Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/O2JnALhi91QWnjdYtojZKg0qJwc.roa
File: O2JnALhi91QWnjdYtojZKg0qJwc.roa (raw, json)
Hash identifier: GYNMaikVulLpwbJgDrVXyq6RasDq0hmUYJqNJs2cox8=
Subject key identifier: 3B:62:67:00:B8:62:F7:54:16:9E:37:58:B6:88:D9:2A:0D:2A:27:07
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01857039A04B502FB8E2AF3C5D1BF912E209
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/O2JnALhi91QWnjdYtojZKg0qJwc.roa
Signing time: Mon 02 Jan 2023 02:05:02 +0000
ROA not before: Mon 02 Jan 2023 02:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 194.195.101.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:a0:4b:50:2f:b8:e2:af:3c:5d:1b:f9:12:e2:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jan 2 02:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b626700b862f754169e3758b688d92a0d2a2707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:83:e4:11:3e:03:ee:ee:6f:0e:62:80:39:95:
7f:a0:e7:a6:7d:45:21:d3:71:36:83:60:3f:43:ce:
00:a7:6f:f2:65:5d:45:61:c6:77:bc:88:81:4e:f0:
75:09:ec:3a:cb:bc:56:5c:49:fc:ac:d0:f7:41:67:
f7:07:bd:36:d5:74:b4:a9:f1:9b:38:0c:2a:a6:dd:
91:b6:dd:d6:04:fc:80:f7:48:e8:3f:d8:33:52:07:
fe:9c:ac:cf:32:49:92:26:11:65:20:4f:21:89:ec:
f1:62:c6:bd:80:09:37:b2:a5:f6:1b:97:e6:a4:1f:
49:47:13:5b:59:0a:0d:8d:91:b8:89:72:f9:7c:90:
89:7c:e8:a4:c6:00:8c:1a:ca:5d:cd:7b:af:90:fb:
e5:22:6c:cf:f9:b8:1d:62:48:34:56:ed:9a:29:3a:
85:1f:e4:1b:ec:6f:3e:86:13:ae:2d:2d:d2:a6:35:
ad:ad:fa:6e:96:bc:d7:cd:d3:12:30:45:07:d1:73:
9a:a7:db:1a:60:d1:a3:fa:c8:c1:8b:9d:c8:47:fb:
a8:67:c1:1b:3c:43:85:0e:a2:9b:80:fb:cc:90:64:
19:52:d8:3e:04:91:45:79:87:52:68:c1:fa:bc:d1:
c1:fb:a2:db:5e:f7:4b:7a:e9:2f:5c:21:30:28:91:
54:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:62:67:00:B8:62:F7:54:16:9E:37:58:B6:88:D9:2A:0D:2A:27:07
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/O2JnALhi91QWnjdYtojZKg0qJwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.195.101.0/24
Signature Algorithm: sha256WithRSAEncryption
47:15:e7:06:aa:9f:e3:52:e8:9d:b8:29:a4:5a:83:01:c3:4c:
f3:69:44:17:62:01:7f:d9:ea:25:44:63:ab:25:b2:c9:57:f1:
ef:3b:1e:bc:0c:02:66:c1:af:c6:e4:ca:9a:41:15:ad:bf:d5:
5a:4e:fe:09:12:44:99:f0:f1:ec:21:41:ef:62:07:4d:16:b9:
48:2f:88:19:c5:2d:01:75:44:03:b6:14:17:f5:10:3c:c4:73:
87:62:20:97:a6:86:c2:06:f9:88:58:ea:c3:2a:19:fd:24:dd:
e3:1a:a6:7f:c2:97:b6:93:6f:ea:e4:2a:73:af:94:32:eb:82:
55:fd:18:ee:b7:4e:8a:8d:5f:c2:86:ca:c7:ab:bd:70:47:3d:
b2:00:a9:21:3b:ce:af:14:64:33:e2:1f:4d:36:59:07:2d:0f:
37:50:a7:29:f6:ca:8a:5b:8e:60:3e:d4:f1:87:e0:b3:34:a9:
78:30:20:fd:76:cc:a9:57:86:32:34:54:f3:60:31:f6:88:c0:
de:8d:c1:28:cd:3f:8b:29:3d:bd:92:60:28:07:3d:11:ad:a8:
ef:1d:43:bc:12:87:00:67:26:d2:bc:29:90:01:01:3a:ea:72:
d6:f4:d7:2d:62:40:48:e6:9f:ce:63:43:08:92:4f:b2:09:4d:
29:f5:41:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:51 2025 by rpki-client