Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-_zQDMclEU0aXCFciGeszGoB7tg.roa
File: 1-_zQDMclEU0aXCFciGeszGoB7tg.roa (raw, json)
Hash identifier: VBJmfOvRzU0mEvo10W1LdG8VgfFOyJha0LXNoyvf8jQ=
Subject key identifier: FB:FC:D0:0C:C7:25:11:4D:1A:5C:21:5C:88:67:AC:CC:6A:01:EE:D8
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018ADA730C59092F26A454CC0F07EC6AB624
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-_zQDMclEU0aXCFciGeszGoB7tg.roa
Signing time: Thu 28 Sep 2023 06:21:27 +0000
ROA not before: Thu 28 Sep 2023 06:21:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60539
IP address blocks: 87.121.162.0/24 maxlen: 24
45.129.86.0/24 maxlen: 24
45.84.89.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:da:73:0c:59:09:2f:26:a4:54:cc:0f:07:ec:6a:b6:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 28 06:21:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fbfcd00cc725114d1a5c215c8867accc6a01eed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:08:9f:65:8f:1d:08:37:3a:79:d6:c0:c7:56:
d7:50:df:0b:f6:f8:14:90:f8:1a:48:b1:dd:10:6f:
b0:6d:c9:74:db:c4:69:b1:cc:9e:39:78:40:7a:ff:
7a:b0:6f:05:0d:b8:3d:67:2d:97:b8:5d:03:35:d1:
b7:dc:2e:ed:04:2d:46:e8:b3:62:f2:2c:56:47:54:
5d:e7:52:7c:40:7a:a0:6a:89:c7:7e:45:20:4e:aa:
77:a0:c6:52:ce:c5:ac:cc:e6:33:1d:73:a0:00:4d:
ba:50:57:2a:1c:51:79:aa:67:19:1d:2d:2a:f4:c8:
9d:2c:cd:95:ee:f5:ed:9a:f9:c3:2b:14:34:e1:4f:
1d:21:a6:ad:e5:f0:01:33:b7:cf:f1:c9:05:0d:89:
ff:ac:13:a2:fa:93:6b:b8:1d:70:8b:ea:3e:be:88:
72:af:f3:75:99:20:85:0c:67:05:da:81:04:43:e7:
68:40:d5:44:c3:fd:3d:fa:4e:fa:3f:96:81:d2:1d:
cc:de:61:5e:60:40:64:ab:67:98:4a:e1:da:6d:df:
dc:61:79:45:ae:20:1e:35:f8:71:13:a4:46:f6:15:
44:79:52:a9:e8:9e:6a:f4:1f:7e:f7:55:6f:b3:11:
ac:77:b4:89:29:97:be:12:77:c8:61:0d:0f:9e:9e:
8b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:FC:D0:0C:C7:25:11:4D:1A:5C:21:5C:88:67:AC:CC:6A:01:EE:D8
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-_zQDMclEU0aXCFciGeszGoB7tg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.89.0/24
45.129.86.0/24
87.121.162.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:68:ce:3f:29:9b:a4:4c:e0:7c:d7:fd:81:f9:25:05:8a:98:
36:56:63:6c:d9:28:e9:a6:20:05:b0:0a:6a:9b:91:1c:df:8c:
38:fb:ca:b4:7c:3b:b7:23:ec:f1:32:dc:39:ee:c5:72:0e:b6:
7d:e2:67:25:9d:58:85:49:9b:d3:e8:a4:87:10:4e:55:4d:ec:
64:3e:9d:2a:4f:c0:be:2d:88:ff:86:45:39:2e:cf:fd:f4:b6:
4b:37:af:4f:f2:b8:bd:c1:88:13:e4:85:54:3b:0f:07:68:36:
e7:f4:ad:42:ab:77:10:c4:89:b4:82:dd:20:e2:82:f5:84:7d:
f1:5d:27:18:5d:0b:dd:a7:dd:3e:d6:16:e0:31:d2:f3:3f:29:
2a:1a:6b:a7:1d:18:49:49:1e:1b:71:3d:81:8b:8a:6e:c2:3c:
6f:4d:30:72:8a:2e:9b:6d:00:b1:17:c8:ce:47:83:97:c6:21:
b7:03:bf:ea:f5:7d:97:55:bd:d7:92:f0:df:2b:f2:7d:5b:a8:
ba:be:3f:16:b7:a0:bd:4d:39:4f:6e:be:02:56:ad:48:73:57:
bf:ff:1a:e6:b2:ca:6c:39:14:3f:9f:19:0c:dc:ee:5f:61:f4:
e5:4a:22:9c:90:16:57:9f:3e:62:8e:5c:29:61:c9:cf:c9:10:
19:99:90:f4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue May 13 16:37:46 2025 by rpki-client