Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/ax-ELVKJ29m3mdBYWIXXiZ1_Mus.roa
File: ax-ELVKJ29m3mdBYWIXXiZ1_Mus.roa (raw, json)
Hash identifier: 1Dbk/FT77AbssHHxli73VCCsmNY+M+c5VvVHiPB8h+c=
Subject key identifier: 6B:1F:84:2D:52:89:DB:D9:B7:99:D0:58:58:85:D7:89:9D:7F:32:EB
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01857039A956D0C3946696E2CFCA4CBB590F
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/ax-ELVKJ29m3mdBYWIXXiZ1_Mus.roa
Signing time: Mon 02 Jan 2023 02:05:05 +0000
ROA not before: Mon 02 Jan 2023 02:05:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211287
IP address blocks: 194.163.90.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:a9:56:d0:c3:94:66:96:e2:cf:ca:4c:bb:59:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jan 2 02:05:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b1f842d5289dbd9b799d0585885d7899d7f32eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a1:2d:e3:0b:dd:20:90:6a:39:b6:6b:56:db:
46:b5:ed:27:0e:46:d0:38:f0:dd:f1:c0:af:4b:f4:
66:b0:79:09:f5:cf:3b:2a:e8:c8:50:40:e6:7d:34:
41:7e:28:68:eb:59:3d:a4:be:4d:e2:16:e1:70:0b:
c4:02:7c:77:8a:31:5b:4c:5c:07:e2:44:5a:cf:31:
4a:dd:a2:07:7e:c2:8c:68:d4:a4:be:cc:7e:ef:8a:
31:6b:b5:b4:03:cd:d0:25:c9:d3:8c:f3:85:93:e1:
79:93:1e:4b:85:8d:9d:f3:cc:7f:21:de:84:64:c6:
10:ce:60:ed:fb:0b:f6:89:bc:80:6c:4e:8a:b7:bc:
32:c3:79:d8:fd:05:d8:b4:f8:ee:91:35:e6:d8:28:
ad:d7:5d:1f:83:7d:7a:d8:07:da:ae:40:fb:17:e0:
18:cc:5f:1a:d8:f7:21:81:e4:b1:04:8b:24:f6:8e:
a8:6a:db:b5:a1:2b:ca:94:08:70:dd:a1:02:13:d1:
4e:1a:b0:31:42:b1:30:a0:33:64:92:de:9b:9b:d4:
6f:6f:ce:5b:f8:6f:0d:6b:5a:40:55:f0:8b:53:68:
97:ec:7e:2c:72:55:8e:6b:6d:99:6f:b4:3b:3a:ee:
22:8d:47:11:54:ae:29:87:ac:3d:db:df:45:a8:87:
a3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:1F:84:2D:52:89:DB:D9:B7:99:D0:58:58:85:D7:89:9D:7F:32:EB
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/ax-ELVKJ29m3mdBYWIXXiZ1_Mus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.163.90.0/24
Signature Algorithm: sha256WithRSAEncryption
20:11:86:b4:8d:fb:f8:73:ca:44:24:0f:59:ed:68:b3:b9:14:
a6:8d:46:9a:a7:51:16:0b:f2:5b:13:24:b0:e3:2e:b4:2c:7d:
5e:10:e2:58:f3:4a:8e:d8:80:9e:23:53:2a:3e:7c:8d:7a:f6:
c6:1a:ea:1c:5b:9f:58:23:fe:d7:34:10:98:28:c0:0f:97:5b:
48:7a:46:57:9e:3b:57:ec:97:27:a1:e4:8e:9d:ea:b1:b2:00:
10:92:38:84:aa:7f:7e:7c:a3:df:7f:90:f3:e9:11:bd:90:29:
e2:c3:c4:4e:a8:05:36:f8:9f:df:09:be:8b:63:c2:f7:ee:47:
bd:30:4b:2f:92:92:b7:77:5a:64:69:45:4c:db:9a:4b:6c:93:
8e:4c:6b:f8:47:68:5b:95:a8:74:a0:9b:c3:fb:e2:5e:6f:b1:
b7:4b:61:ee:2a:da:d0:52:d8:c4:6a:68:42:58:bd:64:b9:dd:
cf:e4:6c:f1:50:f7:8c:9c:9c:02:fd:b9:ae:41:9d:44:3d:41:
5c:32:92:19:e0:ac:8e:14:6a:e7:04:1c:e7:99:69:25:57:60:
c0:c0:4b:db:2d:32:18:95:e3:86:2a:b3:8d:a7:8b:e6:15:0e:
70:b3:6a:c2:63:b8:ff:b7:57:ce:b3:aa:18:07:3f:54:f4:62:
63:d5:be:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:22 2025 by rpki-client