Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/_deYj8gvEXuwGJx8zSUKpQjgz3A.roa
File: _deYj8gvEXuwGJx8zSUKpQjgz3A.roa (raw, json)
Hash identifier: 9urYvvVJ/0+VoXjuhagqKo2plDBUzmwatIWQ96ORpVQ=
Subject key identifier: FD:D7:98:8F:C8:2F:11:7B:B0:18:9C:7C:CD:25:0A:A5:08:E0:CF:70
Certificate issuer: /CN=8f3f9e7ffe8858387ed1b3a7eca76205ef0e21f6
Certificate serial: 0A799CFD
Authority key identifier: 8F:3F:9E:7F:FE:88:58:38:7E:D1:B3:A7:EC:A7:62:05:EF:0E:21:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/_deYj8gvEXuwGJx8zSUKpQjgz3A.roa
Signing time: Sat 01 Jan 2022 09:03:23 +0000
ROA not before: Sat 01 Jan 2022 09:03:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1725
IP address blocks: 134.206.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175742205 (0xa799cfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3f9e7ffe8858387ed1b3a7eca76205ef0e21f6
Validity
Not Before: Jan 1 09:03:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fdd7988fc82f117bb0189c7ccd250aa508e0cf70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e5:b4:ff:39:3d:55:61:2b:ba:8f:21:8e:63:
16:d2:47:eb:3d:40:1e:e0:3b:23:b7:28:72:75:58:
a8:eb:77:9d:52:ee:49:8d:c5:a9:b2:79:5c:0f:9d:
6e:09:91:74:96:c9:39:89:4b:ed:3b:7b:f1:7e:fc:
7d:88:01:57:fd:64:eb:44:d4:d0:c7:77:03:f7:46:
e0:90:33:db:b9:7b:1c:1e:aa:b9:fc:10:72:fa:83:
cb:5d:37:19:37:ac:23:82:47:06:25:82:73:a2:0c:
44:c0:e0:ef:52:d7:4f:40:7f:b9:32:72:8c:63:59:
fc:7c:9a:0a:03:d1:3b:fd:8a:3b:81:a3:b5:a7:84:
40:33:14:2b:5c:5f:5a:d5:9f:97:69:85:37:b6:f0:
0f:86:80:e9:a7:d4:82:5f:15:4a:4f:80:68:ec:2e:
2b:e4:60:06:b4:99:cf:90:24:75:df:74:e3:ec:e0:
e1:24:3d:a1:a9:fb:c0:29:3d:16:98:45:27:bb:9c:
3d:7f:d1:ca:d7:86:0a:e8:e3:41:c9:5e:3b:d4:02:
b4:e8:93:f4:2b:c7:55:4a:c8:52:42:5e:9c:39:67:
19:f5:5d:a2:52:23:b5:75:bc:b5:05:1b:20:f9:d7:
5e:0c:f0:71:53:b8:31:f7:e9:ba:be:0b:fb:f8:cd:
84:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D7:98:8F:C8:2F:11:7B:B0:18:9C:7C:CD:25:0A:A5:08:E0:CF:70
X509v3 Authority Key Identifier:
keyid:8F:3F:9E:7F:FE:88:58:38:7E:D1:B3:A7:EC:A7:62:05:EF:0E:21:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/_deYj8gvEXuwGJx8zSUKpQjgz3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.206.0.0/16
Signature Algorithm: sha256WithRSAEncryption
75:4c:78:21:0d:85:cc:98:95:e5:c5:49:bd:52:30:d6:99:e6:
01:d3:15:2c:3a:e5:9b:a5:dd:8d:e8:70:72:76:5f:15:9b:28:
6b:63:4d:af:ef:04:b5:f7:8b:fc:f1:cc:ab:31:bd:cb:5c:80:
82:7d:0c:13:e4:1c:08:15:4c:a6:64:78:49:e0:7e:53:e1:75:
26:00:b7:6a:f2:79:93:96:f4:9b:87:f9:6f:fd:3a:85:5e:18:
ca:a6:44:a2:fb:67:08:51:7c:5b:21:53:df:3b:e9:66:7f:7e:
64:0d:23:9d:88:15:a3:15:f7:31:f5:63:56:7e:c4:85:7e:24:
73:d3:86:fb:7b:86:5e:47:94:7e:ad:cf:56:50:0c:02:04:a2:
c6:82:7f:99:7a:d7:fe:77:90:8c:b3:0c:2f:6b:80:5c:a1:cc:
2e:c1:fe:d9:ca:b5:f2:98:67:2b:c8:e5:e3:f9:4c:b1:97:c0:
0b:ee:7a:29:5f:56:56:c0:87:4e:f2:74:57:a9:ac:c8:ef:5f:
e5:f0:99:77:7d:2e:97:ee:f0:7b:2d:fa:16:cd:da:8a:47:22:
f3:82:fc:d9:ab:d1:78:1d:d3:54:d6:d8:78:6d:d7:79:3c:74:
c4:00:b2:f2:93:30:f1:86:65:44:38:39:20:05:fc:0a:43:ee:
43:aa:01:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:53:37 2025 by rpki-client