Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/0LQjPU4Hh5ayBSemQoZyPELDG0I.roa
File: 0LQjPU4Hh5ayBSemQoZyPELDG0I.roa (raw, json)
Hash identifier: IkooIzxJZk+qClczHcwQbJBMpz7Uja8LUnwIdPH8xpo=
Subject key identifier: D0:B4:23:3D:4E:07:87:96:B2:05:27:A6:42:86:72:3C:42:C3:1B:42
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 0184C836BA29542862BCF6FB9EC3280DAE24
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/0LQjPU4Hh5ayBSemQoZyPELDG0I.roa
Signing time: Wed 30 Nov 2022 11:05:40 +0000
ROA not before: Wed 30 Nov 2022 11:05:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 38337
IP address blocks: 149.126.192.0/24 maxlen: 24
149.126.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c8:36:ba:29:54:28:62:bc:f6:fb:9e:c3:28:0d:ae:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Nov 30 11:05:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d0b4233d4e078796b20527a64286723c42c31b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1d:46:b3:13:70:e3:62:b3:6c:32:36:70:31:
9d:05:dc:a4:34:e3:33:05:f7:c8:de:d4:db:aa:18:
da:51:7b:d5:fa:64:cc:d2:19:ae:6b:95:9c:ce:43:
6f:23:74:75:16:3a:1a:20:7e:97:61:3d:e0:71:e5:
73:45:9d:02:b2:43:ca:27:02:91:4c:11:d8:1b:e3:
da:cf:a4:34:22:aa:1c:98:a2:f7:29:93:91:7d:c5:
2a:b5:bc:80:eb:a8:48:7b:f4:28:de:8d:77:b5:70:
6f:0a:95:bd:35:1a:08:f9:eb:05:ec:cc:41:a2:a3:
62:2e:a5:30:97:2e:46:53:ca:00:46:93:b6:66:c0:
61:16:43:34:42:27:f8:e3:48:1b:27:a3:6b:ae:e6:
5e:5e:09:b1:83:d0:45:e3:d3:da:72:13:49:5f:a7:
37:73:57:e8:e4:33:1f:dc:f4:66:78:40:fd:22:bd:
29:5f:11:c4:35:5c:3e:eb:11:ac:a8:ea:9d:7a:c3:
78:f8:8f:16:9d:ef:59:db:3e:f1:cd:33:87:98:d4:
31:f1:cf:bb:fd:e7:08:ef:62:3e:07:92:dc:12:39:
9b:18:87:b7:c9:c6:27:23:c6:ba:68:7a:71:8a:fe:
00:18:89:38:db:30:28:c5:0f:87:d6:95:a0:60:d4:
06:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B4:23:3D:4E:07:87:96:B2:05:27:A6:42:86:72:3C:42:C3:1B:42
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/0LQjPU4Hh5ayBSemQoZyPELDG0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.126.192.0/24
149.126.207.0/24
Signature Algorithm: sha256WithRSAEncryption
45:d6:a0:71:f5:2b:e8:2b:c7:0f:97:ff:a1:da:25:c1:f9:d0:
08:0b:59:1e:e6:08:58:c1:98:3e:95:4f:6b:45:47:b6:48:f7:
71:f6:c9:f7:8e:17:5b:2a:17:f6:74:1e:31:24:11:f0:f9:e3:
f6:d7:da:f5:81:08:6e:f1:f2:19:36:40:8a:1a:94:f6:78:96:
ba:d2:86:d5:94:cd:5e:ff:39:ef:1c:07:a0:42:9d:b1:ae:29:
d0:7d:fb:e5:3b:0e:47:56:c2:26:c6:ba:3e:f0:c7:cf:7e:f9:
27:a0:38:47:60:99:2d:a6:21:b1:2c:41:00:ee:91:cb:29:1d:
88:bf:93:c9:27:46:30:73:34:5f:57:4f:40:30:d7:8c:8f:43:
b5:92:6c:34:86:ff:b2:a1:82:18:b3:b3:08:51:f7:cc:33:a9:
ee:60:cf:bc:6e:97:e2:d4:2e:be:72:30:56:c0:5c:58:1b:cf:
45:31:5e:40:ca:15:3b:40:cb:66:80:56:e7:35:f4:e3:f4:2b:
7c:1a:6a:c1:31:ec:19:73:5d:21:6c:07:e3:3b:2b:14:9a:03:
20:b8:8d:74:f9:84:9a:82:d3:16:c6:0d:de:98:39:5c:5a:a2:
43:8b:ca:1b:bb:70:b8:9f:46:a6:77:54:ab:fe:8d:76:e6:f2:
aa:40:80:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:36 2025 by rpki-client