Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/9PFhYegJDZ5f8k0LkpDz3jgnuCg.roa
File: 9PFhYegJDZ5f8k0LkpDz3jgnuCg.roa (raw, json)
Hash identifier: ik6E4FlIwcQQG0gK/OQdR9EYcTOsBLrdFzsh+1bgzLI=
Subject key identifier: F4:F1:61:61:E8:09:0D:9E:5F:F2:4D:0B:92:90:F3:DE:38:27:B8:28
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0185708CD5E31B1A1B761752C871386F564D
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/9PFhYegJDZ5f8k0LkpDz3jgnuCg.roa
Signing time: Mon 02 Jan 2023 03:35:56 +0000
ROA not before: Mon 02 Jan 2023 03:35:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13056
IP address blocks: 37.76.160.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:d5:e3:1b:1a:1b:76:17:52:c8:71:38:6f:56:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 03:35:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4f16161e8090d9e5ff24d0b9290f3de3827b828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a0:1e:b5:58:cd:b1:ba:b3:8f:b7:db:da:40:
c2:5e:ea:ea:ab:89:c4:6e:5a:4c:ac:20:a1:30:62:
cc:99:28:7c:3c:f5:2a:cb:ec:89:34:80:bd:34:80:
9e:86:86:5d:cf:04:9a:c2:be:99:76:60:36:06:37:
38:23:13:82:64:33:0d:fc:bb:dc:5a:af:62:e9:95:
e8:d2:ed:24:2a:d2:a6:5d:d8:86:1b:27:82:b7:b3:
e0:08:c3:24:dd:5a:ca:76:66:81:a3:5d:a7:27:6b:
5b:8e:b2:1a:7e:00:30:17:ab:97:dc:b9:46:40:e2:
6b:16:ab:ce:7c:e3:68:14:dc:7e:88:e5:fb:4b:8c:
16:1c:64:17:94:f8:4f:1f:53:13:6a:54:1b:a5:62:
cd:8f:32:bb:d8:60:d7:f2:67:94:35:cb:a8:7f:c6:
0c:d6:70:6a:a8:a3:ee:37:25:99:56:9f:da:0f:ab:
3c:9c:93:fd:b9:72:53:30:fa:0e:a6:17:7b:04:ee:
19:e8:64:4f:3a:d7:ca:ed:d5:62:ee:76:31:6b:36:
ba:7c:c6:6d:29:71:74:48:68:3b:87:23:1f:f5:46:
a2:ef:42:f9:cc:5b:ca:46:38:5e:2a:0b:0d:67:41:
8d:11:9c:aa:c9:51:5c:6f:26:ca:63:a1:43:2e:2e:
df:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F1:61:61:E8:09:0D:9E:5F:F2:4D:0B:92:90:F3:DE:38:27:B8:28
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/9PFhYegJDZ5f8k0LkpDz3jgnuCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.76.160.0/19
Signature Algorithm: sha256WithRSAEncryption
85:bb:77:ba:30:c1:12:22:c3:7a:39:59:cf:73:00:39:1f:f5:
ea:18:be:ca:58:cd:0a:4b:88:ea:f2:46:8d:d8:0b:9c:2d:14:
d0:18:e2:55:b5:ee:b7:15:1a:f6:9f:d0:b5:ac:ef:8a:de:d8:
1f:da:e1:64:09:ea:99:75:33:95:19:e7:87:7c:6a:04:37:38:
fd:cd:05:98:83:f3:74:8f:76:8f:eb:b8:42:3f:52:3b:87:c7:
f4:36:74:98:0b:0c:33:05:5a:96:96:8f:43:62:29:35:7f:c0:
58:81:c8:64:5b:6a:fb:f1:90:e7:7b:ce:ce:77:69:37:b7:28:
2a:07:5f:9d:f5:ee:c9:1e:70:43:48:5c:45:01:3b:9e:85:63:
60:18:dc:be:4f:ae:4f:e0:00:8f:27:32:32:3f:1c:8d:13:9e:
07:16:40:5a:ab:ed:ae:d0:98:6d:cf:09:26:42:01:27:84:64:
4f:72:60:cd:14:18:23:db:51:06:33:bc:24:ba:b7:53:5a:ae:
f0:e5:1c:8d:8b:46:83:47:5c:ed:93:75:fe:4a:89:26:a5:65:
36:58:59:90:81:e8:67:af:c2:4c:92:0c:8c:12:3a:03:0c:ec:
a2:a6:09:9b:b3:99:43:24:6c:b2:43:94:c4:09:d8:7c:ec:6b:
b5:4e:c1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:53:32 2025 by rpki-client