Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/DbLgVtrJLT0ztroa_vFXx37UwNE.roa
File: DbLgVtrJLT0ztroa_vFXx37UwNE.roa (raw, json)
Hash identifier: kcJa5cF40ZJ77pWT4lYY3gr4du9O+voLqmuprmMAyyc=
Subject key identifier: 0D:B2:E0:56:DA:C9:2D:3D:33:B6:BA:1A:FE:F1:57:C7:7E:D4:C0:D1
Certificate issuer: /CN=a389e7035b08e181a341f37eda7343d23f1cafa4
Certificate serial: 018570B985EC40A118B0A5AE32B3BEBF775B
Authority key identifier: A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/DbLgVtrJLT0ztroa_vFXx37UwNE.roa
Signing time: Mon 02 Jan 2023 04:24:44 +0000
ROA not before: Mon 02 Jan 2023 04:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 17941
IP address blocks: 176.121.93.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b9:85:ec:40:a1:18:b0:a5:ae:32:b3:be:bf:77:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a389e7035b08e181a341f37eda7343d23f1cafa4
Validity
Not Before: Jan 2 04:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0db2e056dac92d3d33b6ba1afef157c77ed4c0d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e2:12:1d:71:25:97:d4:e2:7c:5a:ef:7d:14:
36:e5:5b:65:da:6b:e8:64:29:b4:95:5d:72:d8:e5:
eb:64:fb:42:7c:28:eb:35:f1:d1:72:54:f7:c6:82:
42:42:10:51:f7:49:77:cb:40:f9:35:35:de:8f:39:
a8:b8:95:0d:1a:e6:ec:15:6c:0f:9b:82:02:e2:56:
90:97:6e:f9:76:73:c1:16:81:fe:55:b8:26:31:0d:
50:13:81:c9:4f:d1:64:70:03:0d:cc:ba:f8:7d:1e:
5f:20:58:4f:2a:69:dd:94:96:a0:2a:6c:de:e2:d4:
82:0c:f2:6d:68:39:87:7c:3c:2a:5f:de:a1:dc:94:
1b:ca:db:cd:19:86:ce:36:35:a5:8b:2f:f5:a8:a6:
6c:69:c4:00:dd:cb:73:60:27:f0:e4:55:a9:8a:16:
f7:41:2b:27:6f:88:4b:33:5e:69:9d:87:cc:f0:34:
3c:51:8d:f9:c2:94:c9:bd:fd:9c:6e:01:e0:22:fd:
bc:b4:51:88:bd:57:2f:d1:ff:d4:75:a2:4f:88:2d:
bd:79:1e:fc:53:19:7a:d3:92:d2:04:dc:a5:6a:86:
8d:fd:9e:41:c1:2d:cd:01:2a:b0:21:fa:f0:61:17:
2c:cc:65:a5:f9:65:fe:68:dd:ab:f0:66:de:04:0a:
88:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B2:E0:56:DA:C9:2D:3D:33:B6:BA:1A:FE:F1:57:C7:7E:D4:C0:D1
X509v3 Authority Key Identifier:
keyid:A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/DbLgVtrJLT0ztroa_vFXx37UwNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.121.93.0/24
Signature Algorithm: sha256WithRSAEncryption
86:53:e8:60:55:55:24:7e:a2:75:04:07:b8:3e:f6:ca:6d:4f:
e8:58:04:8a:84:1e:fd:3a:a7:f3:59:6c:20:36:7a:99:0b:c9:
77:88:10:6a:29:68:d7:aa:80:38:83:67:27:8d:67:50:e3:52:
35:23:fb:e6:3c:b3:b7:8c:04:00:a0:96:8e:bb:73:21:73:53:
24:88:3a:dd:ab:14:8a:52:82:06:f8:97:bb:dc:57:2f:78:16:
da:85:ff:ee:1f:f3:bc:9f:a3:5e:b8:be:e0:f2:cd:fb:45:49:
8c:f8:a9:b6:98:77:49:8c:e6:f2:7f:08:f9:65:4d:f3:15:15:
a4:a8:70:aa:84:68:72:83:3f:ab:a0:db:79:1e:24:95:a9:ea:
f2:fe:44:6f:8f:fc:e9:aa:fa:91:8b:35:2a:81:5c:a0:60:9b:
9d:12:92:2a:c8:9d:c1:e7:aa:59:74:3a:57:2d:f7:88:f5:f1:
90:e2:a9:9f:29:3a:75:cf:77:28:af:42:18:1f:22:4e:e5:4f:
44:23:4c:40:3d:5d:fd:0a:04:2e:dc:a1:6c:a8:13:9f:a9:66:
81:88:c7:bb:13:ac:3c:56:2c:e7:99:df:33:d8:91:2a:9e:22:
d2:77:a1:92:83:1c:bf:8b:0d:58:e5:54:8a:05:c4:a7:89:7c:
87:d3:04:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:08:15 2025 by rpki-client