Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/PVHUZZ1XfoomSTwXmPZ2rNHhaBQ.roa
File: PVHUZZ1XfoomSTwXmPZ2rNHhaBQ.roa (raw, json)
Hash identifier: lp6Qy2iNrBmvE2YVx8znKO07teEMlco4dK0hY45prn8=
Subject key identifier: 3D:51:D4:65:9D:57:7E:8A:26:49:3C:17:98:F6:76:AC:D1:E1:68:14
Certificate issuer: /CN=a3aa8dd118766aed3b09ed69f2e47dc1d2c16159
Certificate serial: 09313599
Authority key identifier: A3:AA:8D:D1:18:76:6A:ED:3B:09:ED:69:F2:E4:7D:C1:D2:C1:61:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6qN0Rh2au07Ce1p8uR9wdLBYVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/PVHUZZ1XfoomSTwXmPZ2rNHhaBQ.roa
Signing time: Sat 01 Jan 2022 07:00:50 +0000
ROA not before: Sat 01 Jan 2022 07:00:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59601
IP address blocks: 94.124.204.0/23 maxlen: 24
2a0d:bd87::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154219929 (0x9313599)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3aa8dd118766aed3b09ed69f2e47dc1d2c16159
Validity
Not Before: Jan 1 07:00:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d51d4659d577e8a26493c1798f676acd1e16814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f9:e0:66:1d:40:31:9e:98:91:19:1d:ec:8b:
f0:8d:48:b9:99:96:ef:7a:fc:95:01:86:a0:0f:08:
24:4e:38:32:ba:29:8f:39:2f:7e:e7:91:02:75:8f:
a7:3a:f0:b3:15:74:3b:de:94:e8:2f:ee:d8:a9:13:
7a:e8:d6:c6:a6:5b:dd:b9:3c:ab:e1:37:3d:88:db:
e9:f2:e8:50:38:5f:69:d3:a9:eb:42:12:2f:7c:9c:
b0:9e:f7:e9:59:d2:be:d4:d4:d5:63:ae:18:db:f5:
00:a2:eb:04:b8:b8:1f:15:65:06:d1:1b:f1:7c:17:
e0:96:17:63:9c:53:cf:f0:be:1b:f2:a2:07:b7:0b:
71:99:d3:27:e3:40:c9:3f:c5:a1:44:9c:da:4f:b8:
47:1c:09:30:a0:ea:4c:17:53:0c:a7:1b:b2:39:47:
61:5c:b2:c7:4d:b3:40:5e:b9:d6:3d:e0:a6:fc:5c:
5a:a3:96:f1:06:88:3b:bd:6d:bd:e7:50:c4:c3:13:
99:cd:f9:1c:8d:c4:de:c7:4c:55:1d:10:a0:f9:80:
b4:f0:07:be:b8:5d:2d:a7:53:f0:75:c0:16:81:bf:
68:93:2b:1f:bb:6a:46:e8:e0:36:91:b0:ef:b9:ba:
37:d6:94:4e:d9:be:85:18:b2:77:b0:07:48:f1:d2:
16:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:51:D4:65:9D:57:7E:8A:26:49:3C:17:98:F6:76:AC:D1:E1:68:14
X509v3 Authority Key Identifier:
keyid:A3:AA:8D:D1:18:76:6A:ED:3B:09:ED:69:F2:E4:7D:C1:D2:C1:61:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6qN0Rh2au07Ce1p8uR9wdLBYVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/PVHUZZ1XfoomSTwXmPZ2rNHhaBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.204.0/23
IPv6:
2a0d:bd87::/32
Signature Algorithm: sha256WithRSAEncryption
21:09:75:26:ef:29:5c:85:97:5a:cc:16:c3:c6:51:78:56:bb:
5c:bb:8f:88:9d:f4:fd:e0:e8:65:80:66:30:3f:16:b4:e7:9a:
92:74:35:4d:bd:f3:79:35:9f:0b:23:be:3c:78:fe:c8:7f:87:
80:be:a6:e3:ec:34:e0:16:06:51:8a:6b:5d:be:23:c2:cb:4f:
f0:99:5e:3b:80:48:b1:57:83:1a:32:7f:7c:79:88:39:8e:06:
24:cf:a3:f9:d4:6c:bc:8a:82:20:cc:c1:eb:c4:f1:71:2d:60:
a5:37:68:b3:3e:32:a2:1e:7d:de:be:f2:a2:c4:43:33:b9:9a:
1c:95:f3:d0:1c:84:70:36:2b:6c:8c:12:a5:3b:e7:18:03:a8:
4a:f8:be:72:0c:d7:d2:9b:d4:3f:7d:5a:b9:8f:58:58:04:6f:
c0:76:af:1a:29:d5:33:dc:13:94:61:a5:3a:03:ea:f5:2f:0f:
d2:85:9b:8c:29:f1:dd:7d:0a:fe:29:e3:3d:c0:fb:f1:32:6c:
fb:7b:35:1e:1c:88:d4:f7:c5:a1:b0:e8:6a:a9:b7:e0:49:5f:
e8:7d:cc:db:ac:b5:02:f4:07:34:07:cd:c2:76:98:da:dc:30:
d6:87:92:83:b8:73:c9:b5:70:9b:5a:03:13:e2:a7:26:65:54:
b1:3a:1b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:30:41 2025 by rpki-client