Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/DzXldQGxPVXMR1-oMmYXexH-83A.roa
File: DzXldQGxPVXMR1-oMmYXexH-83A.roa (raw, json)
Hash identifier: cSxh/XKlbWNnzjXpRsqpX9MjzT2iMftUAtGAZBsqCBI=
Subject key identifier: 0F:35:E5:75:01:B1:3D:55:CC:47:5F:A8:32:66:17:7B:11:FE:F3:70
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0188B5AF9662AC2C56A60037D01E67052D9D
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/DzXldQGxPVXMR1-oMmYXexH-83A.roa
Signing time: Tue 13 Jun 2023 16:56:03 +0000
ROA not before: Tue 13 Jun 2023 16:56:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21082
IP address blocks: 188.212.121.0/24 maxlen: 24
94.176.215.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b5:af:96:62:ac:2c:56:a6:00:37:d0:1e:67:05:2d:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 13 16:56:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f35e57501b13d55cc475fa83266177b11fef370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:03:6b:be:ef:5a:e8:92:e6:e1:b1:b4:88:03:
e2:b9:b0:3c:8c:01:18:b5:e3:fa:c2:07:3c:49:ae:
31:3b:76:ce:ef:fc:e8:13:a0:1d:8a:b7:5c:7b:8f:
bd:96:2d:c4:d9:3d:e2:24:6c:86:86:09:51:75:d0:
5e:c8:2c:c9:c7:27:be:53:32:19:b3:2b:cb:7e:24:
53:72:ed:c1:6c:bf:2e:c1:1b:6d:28:d7:16:8f:28:
a2:10:ae:f3:20:53:d5:d8:4d:15:34:0f:f7:39:76:
47:eb:78:66:f9:14:0b:e7:50:a3:83:2c:fc:a3:54:
d2:98:fd:05:27:80:3a:a9:e0:10:a7:21:8c:db:45:
c6:cb:b8:d7:b5:17:5e:1d:91:d7:91:5a:82:d6:34:
d8:db:43:24:74:14:84:fd:fd:79:41:75:de:5e:f3:
4a:8b:ee:43:71:1a:a9:f2:8f:8b:e1:25:b1:b8:09:
b1:99:98:ec:09:87:5d:6c:25:95:cf:a1:e2:ce:1b:
b0:33:9e:b1:8a:c5:e4:19:88:b3:ce:cf:69:f5:80:
73:91:0b:8a:37:8e:a0:b8:b3:d0:5a:b6:ee:ad:68:
76:d8:5f:41:99:68:5c:ea:77:d9:56:04:ff:22:6f:
ac:d5:10:64:24:1c:50:c4:26:ef:f9:63:d7:f0:16:
b3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:35:E5:75:01:B1:3D:55:CC:47:5F:A8:32:66:17:7B:11:FE:F3:70
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/DzXldQGxPVXMR1-oMmYXexH-83A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.176.215.0/24
188.212.121.0/24
Signature Algorithm: sha256WithRSAEncryption
23:0e:7e:c1:81:fd:bc:e5:a7:f6:82:ba:e4:d0:78:cd:f9:43:
0a:82:b5:bd:6b:0e:5f:05:7e:a0:75:a9:8e:d7:50:ab:c6:2a:
23:c2:52:73:cb:e0:39:dd:f1:30:61:ea:40:be:ab:37:02:f7:
bd:a6:93:a8:91:ac:0a:1b:48:0b:3b:6f:7b:10:0d:73:b7:85:
76:81:c9:19:75:7a:cb:a5:ce:6c:82:42:c3:92:fe:cc:85:0e:
42:f5:fc:c8:af:59:33:1e:18:c7:39:42:60:7d:84:84:46:b3:
0c:bb:dd:f8:c4:ad:6f:7c:73:56:c4:c6:92:b0:e8:58:3a:6d:
99:1f:28:0e:91:63:92:70:d6:70:78:8e:58:ba:6c:48:26:78:
57:c8:f9:c8:4d:a1:ce:31:bf:89:9d:93:c2:32:ac:8e:1e:f7:
ca:89:46:d7:89:a7:8c:61:48:4f:c9:7f:22:6d:74:31:5e:27:
33:63:b5:18:d7:b5:38:a6:30:8e:36:1e:24:3d:ad:6b:c6:d0:
b7:76:f7:00:06:8d:93:af:ba:4b:dc:92:b2:8e:ca:4b:fe:d4:
5f:0a:1a:ae:d3:95:bc:2e:24:4b:54:aa:c4:94:7d:0f:c0:d7:
6c:ac:4d:f0:c2:82:61:1f:55:86:c4:95:5d:20:58:36:0b:a6:
53:29:f1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:38:49 2025 by rpki-client