Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/cDN8x7X4RxIWNsqQgxSHfHVB0Q8.roa
File: cDN8x7X4RxIWNsqQgxSHfHVB0Q8.roa (raw, json)
Hash identifier: 4zy4BztScQuDdKXKP/oDoJTmavVZomm5Dar9OozC0xo=
Subject key identifier: 70:33:7C:C7:B5:F8:47:12:16:36:CA:90:83:14:87:7C:75:41:D1:0F
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 0182A66C5A8C813CB74F9F90C40EA74D714F
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/cDN8x7X4RxIWNsqQgxSHfHVB0Q8.roa
Signing time: Tue 16 Aug 2022 11:31:35 +0000
ROA not before: Tue 16 Aug 2022 11:31:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 194.64.89.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a6:6c:5a:8c:81:3c:b7:4f:9f:90:c4:0e:a7:4d:71:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Aug 16 11:31:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=70337cc7b5f847121636ca908314877c7541d10f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7d:11:35:32:a6:e7:16:6c:90:c8:c7:ad:48:
a4:e4:08:72:bf:7c:f8:b0:c0:d2:01:61:89:13:d2:
ed:e2:51:5a:79:1f:8a:29:7d:be:cf:81:6c:e6:02:
e4:d0:41:a2:0a:cd:e7:dc:89:09:67:71:df:8d:bc:
cf:84:2b:3c:5a:e4:62:c4:4d:48:0a:e0:b7:b8:9b:
2b:54:7f:ac:16:0d:8b:87:60:4a:69:22:ca:9a:a2:
35:a3:a1:ec:db:6a:39:d2:34:b5:9d:7d:66:2d:1e:
d0:96:c5:5f:47:84:34:54:32:78:b1:e5:17:e4:3b:
e7:76:b6:a3:dd:55:a5:23:6a:de:01:f2:d2:55:44:
47:e2:3c:31:73:68:49:a9:a6:30:c7:a9:de:17:59:
bd:3d:01:1b:a0:f1:fe:e9:10:99:45:a3:ed:ee:03:
6d:65:71:30:f6:df:68:e7:37:72:d2:b6:a3:ab:ae:
7e:c5:b1:fb:df:40:07:10:b1:de:e7:16:90:79:67:
a1:8e:1f:71:3c:ca:76:44:37:ae:93:c6:05:cd:fd:
d0:2f:af:c7:76:cb:66:4f:2c:1f:5b:b0:ea:51:44:
34:86:a0:26:d7:28:f5:50:fa:93:c0:7f:fd:f4:44:
ff:c7:a9:55:cc:db:d2:99:9f:ee:e5:78:23:64:ee:
24:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:33:7C:C7:B5:F8:47:12:16:36:CA:90:83:14:87:7C:75:41:D1:0F
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/cDN8x7X4RxIWNsqQgxSHfHVB0Q8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.64.89.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:4d:96:dd:15:3e:18:5a:e2:a1:71:04:08:47:b1:62:bf:70:
e6:dd:cb:82:49:18:b7:92:5e:26:98:63:cd:64:76:07:c5:73:
1d:a6:83:9f:af:4a:f4:b1:a4:bb:20:78:46:51:23:9b:3d:c8:
65:28:bc:86:03:23:4c:56:33:de:ef:85:fa:e7:2f:97:64:ff:
6e:e6:c7:25:08:c0:3f:18:a1:86:fe:46:68:f6:a6:08:ad:85:
8b:4c:bf:e3:c1:80:d0:2c:e3:6f:fb:94:49:c5:19:df:d7:25:
38:23:ea:95:3d:dc:6a:00:db:42:95:de:39:67:b1:59:21:e5:
ea:95:88:76:13:37:c4:6b:d8:fc:5a:ba:26:24:68:d9:4c:94:
d6:5d:f6:66:3a:b3:0a:09:78:ae:c9:03:be:f9:2b:e4:01:13:
86:29:1a:ae:18:54:83:14:64:e3:4e:19:de:f8:43:64:20:bd:
12:1a:f2:96:54:54:a7:cb:94:c5:cc:6b:03:91:fc:a2:05:e3:
b0:39:ba:af:3a:7a:53:aa:78:39:35:6a:78:d2:ef:ec:ee:9a:
69:4e:58:de:5e:e4:e7:bb:fe:72:fc:76:6d:f1:a5:7d:78:a1:
0b:69:7e:59:d0:a2:8b:8f:6b:b5:86:2c:62:eb:67:cc:bd:5c:
8c:cf:b2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:26 2025 by rpki-client