Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/rmpPdhGzswOdwIca6_wbO2ZUz2g.roa
File: rmpPdhGzswOdwIca6_wbO2ZUz2g.roa (raw, json)
Hash identifier: LgDeL32YBYq4s3VCjE+4wv5A1JP7MVVhnuLfkHec8mI=
Subject key identifier: AE:6A:4F:76:11:B3:B3:03:9D:C0:87:1A:EB:FC:1B:3B:66:54:CF:68
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01895830FB2007C45F1B1307D49CE3E45A75
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/rmpPdhGzswOdwIca6_wbO2ZUz2g.roa
Signing time: Sat 15 Jul 2023 06:15:52 +0000
ROA not before: Sat 15 Jul 2023 06:15:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 194.233.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:58:30:fb:20:07:c4:5f:1b:13:07:d4:9c:e3:e4:5a:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jul 15 06:15:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ae6a4f7611b3b3039dc0871aebfc1b3b6654cf68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:25:14:4c:44:62:aa:2d:47:e6:52:6b:e8:49:
84:97:c5:71:86:3a:f9:0e:6d:d2:6b:fc:d1:86:11:
4a:08:a4:47:05:80:53:b2:42:58:0b:fd:dc:ea:a2:
00:51:f2:1d:46:f2:97:bb:6f:8a:43:b5:69:c0:bc:
5e:c2:36:9d:98:f2:8f:fd:a8:e1:3d:b8:d4:ad:32:
51:60:fb:e3:27:02:0c:07:81:f2:24:c0:83:6d:7c:
52:12:85:96:5a:cc:e1:98:28:09:4d:57:fe:28:ec:
39:2a:69:ff:2d:ac:1e:6b:12:97:f6:4e:7f:3a:ec:
5b:92:35:11:b5:a9:df:9f:79:f6:55:89:bf:f5:81:
c0:c5:f3:18:bc:14:7d:6f:e1:30:e6:ff:07:b1:02:
c6:05:7b:3d:9d:01:71:63:a1:89:8a:2e:6f:2d:7e:
ce:1b:48:3d:55:10:74:da:20:4d:de:04:90:73:71:
3d:a3:6a:f1:be:bc:94:77:0b:68:00:23:f8:ea:4a:
b3:f5:45:9a:88:4e:6d:fc:f5:a2:74:e7:6b:d5:d6:
dc:dc:de:c6:bd:29:d1:6c:30:4c:cf:98:30:14:f3:
dc:30:78:a0:a8:b1:44:41:37:40:f1:7d:af:48:f9:
a5:5a:f4:57:ff:ac:5d:71:d3:99:3c:dd:8a:f9:0f:
9b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:6A:4F:76:11:B3:B3:03:9D:C0:87:1A:EB:FC:1B:3B:66:54:CF:68
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/rmpPdhGzswOdwIca6_wbO2ZUz2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.233.150.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:9b:b0:1c:c1:08:85:74:02:f9:ae:db:3b:ba:5f:f2:70:a3:
c9:9f:e6:dc:75:d0:7b:4a:36:de:3b:80:fe:ff:cb:0c:39:a5:
8e:b9:0f:a6:8f:5a:05:39:cc:81:61:ed:08:1b:38:98:e6:d6:
e5:fe:25:51:65:a7:a2:0f:3c:3f:c8:02:bc:d4:d7:3e:f3:d6:
4d:de:7d:f8:a5:43:aa:30:98:74:67:03:99:f9:d0:f5:09:d3:
ae:79:0a:d9:b0:56:c7:95:b1:70:32:83:e3:86:1f:15:b2:f5:
80:48:bf:94:17:9f:0c:a6:0e:03:57:75:54:0c:17:78:3b:c5:
c4:ce:bb:94:47:96:68:02:62:05:f6:e4:ab:2d:d5:32:42:64:
61:89:50:cc:d2:d1:78:31:f7:8e:e0:d4:1f:30:f5:59:24:89:
71:1a:3a:bf:5c:0f:d0:5f:98:ae:3b:de:da:77:10:e6:ad:8b:
e7:99:82:5e:2c:b4:67:b3:97:d3:1f:93:b4:34:70:37:c8:d8:
cf:da:52:07:f3:1e:7c:52:13:a3:a3:41:28:be:44:e5:1f:b4:
b6:16:8d:78:61:a5:c1:23:34:58:b4:93:55:b3:34:15:be:e0:
da:24:ce:df:55:3b:30:3d:10:77:21:d8:ab:da:95:b3:c8:c7:
f0:26:a6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:29 2025 by rpki-client