Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/dW7y6bSpwFKuhyFe63_5LQ1kOVs.roa
File: dW7y6bSpwFKuhyFe63_5LQ1kOVs.roa (raw, json)
Hash identifier: ksZ4ZfjAkoXfUYdn2AZtn+KzLfrCj0ERJ5A696QeL+8=
Subject key identifier: 75:6E:F2:E9:B4:A9:C0:52:AE:87:21:5E:EB:7F:F9:2D:0D:64:39:5B
Certificate issuer: /CN=d7301f772753d80a7b62c2d213d347a3b9ebe885
Certificate serial: 0187A2BF57D27C732DFB2F33AC469E2BBE8A
Authority key identifier: D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/dW7y6bSpwFKuhyFe63_5LQ1kOVs.roa
Signing time: Fri 21 Apr 2023 07:37:41 +0000
ROA not before: Fri 21 Apr 2023 07:37:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212669
IP address blocks: 194.180.26.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a2:bf:57:d2:7c:73:2d:fb:2f:33:ac:46:9e:2b:be:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7301f772753d80a7b62c2d213d347a3b9ebe885
Validity
Not Before: Apr 21 07:37:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=756ef2e9b4a9c052ae87215eeb7ff92d0d64395b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7c:40:5b:f7:7a:01:a2:d3:90:87:45:af:51:
d5:8f:56:64:fa:05:a8:e8:5a:95:b8:6d:a9:41:ca:
9d:bc:cf:38:dd:01:37:59:d9:c8:02:52:ad:a2:48:
5c:3a:89:e5:06:de:25:01:03:2f:91:be:c0:c2:d5:
58:1a:f3:4e:e3:e3:6d:26:86:e0:96:72:be:44:5a:
03:2f:95:33:a4:f0:59:4f:ed:66:25:e3:f1:95:7a:
4b:d9:15:5f:9f:28:8e:62:6e:b7:fe:2d:a0:13:44:
d2:a4:4f:e1:11:6b:ff:f7:e7:bb:16:11:f0:fd:35:
c2:87:7a:4f:c9:2d:b8:0c:44:35:d4:c0:08:7b:2e:
22:10:ea:19:5e:17:60:8a:20:94:f3:ee:5c:6c:49:
26:76:64:77:6f:58:3d:82:76:bb:4b:70:9a:d9:9d:
db:e1:00:e7:da:02:4d:a6:e1:93:4b:d3:e0:13:44:
b2:68:3f:a9:be:93:53:73:73:e1:75:6c:c4:b3:d7:
35:3f:b1:5c:69:03:b6:38:37:60:ca:3b:d7:ec:85:
44:93:68:3d:16:c0:f2:cc:8b:80:a2:b1:5e:fc:5a:
c0:35:d2:61:2e:19:a7:9a:77:f1:38:e3:7e:f5:9f:
9e:0a:e6:70:18:03:9e:a6:6b:9b:10:90:71:45:b9:
02:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:6E:F2:E9:B4:A9:C0:52:AE:87:21:5E:EB:7F:F9:2D:0D:64:39:5B
X509v3 Authority Key Identifier:
keyid:D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/dW7y6bSpwFKuhyFe63_5LQ1kOVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.26.0/23
Signature Algorithm: sha256WithRSAEncryption
85:b2:00:0d:8a:32:b1:91:19:ee:d2:d3:0f:eb:c2:a3:e3:a2:
ed:31:dc:ed:87:ea:34:6e:cc:11:b6:3b:80:60:35:63:2f:d3:
77:0c:8e:ca:af:92:56:cf:bf:dc:a4:91:c0:90:c9:65:d4:e9:
17:f2:d8:80:34:39:f3:9e:0f:5b:0d:f2:ac:84:02:d0:aa:88:
1c:c5:8f:b1:8a:f7:ea:4b:93:c8:0e:ab:fd:d5:c7:50:65:78:
2f:0a:fa:28:f3:a2:b7:9e:9b:a5:22:5e:61:46:53:84:77:52:
1b:ce:51:29:2e:4b:f5:a4:06:03:03:c8:db:86:eb:64:79:37:
e7:e1:2b:1e:d8:42:17:5a:50:97:86:aa:2e:89:ff:05:86:01:
24:05:c0:b2:ce:ab:01:97:91:c3:b3:8f:d5:d3:ac:e7:cb:b7:
c2:ae:8a:bf:cf:d9:39:89:10:47:e4:3c:6d:7b:fe:5a:05:09:
3f:85:e8:c7:50:a0:2d:22:cc:80:f6:03:ff:91:6c:db:7b:2b:
65:f8:67:d5:a2:21:53:93:24:d2:92:1a:e4:64:df:18:9f:81:
3e:04:bd:e6:e9:f7:44:b0:1e:6c:3f:08:e7:5a:b1:15:ee:e3:
62:2f:40:1a:6a:5c:e4:d2:c6:68:ae:d5:14:83:73:43:8c:fd:
aa:c8:56:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:23 2025 by rpki-client