F:33:73:A4:2E:EC:E7:87:EE:11
Certificate issuer: /CN=b2db2bfcf59d99ca70833708fd30032f23fef485
Certificate serial: 05AEA77E
Authority key identifier: B2:DB:2B:FC:F5:9D:99:CA:70:83:37:08:FD:30:03:2F:23:FE:F4:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stsr_PWdmcpwgzcI_TADLyP-9IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/39db6c-f23b-4c9b-9f79-734994c52c1f/1/_GIqCpr3cu81FS8zc6Qu7OeH7hE.roa
Signing time: Sat 01 Jan 2022 15:01:21 +0000
ROA not before: Sat 01 Jan 2022 15:01:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201910
IP address blocks: 79.170.144.0/23 maxlen: 23
79.170.146.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95332222 (0x5aea77e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2db2bfcf59d99ca70833708fd30032f23fef485
Validity
Not Before: Jan 1 15:01:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc622a0a9af772ef35152f3373a42eece787ee11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a6:d1:a4:87:f1:df:3b:91:64:c9:22:d4:d2:
fd:bd:d9:fc:bd:86:c3:65:b6:d7:25:37:6c:e5:83:
f0:ea:f3:37:ec:00:f6:3d:4a:fc:aa:e6:8e:f5:9e:
4c:f9:36:84:35:83:ff:bc:98:91:52:bf:d7:07:d9:
39:6f:9a:69:6a:70:35:c9:09:07:8b:aa:f4:44:a0:
7a:2e:47:f6:5b:c7:56:4e:f1:94:51:6a:ca:f5:41:
32:21:72:61:3c:13:01:c3:91:83:84:e9:78:9a:05:
07:70:05:86:79:a0:15:f1:ef:5d:da:75:20:93:63:
29:cb:c7:af:0d:9a:d7:ef:da:8e:90:a2:d4:26:82:
e3:ec:c8:e8:1b:0b:59:7e:2a:12:2e:64:a1:60:f2:
d7:b0:f8:9a:99:14:60:78:fa:f3:89:d2:ed:84:0a:
bb:7b:8e:24:1d:cb:08:a8:38:1b:14:69:6c:87:7d:
67:38:25:0f:f9:e9:a7:96:18:d7:d1:ba:78:e1:ef:
8d:78:fd:98:33:16:e9:81:bb:2a:f2:30:e4:8e:59:
6d:f3:7e:d6:ff:92:29:85:ec:a7:2d:e4:c3:d3:00:
51:22:b2:9b:a4:da:5d:f6:48:45:fc:80:b8:09:e0:
80:84:19:86:f9:e9:fd:b4:9a:f9:37:f0:f4:6e:dd:
4f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:62:2A:0A:9A:F7:72:EF:35:15:2F:33:73:A4:2E:EC:E7:87:EE:11
X509v3 Authority Key Identifier:
keyid:B2:DB:2B:FC:F5:9D:99:CA:70:83:37:08:FD:30:03:2F:23:FE:F4:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stsr_PWdmcpwgzcI_TADLyP-9IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/39db6c-f23b-4c9b-9f79-734994c52c1f/1/_GIqCpr3cu81FS8zc6Qu7OeH7hE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/39db6c-f23b-4c9b-9f79-734994c52c1f/1/stsr_PWdmcpwgzcI_TADLyP-9IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.170.144.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:0c:49:13:fc:29:75:14:a3:91:30:3b:22:5a:3f:47:d3:90:
f9:39:83:16:22:76:37:e8:8b:4c:6f:f8:31:ed:9f:02:86:91:
4c:54:54:6b:b5:40:34:01:1b:5b:40:0f:10:dc:bc:91:10:6a:
28:0e:d2:45:9f:8a:1d:ce:0b:5c:b6:24:fa:41:90:1e:e1:d9:
ef:85:13:ed:38:18:1e:2f:57:c1:81:46:a2:0d:7b:f2:9c:32:
e9:30:df:12:2d:d3:ef:56:31:05:41:0f:e1:11:f6:b6:e1:11:
f8:2c:58:93:3d:9a:35:47:c3:00:ab:1c:24:b6:77:b9:c1:a4:
89:0a:0f:f6:0c:3d:69:f3:03:70:9c:c1:67:75:2b:f8:54:c9:
59:37:f6:84:da:c7:b1:d3:24:45:9e:19:3b:ce:23:6f:85:f7:
2f:6a:08:fb:e2:66:8d:5d:06:75:16:11:62:a2:bf:c4:be:bf:
bd:56:97:75:08:2e:32:c0:29:fd:61:cc:da:8a:44:94:5b:62:
9b:22:c8:94:99:3b:08:50:eb:83:d1:89:b8:93:4a:43:2b:df:
8f:78:6d:0d:be:71:07:e3:4a:a3:ab:c6:5b:57:8a:6d:03:dd:
6d:e6:5b:d4:73:44:95:44:f0:9e:12:01:15:27:10:87:25:59:
75:bd:a2:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:39:01 2025 by rpki-client