Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/PKrNJL_OEu6Vvlgr-by-ZxofiNE.roa
File: PKrNJL_OEu6Vvlgr-by-ZxofiNE.roa (raw, json)
Hash identifier: 27LG3qQ+BIJqjkWMkaLmWBUdDlTWpJCdT2rjIgaP6aI=
Subject key identifier: 3C:AA:CD:24:BF:CE:12:EE:95:BE:58:2B:F9:BC:BE:67:1A:1F:88:D1
Certificate issuer: /CN=0d44da5c1904095860e868180573ee3c895a7b45
Certificate serial: 0B94FA8F
Authority key identifier: 0D:44:DA:5C:19:04:09:58:60:E8:68:18:05:73:EE:3C:89:5A:7B:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/PKrNJL_OEu6Vvlgr-by-ZxofiNE.roa
Signing time: Sat 01 Jan 2022 04:53:00 +0000
ROA not before: Sat 01 Jan 2022 04:53:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202053
IP address blocks: 109.71.55.0/24 maxlen: 24
109.71.54.0/24 maxlen: 24
2a03:3b00:1::/48 maxlen: 48
2a03:3b00:2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 194312847 (0xb94fa8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d44da5c1904095860e868180573ee3c895a7b45
Validity
Not Before: Jan 1 04:53:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3caacd24bfce12ee95be582bf9bcbe671a1f88d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e2:9f:2d:27:49:6e:48:3f:cc:60:19:41:a3:
bd:68:85:11:ed:bf:3b:68:32:20:56:dd:f0:f3:ce:
91:59:7a:97:2e:76:01:12:db:9c:9e:97:69:13:8a:
ee:63:81:4c:05:ec:e1:de:98:b6:e3:2a:83:46:12:
87:c5:1b:4c:93:9c:8b:e9:ff:a9:29:7f:09:a8:31:
6f:b0:6c:82:af:5d:54:89:94:7e:5a:a5:cb:74:32:
63:57:9c:b9:4e:55:8a:e0:c8:b1:98:4c:c7:26:c9:
57:ec:41:41:f8:cd:db:00:7b:d1:02:93:cf:c1:b3:
dd:ca:e8:36:dd:15:82:93:6e:01:12:92:10:44:bc:
91:0b:05:89:8b:d9:d2:c7:a2:cf:5b:f9:84:ca:ba:
e2:56:33:e2:b7:30:9e:bc:79:d5:8f:91:10:bb:fc:
40:3d:ac:e7:e0:87:62:cc:22:f6:6b:cc:03:b6:52:
ec:7c:02:54:f6:d8:e4:0b:0b:d0:75:2f:f2:dd:c5:
47:23:8f:8f:a3:eb:15:f4:8c:50:86:d9:cc:b6:10:
10:1e:d5:14:fc:d1:9f:41:76:05:09:42:43:c8:b9:
51:cc:cd:d1:36:0e:3b:3d:6d:a5:01:d0:a2:79:ca:
b4:86:39:b9:f0:5f:fa:cb:92:8e:2a:2c:96:fc:b2:
bc:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:AA:CD:24:BF:CE:12:EE:95:BE:58:2B:F9:BC:BE:67:1A:1F:88:D1
X509v3 Authority Key Identifier:
keyid:0D:44:DA:5C:19:04:09:58:60:E8:68:18:05:73:EE:3C:89:5A:7B:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/PKrNJL_OEu6Vvlgr-by-ZxofiNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.71.54.0/23
IPv6:
2a03:3b00:1::-2a03:3b00:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a8:54:f1:4f:59:9f:ef:6e:e3:2e:09:cd:d7:b0:8b:05:f3:d4:
d0:fd:5c:3f:1b:76:e0:cd:81:9c:b5:ad:e9:2b:83:6a:24:70:
90:cb:20:c9:73:4d:e7:8d:b8:b3:a1:6f:44:72:03:ff:4e:14:
5a:b9:f0:c9:4f:a5:d8:18:90:95:00:6f:87:05:f3:4a:c8:53:
34:50:51:14:ac:fa:a3:bd:82:a3:36:47:33:aa:d9:51:75:8a:
55:a9:66:d3:48:01:48:d5:b1:a9:b0:14:27:40:e8:31:fa:c3:
49:e4:d2:fb:8b:81:de:6d:ec:16:42:3e:e4:08:11:22:1c:42:
a4:f4:d7:16:a6:98:8d:fd:9b:70:a8:0f:e1:b0:1d:d4:e2:ab:
d8:5f:4c:65:3a:d8:2f:67:7b:5d:a0:76:3d:4d:ca:a4:65:33:
1c:6a:c2:d1:3c:cd:92:d1:ba:08:5a:46:c3:af:6b:c7:99:99:
5e:66:62:70:15:b7:ff:a8:bb:1a:17:be:bb:37:38:ae:97:14:
79:ec:bd:fe:f7:c5:99:a9:24:83:38:cb:a5:68:84:8a:fe:c7:
77:fa:b6:2d:51:84:d9:da:f0:10:28:9d:12:52:e3:7c:32:4c:
af:d7:3b:4e:65:2d:9c:30:c9:22:b5:57:7f:21:3b:bf:c4:f9:
db:2d:a3:b7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:03:01 2025 by rpki-client