Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/PGbg7W1c05sfckW6xC6J4UVX6pE.roa
File: PGbg7W1c05sfckW6xC6J4UVX6pE.roa (raw, json)
Hash identifier: WUutuahzRGL2G3PJW9ymnE+Q0A7y3AoyWWWcUzUjzd8=
Subject key identifier: 3C:66:E0:ED:6D:5C:D3:9B:1F:72:45:BA:C4:2E:89:E1:45:57:EA:91
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 1AA912E6
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/PGbg7W1c05sfckW6xC6J4UVX6pE.roa
Signing time: Sat 01 Jan 2022 12:02:40 +0000
ROA not before: Sat 01 Jan 2022 12:02:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29802
IP address blocks: 107.161.163.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 447288038 (0x1aa912e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Jan 1 12:02:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c66e0ed6d5cd39b1f7245bac42e89e14557ea91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:27:1b:39:58:81:53:05:72:e9:94:2d:4c:25:
83:e9:ea:b5:44:06:70:63:4a:fd:2c:34:4b:04:7b:
1a:3e:b4:14:6a:f4:d8:fa:f0:83:dd:8f:bb:ce:78:
fb:4f:e9:ac:8e:cd:e3:61:14:28:76:80:75:0d:09:
6c:36:22:0f:00:0a:fd:fd:d1:dd:f0:0c:4d:10:76:
b0:0c:2d:e0:06:7d:79:e1:ce:e2:f6:1c:5b:45:ae:
77:28:3b:04:f0:33:5e:1a:d4:a4:c0:1e:c6:4b:5f:
29:05:f6:da:06:ca:b5:65:77:0b:e3:0d:59:ad:28:
ff:f8:f0:a4:38:ca:d0:c6:e6:bc:18:6c:22:af:d3:
b4:b5:d1:34:b4:bc:f4:0c:de:6b:ac:84:e5:b8:31:
e0:05:98:69:3d:fc:77:6d:d0:28:69:27:a0:de:ab:
27:71:c6:2d:06:b0:b4:fc:4c:86:0b:b6:1b:fd:ee:
5f:4e:d2:62:b3:92:0f:cf:95:36:81:32:d7:5a:9a:
e9:5c:69:6c:55:32:38:c9:68:ec:31:90:21:01:1a:
08:f4:fe:2c:d6:6b:f4:00:f9:7d:ea:df:69:e0:17:
24:ee:81:b9:a0:65:59:82:f3:e0:20:dc:8c:02:a8:
31:6d:64:ff:8a:c6:3b:b4:fa:87:34:41:18:12:f1:
47:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:66:E0:ED:6D:5C:D3:9B:1F:72:45:BA:C4:2E:89:E1:45:57:EA:91
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/PGbg7W1c05sfckW6xC6J4UVX6pE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.161.163.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:ec:f3:9a:d0:b9:06:0a:2a:af:f2:3d:43:ad:08:7b:86:c0:
a2:63:78:fc:f3:8d:39:12:71:03:ef:92:c5:b3:d6:2a:90:0f:
e9:0e:36:a6:9d:8f:85:70:8b:b3:b7:7d:e6:0a:a1:e6:26:b2:
c4:2d:c7:7f:bb:49:87:e6:97:62:72:6c:a1:cd:42:b0:ee:28:
45:25:3b:02:1c:4a:a5:0e:2c:b0:ab:98:b6:f2:18:eb:05:2a:
34:66:b6:6b:a0:1c:5a:bf:7d:5c:42:0e:83:31:05:2f:a0:d1:
e5:2d:97:18:ce:a6:4e:ee:10:9d:bd:4a:5e:05:20:be:16:25:
10:64:45:da:c3:f1:91:39:1b:c2:08:93:df:e4:83:13:54:85:
8f:10:24:aa:f9:f9:ee:37:91:1a:ae:0e:ff:b4:4c:f9:42:d8:
81:60:25:bf:ad:af:37:21:14:11:c7:1a:f6:05:37:d2:8c:7a:
9d:8d:07:66:c8:fa:41:fd:82:f9:ec:1a:12:cc:68:09:73:2e:
4f:56:69:42:24:e7:20:4d:c0:b3:14:4a:a5:00:8a:ca:2e:7b:
e4:eb:c7:b5:f0:4d:04:4d:41:f3:61:5f:8c:ee:5d:4d:c2:37:
1f:95:2d:ff:3a:ae:59:b7:bf:e1:3f:1e:0a:77:9c:4d:64:20:
56:9c:b6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:22:07 2025 by rpki-client