Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/36Abo6xrm294Plvx2yEkaRiMKKQ.roa
File: 36Abo6xrm294Plvx2yEkaRiMKKQ.roa (raw, json)
Hash identifier: /5/6rCo0MupQOszPWF3VMrg0KWMYQoGG4dv9wl5Zdnk=
Subject key identifier: DF:A0:1B:A3:AC:6B:9B:6F:78:3E:5B:F1:DB:21:24:69:18:8C:28:A4
Certificate issuer: /CN=2940b694bba095344e4bdb99f51e1f1023be57ce
Certificate serial: 032E4275
Authority key identifier: 29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/36Abo6xrm294Plvx2yEkaRiMKKQ.roa
Signing time: Sat 01 Jan 2022 13:07:49 +0000
ROA not before: Sat 01 Jan 2022 13:07:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60651
IP address blocks: 83.217.8.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53363317 (0x32e4275)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2940b694bba095344e4bdb99f51e1f1023be57ce
Validity
Not Before: Jan 1 13:07:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dfa01ba3ac6b9b6f783e5bf1db212469188c28a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c0:ee:c2:00:f9:c7:de:27:68:ef:8f:3e:40:
fe:b5:f4:6d:07:45:a5:db:55:ec:ab:8f:36:be:78:
ba:da:28:0f:57:75:27:d8:88:01:95:8c:f2:09:25:
30:55:a6:2b:f8:96:54:35:26:0f:6d:d8:3e:8d:23:
69:16:af:72:c6:40:1f:75:2f:27:c2:95:65:d6:f6:
86:c9:5d:10:c6:3e:99:71:9e:ef:d7:bf:1e:91:ba:
e1:ea:aa:59:b3:47:a9:4b:6c:54:3e:cd:2a:37:d1:
7a:57:f9:f4:46:c9:3e:0f:a4:e3:97:9d:ae:e8:0b:
e3:73:a9:2f:5e:16:66:f8:a4:c8:0c:5d:61:57:e5:
aa:37:22:ce:10:a8:c2:6a:25:04:cc:37:a8:d1:f6:
08:ee:3f:cc:c2:ef:40:65:96:27:17:86:6c:a6:22:
4b:78:8e:b3:8d:59:f6:05:eb:f6:6d:eb:4f:c4:64:
23:80:2c:88:c8:7b:a0:c9:9b:d7:23:12:c7:2e:db:
44:93:ac:3f:e2:73:54:bf:51:19:17:3d:71:75:25:
03:4e:32:d7:0a:09:1b:2c:66:48:88:2e:cc:94:1a:
db:3b:4d:6c:62:07:5f:b7:e8:3e:e7:6c:30:ad:4e:
01:7d:af:0b:6f:70:3a:ee:22:53:95:63:40:48:55:
5b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A0:1B:A3:AC:6B:9B:6F:78:3E:5B:F1:DB:21:24:69:18:8C:28:A4
X509v3 Authority Key Identifier:
keyid:29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/36Abo6xrm294Plvx2yEkaRiMKKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.217.8.0/24
Signature Algorithm: sha256WithRSAEncryption
31:65:1b:0a:bf:34:51:f7:80:19:09:f7:f1:33:43:e5:8e:46:
a3:d4:42:d3:c4:79:3c:03:4b:cc:86:bd:1a:55:fb:87:c5:2b:
ea:0b:91:f7:bc:cc:31:16:a5:b4:cf:3f:d1:2e:15:f6:1c:0b:
30:16:34:12:ef:f8:06:87:60:d0:58:4d:bc:97:8a:83:4e:a6:
26:70:43:6e:e1:5f:e3:9c:74:37:94:6e:70:9b:57:9f:16:1d:
85:ed:63:63:60:e3:d4:5e:a2:3e:0f:3f:9b:8b:a4:8a:8a:71:
7f:48:5b:77:d1:a8:d0:15:e0:a3:a9:a3:5e:51:1f:ae:18:a8:
dd:46:ee:2e:6b:82:89:2e:78:90:2d:cd:22:4d:f0:e3:3c:f8:
39:48:15:c2:a3:a1:38:c1:9a:34:4e:39:1f:0a:73:94:50:55:
45:68:fd:57:69:57:f3:5a:0f:04:72:e0:79:84:1c:40:cb:7f:
b5:c1:ae:15:48:49:d8:4e:1d:6a:86:31:aa:50:17:7c:da:54:
71:e0:46:88:6e:8e:bb:e4:6b:7e:a0:59:00:33:a9:7c:39:ec:
c7:7e:7d:43:fc:47:27:c2:6f:84:db:ad:4a:ca:c3:4e:50:22:
5a:a4:d3:e2:fd:34:7a:b7:9e:1f:8a:27:40:2a:2b:74:fe:9a:
80:22:a6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 00:33:54 2025 by rpki-client