Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/7oXxayuOVhiYyYjyDHjEJ01f6mE.roa
File: 7oXxayuOVhiYyYjyDHjEJ01f6mE.roa (raw, json)
Hash identifier: x84bvexFdc+RxRUovw3XviIc7V2opI4H9ElbRD3vIL8=
Subject key identifier: EE:85:F1:6B:2B:8E:56:18:98:C9:88:F2:0C:78:C4:27:4D:5F:EA:61
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 018438B92ADB33BCB0A640F79B4E2F8C5C14
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/7oXxayuOVhiYyYjyDHjEJ01f6mE.roa
Signing time: Wed 02 Nov 2022 14:22:49 +0000
ROA not before: Wed 02 Nov 2022 14:22:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 185.255.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:38:b9:2a:db:33:bc:b0:a6:40:f7:9b:4e:2f:8c:5c:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Nov 2 14:22:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ee85f16b2b8e561898c988f20c78c4274d5fea61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:39:61:7d:ec:56:8c:bb:3f:da:62:19:d0:35:
66:af:d0:ef:99:a9:45:75:99:c0:5a:98:a5:35:a4:
6c:60:b8:ef:89:c3:ad:07:78:6e:62:1e:05:d4:5c:
7c:c4:ba:72:8e:63:46:a4:72:d7:d7:ea:e4:ca:a6:
86:70:17:31:18:73:af:58:1a:e1:97:9a:c8:98:87:
1e:ed:6b:53:1d:6b:2d:3b:2a:c8:6d:41:bd:91:28:
39:e9:d8:e2:37:5f:18:6f:7a:b0:a9:8f:b7:43:d7:
da:13:e3:c5:b5:a8:93:18:34:c5:50:24:81:0b:85:
6a:4d:bf:85:55:e8:bb:4a:dd:9b:b1:86:ef:49:a6:
b4:1d:d1:60:5e:ce:ec:cf:83:10:5a:cf:7b:e9:7a:
9e:f8:1a:8d:e8:ac:e1:62:3a:7d:05:15:b1:51:72:
c3:a3:63:b0:9f:5c:32:d7:22:5e:87:4f:56:03:b0:
c7:48:69:0f:74:e6:80:ea:d3:68:57:e5:ab:54:5b:
4b:00:1c:f3:19:6d:7e:89:e7:13:59:9b:0f:f0:b2:
26:d1:27:32:99:c3:7e:5e:bb:b8:d3:54:0c:dd:eb:
46:ff:f8:c2:7c:02:1f:0f:e9:24:74:a5:e5:cb:0d:
32:74:74:aa:eb:2d:b7:69:d3:95:ff:c1:b2:09:cd:
c8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:85:F1:6B:2B:8E:56:18:98:C9:88:F2:0C:78:C4:27:4D:5F:EA:61
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/7oXxayuOVhiYyYjyDHjEJ01f6mE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.7.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:24:e3:a2:92:60:43:90:50:bb:9b:b8:e0:a2:73:00:da:8f:
e5:e4:04:45:27:e6:0e:c6:0f:ed:dd:77:f2:ba:d1:3b:3b:c5:
c4:ec:19:8e:c5:73:27:d2:d1:03:84:3e:94:97:52:eb:dc:8d:
ee:50:ba:7e:5e:00:ef:73:a4:96:26:37:a3:66:56:97:cb:ff:
a3:cc:77:ef:2f:02:69:91:ba:98:47:fc:2c:75:eb:3d:45:5b:
61:d0:ee:5a:dc:06:05:48:b4:41:51:a7:67:a2:48:14:36:36:
90:fa:82:e6:a3:64:ea:1e:41:b5:d1:5d:16:7a:0c:37:c1:4f:
3e:3a:50:66:cd:b6:ed:7f:3e:96:64:c9:29:4a:9e:41:c9:bd:
80:29:ba:67:38:e3:a6:38:bc:7c:8a:94:ca:dd:62:f4:f0:5a:
4e:36:af:99:64:0d:19:a4:2a:ea:16:9e:51:f5:4f:b1:5b:e1:
33:a7:5c:36:71:90:9a:26:4c:30:f4:f2:fc:df:4b:d8:cb:1b:
36:48:ae:6a:0c:63:9b:da:ab:92:da:1e:be:97:f1:18:75:b9:
94:a6:8c:51:5a:84:bf:3e:62:64:68:f7:09:cf:1e:ec:f4:5c:
dc:96:56:b9:84:86:9f:61:96:04:4e:66:6a:6e:f3:2a:29:e4:
2f:2f:3a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:35 2024 by rpki-client on console-fra.rpki-client.org