Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/3u96TA3FXFHoIMXko_-HSPy8Azw.roa
File: 3u96TA3FXFHoIMXko_-HSPy8Azw.roa (raw, json)
Hash identifier: gploFhS0tBy2xMym1z/KSxu2RVuk+GowLn94IDYwgeE=
Subject key identifier: DE:EF:7A:4C:0D:C5:5C:51:E8:20:C5:E4:A3:FF:87:48:FC:BC:03:3C
Certificate issuer: /CN=eea02b197dbaf7deb74e0a27d9d4ecd3fae1e8ed
Certificate serial: 018901B7E9B6504E54B88D27CA75AEC1F3A6
Authority key identifier: EE:A0:2B:19:7D:BA:F7:DE:B7:4E:0A:27:D9:D4:EC:D3:FA:E1:E8:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qArGX269963Tgon2dTs0_rh6O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/3u96TA3FXFHoIMXko_-HSPy8Azw.roa
Signing time: Wed 28 Jun 2023 11:16:17 +0000
ROA not before: Wed 28 Jun 2023 11:16:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42846
IP address blocks: 104.247.162.0/24 maxlen: 24
104.247.161.0/24 maxlen: 24
104.247.160.0/24 maxlen: 24
104.247.165.0/24 maxlen: 24
104.247.164.0/24 maxlen: 24
104.247.163.0/24 maxlen: 24
104.247.166.0/24 maxlen: 24
104.247.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:01:b7:e9:b6:50:4e:54:b8:8d:27:ca:75:ae:c1:f3:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eea02b197dbaf7deb74e0a27d9d4ecd3fae1e8ed
Validity
Not Before: Jun 28 11:16:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=deef7a4c0dc55c51e820c5e4a3ff8748fcbc033c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8a:2a:ce:27:ca:73:3d:8e:96:0b:8e:f3:db:
d8:a8:37:55:05:30:18:29:02:f0:49:80:9f:5f:90:
29:8a:3e:f4:f0:bc:35:7f:e9:0b:11:3e:b1:71:de:
ce:95:96:89:cd:68:07:56:f1:4b:85:1f:d3:1c:0f:
a8:06:5b:53:c2:7b:d5:44:28:a9:af:e3:a1:86:0f:
fe:6d:d1:8d:18:8c:62:04:00:73:9a:cf:e0:5d:ad:
7e:22:79:08:ab:43:28:77:fd:8e:45:ca:10:d4:1f:
2c:2b:0a:c4:dd:df:e5:93:8f:53:5a:f8:b4:f7:85:
64:e4:08:0b:1f:c1:82:60:12:b5:6e:7a:00:52:5f:
bd:e4:31:9a:ca:97:66:79:24:ee:6b:ab:30:42:d3:
ec:25:29:9e:8e:39:1e:a6:80:ea:2b:48:eb:af:40:
e6:71:0c:30:ae:db:ea:ad:37:e3:24:fb:9e:38:5e:
a6:79:52:53:9c:7c:d4:88:31:a5:51:b0:19:f5:1f:
79:d2:d3:93:62:6f:ff:26:90:f3:13:01:7d:6c:f4:
ff:e5:b9:04:39:0b:07:b9:14:a5:cf:c4:fe:5a:7f:
11:e7:8f:58:a1:82:cd:b2:29:f7:63:88:d7:1d:d1:
02:0b:ba:3f:7d:22:0a:96:21:21:56:80:30:80:d9:
b3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:EF:7A:4C:0D:C5:5C:51:E8:20:C5:E4:A3:FF:87:48:FC:BC:03:3C
X509v3 Authority Key Identifier:
keyid:EE:A0:2B:19:7D:BA:F7:DE:B7:4E:0A:27:D9:D4:EC:D3:FA:E1:E8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qArGX269963Tgon2dTs0_rh6O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/3u96TA3FXFHoIMXko_-HSPy8Azw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/7qArGX269963Tgon2dTs0_rh6O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.247.160.0/21
Signature Algorithm: sha256WithRSAEncryption
11:06:c3:cb:07:53:fc:02:99:64:69:cb:2a:90:b3:8e:9b:9d:
ad:7b:79:b3:91:ea:5d:2d:68:cb:ed:14:96:27:2c:2e:62:01:
fc:32:d4:1f:c8:54:6b:cb:b6:2e:7f:e4:9a:a8:f4:d6:2b:e0:
dd:fc:7b:d1:0d:ed:ae:34:b7:05:cf:e1:91:0e:91:a8:64:2e:
b3:d9:1f:3e:2a:3c:5c:1d:b7:55:75:b6:bb:4a:80:a3:16:fa:
11:d3:23:0e:a8:4f:d3:4a:ac:c9:fb:93:81:31:de:6c:db:0f:
1c:42:0e:5f:8c:08:fc:14:b7:d9:3c:0d:0a:a8:a3:c7:b8:e5:
80:f3:fa:bc:15:10:9e:8e:53:05:ab:31:f1:a7:a3:8a:43:98:
ee:1f:cc:3a:12:55:6b:83:4b:d9:12:d5:1f:9b:42:9f:18:cd:
78:ae:93:4c:79:c7:14:57:40:92:51:ab:8b:ce:76:29:83:d6:
d0:8d:b0:40:16:38:b7:b5:a1:b8:92:d7:4e:ca:67:7e:a7:22:
ee:8d:3d:d3:af:2f:b7:3c:ab:ab:64:98:e2:7e:fe:20:df:7d:
59:85:d9:fa:65:94:ac:72:f7:6f:62:c2:e6:22:0e:8c:19:84:
07:37:1b:fc:e7:8c:fc:ac:1d:c6:88:75:89:d8:bc:13:73:6f:
5c:2f:bb:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:19:34 2025 by rpki-client