Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/kdQvVQFC7DED8v2LbcUL3eesMHM.roa
File: kdQvVQFC7DED8v2LbcUL3eesMHM.roa (raw, json)
Hash identifier: ZKOs6NzSXJ/EEuMxb9IDDJnZw7i6Hu0d5Z02dLr7cgM=
Subject key identifier: 91:D4:2F:55:01:42:EC:31:03:F2:FD:8B:6D:C5:0B:DD:E7:AC:30:73
Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Certificate serial: 018BAEC4887424852FE000950805F27EF95F
Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/kdQvVQFC7DED8v2LbcUL3eesMHM.roa
Signing time: Wed 08 Nov 2023 11:49:57 +0000
ROA not before: Wed 08 Nov 2023 11:49:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34837
IP address blocks: 79.127.65.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ae:c4:88:74:24:85:2f:e0:00:95:08:05:f2:7e:f9:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Validity
Not Before: Nov 8 11:49:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=91d42f550142ec3103f2fd8b6dc50bdde7ac3073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:00:6a:c3:e5:ea:48:0c:cf:5e:15:33:0a:92:
46:f7:b5:65:db:10:a0:3f:10:fb:79:e7:9b:0d:b8:
48:3b:71:f1:74:72:1e:54:a9:5a:02:fc:01:04:ec:
60:25:39:58:f9:55:4c:54:5c:36:5e:a4:26:eb:08:
b7:db:a3:27:00:c3:41:99:23:61:71:ae:10:ff:2e:
82:ff:b7:06:22:e9:1f:63:c8:9f:de:07:8f:8b:a7:
4d:c2:05:f3:03:fd:33:51:04:5e:9b:05:0c:7f:29:
34:62:aa:52:ad:75:44:d8:55:9c:50:e4:7c:af:03:
3d:12:aa:35:a0:f0:30:b2:e3:d9:ed:92:e2:cb:bf:
cf:11:75:58:c8:cc:87:5d:3a:b9:de:7f:d6:6a:56:
53:8b:ab:f4:0b:9a:10:9c:55:8b:7f:c7:b7:d7:03:
64:33:cf:2e:b8:ef:17:1c:a7:48:e0:02:a1:2f:19:
65:31:d3:ea:3f:91:ea:84:99:d3:3b:db:a1:ac:5b:
09:6e:dd:63:80:69:40:56:35:ac:ed:08:9c:27:94:
7f:21:8e:2a:59:fc:7c:74:19:03:29:c6:b0:b0:a8:
e3:e3:11:e7:b9:6d:6b:8b:d8:69:18:d6:96:8e:9d:
5d:de:45:35:df:0d:16:ff:71:24:f4:36:7d:07:60:
5f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D4:2F:55:01:42:EC:31:03:F2:FD:8B:6D:C5:0B:DD:E7:AC:30:73
X509v3 Authority Key Identifier:
keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/kdQvVQFC7DED8v2LbcUL3eesMHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.127.65.0/24
Signature Algorithm: sha256WithRSAEncryption
70:08:7a:44:27:67:33:1c:50:5a:de:c1:ea:a0:de:66:91:f1:
79:8c:88:fd:6b:9a:34:78:ad:ea:36:58:79:51:84:d3:a1:fa:
d8:6a:ab:a6:5d:f5:3d:67:c0:9e:db:d3:f3:d4:5d:ba:c5:62:
1e:96:b5:d1:56:26:28:5a:41:8d:99:21:c5:69:15:4a:38:db:
3d:fd:05:ef:26:2d:60:79:07:05:50:1a:f2:97:0c:ea:17:cb:
21:f7:1f:07:98:7f:24:0c:c5:a9:3c:c3:4a:14:67:c7:3c:19:
a4:49:29:26:26:62:cb:42:d8:1a:6a:ec:b3:6b:b0:cf:c4:a5:
27:5c:28:f0:a2:91:50:ef:36:fc:22:5d:f2:41:fd:73:76:01:
0a:9e:af:2e:18:b9:f8:3b:d5:7c:db:41:21:7a:c9:bd:94:cb:
aa:bc:fc:3b:0b:60:03:3e:c2:53:d0:97:34:20:f8:3a:8c:12:
a4:51:80:9c:45:07:e3:4b:f6:5d:a3:ed:e5:74:4e:6f:99:e3:
5b:bd:45:f3:2d:73:90:19:20:3c:3d:12:54:f0:db:fc:8e:b5:
11:78:90:64:c8:63:be:0e:c4:1c:5f:5d:1f:7b:bc:34:9c:fc:
43:13:f5:7a:70:86:08:6f:dd:9f:7d:32:11:6f:32:73:e9:53:
95:9d:20:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:38:15 2025 by rpki-client