Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/3iP1H-D1u_SArQWLYTh8sQOksEg.roa
File: 3iP1H-D1u_SArQWLYTh8sQOksEg.roa (raw, json)
Hash identifier: hFu44NOAYWZTNY5NG4b/cFZSREpUrsIdho4GEKi70UA=
Subject key identifier: DE:23:F5:1F:E0:F5:BB:F4:80:AD:05:8B:61:38:7C:B1:03:A4:B0:48
Certificate issuer: /CN=ef0efd5de78f93bcaead15e14c006edbbd1b5955
Certificate serial: 01879E3CDC689FE0597506103EDB0DDCF2FF
Authority key identifier: EF:0E:FD:5D:E7:8F:93:BC:AE:AD:15:E1:4C:00:6E:DB:BD:1B:59:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7w79XeePk7yurRXhTABu270bWVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/3iP1H-D1u_SArQWLYTh8sQOksEg.roa
Signing time: Thu 20 Apr 2023 10:36:41 +0000
ROA not before: Thu 20 Apr 2023 10:36:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43529
IP address blocks: 79.121.64.0/21 maxlen: 21
79.121.88.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9e:3c:dc:68:9f:e0:59:75:06:10:3e:db:0d:dc:f2:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef0efd5de78f93bcaead15e14c006edbbd1b5955
Validity
Not Before: Apr 20 10:36:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=de23f51fe0f5bbf480ad058b61387cb103a4b048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:71:1f:aa:0f:87:af:5d:16:f2:c0:ae:4d:ed:
a7:76:b3:88:eb:08:cf:e3:e1:a6:8e:45:75:14:eb:
e2:d5:c9:ff:f9:6a:2d:76:37:64:ea:e4:55:30:eb:
87:72:3c:22:23:36:29:01:8c:6e:ef:5f:cb:e1:72:
d0:8c:c8:2f:7e:36:fd:68:91:15:1b:c7:60:8a:e0:
ec:d3:a3:12:64:46:a3:4f:01:2d:2a:4c:19:34:c3:
74:63:a2:46:84:ca:1b:1a:9a:2d:3a:e3:df:10:1e:
8a:d0:88:f5:0a:61:e1:39:59:87:9a:74:8e:4e:19:
7d:ec:35:8b:e3:dd:02:50:bc:39:d5:04:49:21:5e:
76:e7:34:d0:40:b5:5c:4e:8b:80:39:cd:6f:08:66:
a0:c9:c6:89:4d:15:27:f7:fc:bb:40:e0:18:86:c1:
02:2a:e5:5b:53:99:7f:0a:55:cf:13:dc:09:bc:68:
e4:33:af:9b:0e:5e:2f:42:c2:5d:7a:7c:66:38:d1:
26:b0:a7:fe:c8:a4:7c:b5:02:61:88:9b:66:53:3a:
eb:33:ef:4b:cd:d7:b1:cc:43:68:55:a3:d0:dd:5d:
d7:21:c7:52:01:48:88:1e:1d:cf:7c:41:40:7c:53:
1f:2d:cc:f9:35:41:14:97:4f:0c:6b:fb:05:7f:d1:
ee:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:23:F5:1F:E0:F5:BB:F4:80:AD:05:8B:61:38:7C:B1:03:A4:B0:48
X509v3 Authority Key Identifier:
keyid:EF:0E:FD:5D:E7:8F:93:BC:AE:AD:15:E1:4C:00:6E:DB:BD:1B:59:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7w79XeePk7yurRXhTABu270bWVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/3iP1H-D1u_SArQWLYTh8sQOksEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/7w79XeePk7yurRXhTABu270bWVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.121.64.0/21
79.121.88.0/21
Signature Algorithm: sha256WithRSAEncryption
3d:20:a0:0c:de:57:bf:e0:2b:73:46:ab:47:e1:b6:33:c0:f3:
af:7a:48:31:8f:41:ec:c5:7d:fa:19:13:d0:12:f5:f3:ac:8f:
f9:f1:0d:8b:fc:b7:f0:e6:b9:b3:71:aa:aa:4d:8a:ab:c4:67:
1a:1e:25:b5:a1:20:e0:cf:12:bf:62:34:43:19:d4:a5:4a:9f:
f9:f2:92:81:62:55:46:6a:dc:15:59:d2:d5:a3:e8:7c:ff:fc:
cf:67:5d:38:34:5a:31:6a:4b:93:ab:77:8e:0d:61:d1:d4:23:
e9:ed:a1:14:e2:0b:6b:e9:dd:1f:3c:09:2f:fb:67:ba:20:67:
dd:b5:c1:7d:74:58:38:74:21:59:4e:c2:99:ed:7e:fb:4b:59:
37:37:b0:c5:d5:84:a3:6e:43:de:bc:b2:96:9e:af:4b:48:c2:
f4:16:2e:38:84:84:d0:f6:6b:4d:92:79:8a:b8:e0:f8:8f:30:
90:06:ce:c1:c1:88:31:d3:3f:f6:b5:01:a5:61:0b:e6:5e:d2:
a1:bf:63:f9:6f:43:32:26:5f:c9:74:22:b0:ac:ad:6f:80:e6:
e5:2e:71:e1:86:58:a2:0b:67:60:3d:71:95:0c:10:8f:e7:34:
df:65:ef:34:1c:c1:a6:fb:50:d6:bf:10:d2:fd:64:57:be:93:
98:a8:94:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:06:01 2025 by rpki-client