Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/0DvuCWV3Yw9Lpl8rRBz_bT-GlHk.roa
File: 0DvuCWV3Yw9Lpl8rRBz_bT-GlHk.roa (raw, json)
Hash identifier: wiH4+ypd+1bmVUVqSNJ8ibAclIdMBDL6xT6ElaUs6+w=
Subject key identifier: D0:3B:EE:09:65:77:63:0F:4B:A6:5F:2B:44:1C:FF:6D:3F:86:94:79
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 429F6983
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/0DvuCWV3Yw9Lpl8rRBz_bT-GlHk.roa
Signing time: Sat 01 Jan 2022 06:05:00 +0000
ROA not before: Sat 01 Jan 2022 06:05:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25515
IP address blocks: 217.107.96.0/21 maxlen: 21
217.107.104.0/23 maxlen: 23
185.141.236.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1117743491 (0x429f6983)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 1 06:05:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d03bee096577630f4ba65f2b441cff6d3f869479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e3:c3:c9:df:ac:d5:64:7b:f4:64:7b:59:bc:
77:06:08:e7:0a:72:fd:71:8c:9d:35:ce:b8:b5:cf:
72:ba:d8:2f:58:e9:5b:77:9a:14:07:58:ef:59:07:
82:5d:a7:82:bc:da:0b:01:0b:97:1d:1b:2f:2a:48:
c2:5e:e2:3d:cc:cb:d3:7f:61:ea:a8:2c:63:c2:21:
82:c9:97:28:07:c5:b7:f3:48:a7:fb:33:f3:66:45:
18:5d:80:7c:bf:cb:12:7a:72:bb:09:2a:e3:cc:eb:
55:af:47:7a:1c:7f:31:11:13:cc:dc:24:56:6e:f4:
9e:0b:62:c9:61:36:f6:ff:d0:2b:65:89:89:9a:84:
38:68:8c:37:97:58:11:a3:98:98:2d:77:62:94:73:
4a:6d:0f:6e:7d:8c:9b:0d:fc:ca:2f:e5:94:fa:e1:
61:0f:51:f3:ac:66:19:e1:52:5d:ac:0b:3a:2b:63:
3d:d1:12:99:7e:8f:75:96:67:09:1e:55:7d:41:6a:
92:aa:82:ba:61:2c:29:fe:6b:1e:96:77:9a:9d:1e:
15:c2:96:c7:95:b5:96:a8:64:a5:e6:4f:6b:25:7d:
66:0c:60:75:38:c3:d3:9e:5c:3d:94:c5:5a:f5:e8:
8d:38:05:5e:dc:82:37:0a:c6:13:9e:3f:82:6e:93:
48:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:3B:EE:09:65:77:63:0F:4B:A6:5F:2B:44:1C:FF:6D:3F:86:94:79
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/0DvuCWV3Yw9Lpl8rRBz_bT-GlHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.236.0/23
217.107.96.0-217.107.105.255
Signature Algorithm: sha256WithRSAEncryption
45:f8:ac:de:2f:ff:ab:e9:0d:30:22:54:fd:6d:7e:af:14:4e:
a7:8d:bd:0a:c3:5c:9c:b9:01:5f:37:f3:72:f8:7b:40:69:a4:
dc:52:d6:ec:58:e7:6b:ab:83:dc:95:59:cf:4c:3f:3c:30:00:
df:d9:3a:65:fb:d3:e9:16:b2:96:d0:c6:b8:aa:c6:4e:e3:e1:
72:13:4f:27:4b:0d:99:16:d1:92:6b:c2:f2:e1:cb:8c:7b:61:
d1:ab:79:f0:e2:99:53:e1:6e:9d:de:67:2c:cf:69:d3:e7:c6:
e9:8e:63:71:58:18:c5:f4:4d:f2:d3:46:89:29:c0:ef:b6:3f:
32:18:76:0d:64:dd:80:00:85:b6:f9:f2:a7:b1:d3:c0:9c:bf:
41:6d:10:ef:6d:c0:d0:c9:1b:19:de:f7:64:ae:45:db:b1:38:
75:c9:01:b6:42:1b:49:82:90:80:91:79:9c:cd:6f:40:a7:d2:
62:06:fa:37:cd:0f:19:c1:aa:c2:c4:f0:87:ed:f7:c4:bd:3d:
25:ee:d9:fa:43:ad:68:b7:13:a2:6d:70:7f:25:26:67:c4:ac:
c2:a1:fb:bf:f2:89:72:80:f4:fc:bb:04:0d:1b:03:fe:a0:d6:
1e:06:eb:f9:dd:21:c4:ba:38:48:e2:5e:2d:dd:52:62:86:41:
94:47:ff:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:30:00 2025 by rpki-client