Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/k4L4s0sJ1ZbnM6Orhjw1y6svbWw.roa
File: k4L4s0sJ1ZbnM6Orhjw1y6svbWw.roa (raw, json)
Hash identifier: c8mxT6KB11nHQUtfhNabbQR51YofTGCYde2VvUGlWV0=
Subject key identifier: 93:82:F8:B3:4B:09:D5:96:E7:33:A3:AB:86:3C:35:CB:AB:2F:6D:6C
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0185708CD74DD30A518DFA02CD7C24BBCA82
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/k4L4s0sJ1ZbnM6Orhjw1y6svbWw.roa
Signing time: Mon 02 Jan 2023 03:35:56 +0000
ROA not before: Mon 02 Jan 2023 03:35:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16287
IP address blocks: 87.103.216.0/21 maxlen: 21
217.116.128.0/24 maxlen: 24
217.116.140.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:d7:4d:d3:0a:51:8d:fa:02:cd:7c:24:bb:ca:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 03:35:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9382f8b34b09d596e733a3ab863c35cbab2f6d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:04:99:0c:be:64:38:46:09:ad:54:f2:ef:73:
9f:13:a8:91:9a:a8:70:9e:a1:6c:56:38:d1:6e:f3:
07:d9:12:f5:7e:68:14:a3:4c:a9:f6:be:ec:03:e1:
1e:4f:81:e4:9c:2c:24:46:31:f3:24:07:db:46:ba:
4b:3f:2c:77:04:af:39:3f:bc:4f:2b:23:8a:72:97:
06:af:4c:8e:3c:32:f8:62:a8:22:c3:63:e6:82:62:
7f:61:1f:3f:2c:4a:28:05:a4:15:4f:b7:4a:54:84:
74:b5:94:16:6c:d7:f7:0d:c0:1f:1d:50:37:53:5b:
7d:9c:5a:6f:89:21:77:7d:84:67:63:cb:1a:34:67:
62:73:02:18:91:6e:71:ee:41:11:7b:dd:cd:5d:7b:
98:76:e4:19:6b:3f:2f:b9:2a:65:f9:89:76:66:82:
4e:fb:44:38:54:87:1e:ea:9a:75:6b:60:65:f4:df:
93:91:a1:84:b3:f5:97:96:86:0e:65:4b:e0:b6:73:
b1:51:21:17:b5:cc:44:be:7c:ef:12:80:e9:56:a8:
fc:0b:d5:50:cb:51:a4:9f:20:10:70:69:58:af:f6:
87:c8:cf:c2:0e:f6:08:0c:28:d5:f3:20:a8:b2:8f:
f2:62:06:c7:15:99:1f:67:61:94:e4:a7:c2:f6:10:
5c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:82:F8:B3:4B:09:D5:96:E7:33:A3:AB:86:3C:35:CB:AB:2F:6D:6C
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/k4L4s0sJ1ZbnM6Orhjw1y6svbWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.103.216.0/21
217.116.128.0/24
217.116.140.0/24
Signature Algorithm: sha256WithRSAEncryption
83:31:88:21:32:ce:dd:d7:9c:74:a3:0b:23:0d:df:53:5c:7a:
f9:53:2a:1e:2d:23:ba:4a:8e:d5:f5:74:e4:78:c4:45:98:ee:
a8:90:4c:3b:82:d3:09:2b:61:b8:99:c3:b2:b8:52:37:3b:29:
b4:f8:0b:0c:3f:6f:b5:19:8e:7f:06:f3:09:5a:66:24:51:ee:
56:32:bb:37:9b:6f:58:c1:c2:6c:05:4d:c8:37:bb:05:89:63:
c8:02:aa:b5:c7:e4:05:1c:fd:5b:9b:02:66:fe:6b:12:ff:ac:
c7:4f:90:63:89:83:56:01:4f:92:7e:58:0e:6c:58:26:5a:83:
7b:f1:69:61:2f:bf:08:b4:72:7d:af:e9:b7:da:8e:e4:b0:ba:
88:aa:73:05:f1:11:0d:10:0d:93:eb:2f:cf:68:15:4c:6e:14:
3d:13:18:67:07:03:d6:ab:e9:12:96:47:81:58:4f:6b:d7:df:
fb:d8:0a:3a:36:02:f2:96:10:f5:78:5b:fb:dc:7d:90:34:a7:
56:37:b6:22:52:b4:c3:f9:5d:c4:eb:10:e3:f3:72:a0:fc:34:
ea:95:3f:c2:47:c2:a6:67:b1:0c:1a:ae:77:f7:8c:11:63:1d:
d0:38:c6:b9:72:cd:39:2b:0c:75:95:4e:d1:b7:4a:37:46:93:
40:a3:d8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:05:14 2025 by rpki-client