Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/Ck0VSJvJSZypJFXmgpL5anzSHHY.roa
File: Ck0VSJvJSZypJFXmgpL5anzSHHY.roa (raw, json)
Hash identifier: uE4vxLayZ9zVB9T039gLweNx5rbNrYKKxs/cqSE8O5s=
Subject key identifier: 0A:4D:15:48:9B:C9:49:9C:A9:24:55:E6:82:92:F9:6A:7C:D2:1C:76
Certificate issuer: /CN=8110149fd12130b3cdcf35862b0dcdb98a9471c9
Certificate serial: 01E41EC2
Authority key identifier: 81:10:14:9F:D1:21:30:B3:CD:CF:35:86:2B:0D:CD:B9:8A:94:71:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gRAUn9EhMLPNzzWGKw3NuYqUcck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/Ck0VSJvJSZypJFXmgpL5anzSHHY.roa
Signing time: Wed 09 Feb 2022 11:28:55 +0000
ROA not before: Wed 09 Feb 2022 11:28:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8560
IP address blocks: 217.73.68.0/24 maxlen: 24
217.73.70.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31727298 (0x1e41ec2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8110149fd12130b3cdcf35862b0dcdb98a9471c9
Validity
Not Before: Feb 9 11:28:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a4d15489bc9499ca92455e68292f96a7cd21c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c2:84:23:51:90:81:88:2a:09:e1:f0:8b:96:
f1:6a:21:6a:4d:ad:23:11:60:79:d0:eb:bd:77:45:
45:6d:16:bf:99:97:33:d0:e2:6b:99:76:52:97:45:
c9:c8:ce:15:ab:53:cd:58:fa:45:c1:91:e2:d7:da:
39:7c:dd:12:a5:3b:3f:7e:51:60:da:f4:49:7f:0e:
ef:de:93:16:f2:a6:37:97:79:85:ee:dc:9b:fe:df:
a1:03:e1:e6:eb:b4:58:58:75:3d:9f:9d:ac:52:b3:
41:b1:f0:bb:bd:67:50:10:16:03:41:61:01:c5:e2:
00:3e:fd:2e:77:ca:4f:b5:b5:32:67:d1:d4:0a:3a:
a2:0e:4d:25:a9:43:72:05:61:b8:3d:7d:aa:00:67:
8c:05:52:50:92:c2:b0:fc:66:e2:d6:56:93:c9:8b:
93:31:b6:91:0a:64:3f:83:29:07:c2:03:12:b8:2a:
a2:a6:52:eb:ea:39:5a:d8:f7:44:78:7a:b0:18:e1:
3e:24:06:bc:9e:72:82:fa:23:0d:5a:9f:6c:06:39:
97:7b:75:fd:25:5a:f2:7a:91:aa:08:c5:b2:35:08:
30:7d:a9:90:81:e2:c0:6f:5a:43:8f:ab:8a:d7:e5:
68:d3:8e:97:ae:03:2c:99:48:e9:55:3f:95:97:f4:
f3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:4D:15:48:9B:C9:49:9C:A9:24:55:E6:82:92:F9:6A:7C:D2:1C:76
X509v3 Authority Key Identifier:
keyid:81:10:14:9F:D1:21:30:B3:CD:CF:35:86:2B:0D:CD:B9:8A:94:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gRAUn9EhMLPNzzWGKw3NuYqUcck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/Ck0VSJvJSZypJFXmgpL5anzSHHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.73.68.0/24
217.73.70.0/24
Signature Algorithm: sha256WithRSAEncryption
17:a7:59:f2:07:81:7c:88:42:0d:e5:7c:4c:22:d1:59:89:c2:
0a:1f:d5:ed:64:c7:f1:87:d6:5b:40:d4:a1:20:28:e8:ca:f9:
e9:02:01:ea:02:4e:93:e4:01:27:1a:35:fb:36:0b:8d:c1:8b:
df:b4:9c:3e:86:8c:74:dd:e0:2d:92:66:38:3c:e6:90:21:3a:
49:53:09:41:91:50:8f:23:f1:6c:aa:cc:cf:c7:13:5e:d8:87:
05:df:d2:2c:c5:e7:47:09:71:7b:42:70:6d:12:49:f7:37:f6:
4c:a0:bd:e4:d4:f5:c8:73:1f:2d:be:2b:c6:47:bd:92:92:46:
11:26:44:ca:6f:f0:f3:84:91:93:dc:a1:ac:9b:37:8a:62:54:
93:9c:ad:ad:c6:76:3b:db:9b:9d:20:3c:c5:c7:4a:77:64:ab:
34:66:fb:7e:b7:3a:81:3e:e1:4c:6d:04:91:1d:38:95:f3:cd:
b2:35:81:83:49:33:92:4c:2d:7c:59:8f:58:59:69:d7:c5:7d:
4a:53:a7:b3:14:b8:d5:31:89:2d:c1:3e:86:14:a2:10:bd:63:
3d:46:a3:f4:3e:d2:7c:2e:b6:42:ca:7a:34:24:2e:aa:6b:e9:
0d:dd:23:f1:0a:58:44:66:0e:be:d6:0b:ec:77:1e:1f:01:5a:
4e:fa:6e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:10:08 2025 by rpki-client