Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/AzRiqqK_0mZQBYoMhVXKqMZmqoA.roa
File: AzRiqqK_0mZQBYoMhVXKqMZmqoA.roa (raw, json)
Hash identifier: LZdgFCokD/posAmFSNJP0kOKOO3atYRdu9DtvcL38BE=
Subject key identifier: 03:34:62:AA:A2:BF:D2:66:50:05:8A:0C:85:55:CA:A8:C6:66:AA:80
Certificate issuer: /CN=8b054485ee62c6f1939613cba20669eef4504f79
Certificate serial: 01856F66CCE33F9AE4D199CB31FDFF3A9A0C
Authority key identifier: 8B:05:44:85:EE:62:C6:F1:93:96:13:CB:A2:06:69:EE:F4:50:4F:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwVEhe5ixvGTlhPLogZp7vRQT3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/AzRiqqK_0mZQBYoMhVXKqMZmqoA.roa
Signing time: Sun 01 Jan 2023 22:14:45 +0000
ROA not before: Sun 01 Jan 2023 22:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201735
IP address blocks: 141.170.210.0/23 maxlen: 24
141.170.212.0/23 maxlen: 24
141.170.215.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:cc:e3:3f:9a:e4:d1:99:cb:31:fd:ff:3a:9a:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b054485ee62c6f1939613cba20669eef4504f79
Validity
Not Before: Jan 1 22:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=033462aaa2bfd26650058a0c8555caa8c666aa80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1b:a9:b0:3e:be:72:55:d4:5c:ac:de:de:87:
bc:ca:41:18:d4:c5:cd:60:d6:f6:68:bf:d4:34:61:
d7:16:9b:05:d6:db:92:ab:62:71:1e:a1:e4:b0:b9:
e2:ba:88:98:a5:d4:27:21:69:e5:7e:50:08:68:5e:
b8:ee:89:25:ac:ce:60:82:6d:8a:a0:ee:a0:c7:e3:
78:a4:29:40:e1:7d:03:ac:87:43:95:7b:73:87:74:
65:5a:25:a7:fb:cf:99:6a:b2:de:1d:36:93:ad:da:
74:c0:f9:4b:4b:29:c6:26:40:95:e1:fd:ea:8f:23:
9c:66:20:2f:5d:a3:5b:45:4f:51:be:dc:c9:39:7d:
48:a2:7e:6f:b6:d8:46:5f:b6:c0:e2:0b:bf:44:17:
6e:48:8c:0c:a4:48:23:db:a6:00:27:42:e9:17:00:
71:70:35:f6:e1:48:06:40:24:a3:24:dc:83:d0:56:
60:a5:00:66:72:91:86:26:ae:47:54:8f:09:51:3d:
94:9c:90:db:fd:f1:f2:a8:69:b1:59:af:9b:a8:6a:
6c:a3:9e:da:d9:b3:13:00:88:a6:8e:91:13:d5:f9:
a2:a8:08:6e:89:50:1b:f4:ff:19:4d:0f:f0:ac:98:
8b:56:f3:bf:d2:35:0a:d3:5e:72:b9:fe:aa:a1:93:
ad:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:34:62:AA:A2:BF:D2:66:50:05:8A:0C:85:55:CA:A8:C6:66:AA:80
X509v3 Authority Key Identifier:
keyid:8B:05:44:85:EE:62:C6:F1:93:96:13:CB:A2:06:69:EE:F4:50:4F:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwVEhe5ixvGTlhPLogZp7vRQT3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/AzRiqqK_0mZQBYoMhVXKqMZmqoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.170.210.0-141.170.213.255
141.170.215.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:21:84:d7:c3:03:c8:01:00:83:41:42:67:0f:f3:b9:30:53:
e9:24:a0:09:32:18:36:ce:26:39:61:be:f7:ba:c1:ab:86:d1:
63:be:aa:75:80:8f:81:3c:18:2e:f3:8e:b5:e9:f2:aa:3f:4d:
00:34:5c:ef:4c:e5:28:12:ac:0a:b5:cb:89:10:2f:36:43:2e:
69:9b:2a:a9:9d:4d:f5:a8:9a:f4:9b:d3:22:ba:d2:7d:c0:de:
fe:73:96:78:3c:e4:7c:c3:d5:42:18:d2:32:d6:a3:e5:7c:1c:
64:5c:33:80:91:2e:27:8c:16:3f:ca:68:89:cc:48:40:1f:31:
cc:79:dd:e6:35:c9:03:fd:fa:e4:18:da:a8:e0:2d:d1:6d:4e:
72:f9:f0:60:ea:1c:b1:4d:a2:7c:6b:ed:7e:1a:dc:da:6f:9e:
0a:df:a7:2f:57:ce:82:53:21:cd:86:0a:ed:90:9f:37:42:bf:
ad:11:ee:fa:27:b2:ea:8d:9c:89:72:9d:df:98:c0:39:a8:cf:
01:fa:a0:d6:90:66:b2:5f:c8:db:ce:5d:18:12:13:f7:b0:81:
e4:23:a4:6e:80:09:16:1d:39:6b:69:19:95:bd:4e:60:f6:2c:
c5:b0:df:9d:0d:44:2e:e6:e5:4e:a0:50:71:ae:78:bc:56:db:
17:6c:cd:12
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 22 13:10:26 2025 by rpki-client