Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/F06mZreXI_F_Om8T8FeRqg-H3NQ.roa
File: F06mZreXI_F_Om8T8FeRqg-H3NQ.roa (raw, json)
Hash identifier: 5hPWCWtlz0o6e5LQ/XzA34MpCclmaK0Yxl8oRJGFGvI=
Subject key identifier: 17:4E:A6:66:B7:97:23:F1:7F:3A:6F:13:F0:57:91:AA:0F:87:DC:D4
Certificate issuer: /CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Certificate serial: 018988213E8EB7984E0C53C46ECCBD3715CB
Authority key identifier: 80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/F06mZreXI_F_Om8T8FeRqg-H3NQ.roa
Signing time: Mon 24 Jul 2023 13:40:27 +0000
ROA not before: Mon 24 Jul 2023 13:40:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197714
IP address blocks: 217.25.84.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:88:21:3e:8e:b7:98:4e:0c:53:c4:6e:cc:bd:37:15:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Validity
Not Before: Jul 24 13:40:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=174ea666b79723f17f3a6f13f05791aa0f87dcd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:00:0d:dc:f3:e9:28:ba:a6:49:30:50:09:24:
b1:20:75:7d:7a:e4:61:b5:c6:00:14:02:3c:5b:34:
90:84:80:d2:05:0e:81:cb:cd:8e:7f:45:3e:16:0f:
58:7e:55:c7:c8:06:71:ed:de:f9:e9:af:d1:eb:33:
e7:0b:10:e3:cb:b4:e7:85:29:56:0d:46:c4:4c:8c:
28:2f:c3:1f:eb:f6:41:ba:ea:f2:45:2e:56:c1:f1:
41:7b:8c:53:27:37:f6:ec:66:a0:9a:69:f4:24:93:
00:32:18:d3:2d:09:ce:04:c3:c3:3c:98:e4:3b:0c:
14:2b:8e:ec:c7:21:68:4d:8e:e9:5a:13:ba:ca:81:
2f:b2:39:d1:fa:e3:98:88:8c:51:f8:d6:a8:52:6a:
4d:d0:54:b4:73:ab:f8:82:01:07:04:69:ee:50:fd:
2d:6f:56:09:8e:e2:74:15:b9:98:e5:90:c1:f7:4e:
63:3c:e7:04:98:f8:13:89:59:37:90:01:92:42:a8:
79:d9:9a:dc:af:0b:43:3b:9d:9b:4b:fc:29:77:37:
0a:f6:3e:70:eb:ac:72:56:3f:67:65:e8:94:3a:4a:
85:a3:93:09:7b:26:ca:75:31:da:eb:4f:d3:f9:66:
81:ad:b3:cc:c2:4b:0e:3c:ea:5b:8d:81:64:57:62:
81:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:4E:A6:66:B7:97:23:F1:7F:3A:6F:13:F0:57:91:AA:0F:87:DC:D4
X509v3 Authority Key Identifier:
keyid:80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/F06mZreXI_F_Om8T8FeRqg-H3NQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.25.84.0/23
Signature Algorithm: sha256WithRSAEncryption
84:23:7f:28:19:ad:13:48:9b:76:34:be:af:45:c1:69:13:6e:
a2:9c:d4:49:19:c2:14:3c:ed:7b:0a:b4:0b:dc:35:c4:bf:8f:
f7:ed:69:d8:20:01:fd:ad:ab:d0:fe:b8:cb:f2:3e:45:89:04:
97:de:14:fd:ab:db:36:bd:5d:1b:28:54:07:3b:ae:31:40:10:
c9:69:60:70:07:d3:b5:16:67:77:9b:b5:eb:a1:ef:5d:57:91:
06:7e:cf:99:f0:c0:cd:1c:31:4e:10:55:b8:3b:a4:97:e5:e9:
dc:4e:2d:8a:6c:3b:9e:7f:e5:82:11:c9:16:f0:ea:d0:c4:a8:
ea:03:99:a5:e7:42:f5:6c:70:6b:aa:58:5b:e1:3c:52:6d:41:
4f:1e:ee:0a:06:40:e6:5b:e5:5c:9d:0e:a4:1b:c1:4b:c9:a4:
32:7e:af:07:b8:df:16:20:1f:ac:36:44:c1:d9:8b:98:d7:c9:
f0:99:d7:be:8c:9b:59:7a:fa:63:e1:c9:be:ce:14:f7:4f:1e:
1e:54:f3:e4:98:84:48:ed:7a:9c:84:69:eb:19:b1:93:79:de:
59:59:4b:15:1f:e9:02:57:55:e4:47:6d:9d:c8:52:a1:cd:83:
dd:b2:1c:d0:b5:c1:49:69:f8:44:52:93:48:94:4b:8b:8a:84:
53:a5:63:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:26:49 2025 by rpki-client