Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/AKHaniYWfGL7ymrme5zaoRB0A5k.roa
File: AKHaniYWfGL7ymrme5zaoRB0A5k.roa (raw, json)
Hash identifier: 7aDPv/CeC0fjVeRxbMd+zr7yhTbBRnaRyixJcLJfa/w=
Subject key identifier: 00:A1:DA:9E:26:16:7C:62:FB:CA:6A:E6:7B:9C:DA:A1:10:74:03:99
Certificate issuer: /CN=08cb89a11114efbe0e1e2550ecda336fd792ec5f
Certificate serial: 01857169CFD1F499FC9160418957E089CACC
Authority key identifier: 08:CB:89:A1:11:14:EF:BE:0E:1E:25:50:EC:DA:33:6F:D7:92:EC:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/AKHaniYWfGL7ymrme5zaoRB0A5k.roa
Signing time: Mon 02 Jan 2023 07:37:17 +0000
ROA not before: Mon 02 Jan 2023 07:37:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8220
IP address blocks: 194.127.228.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:cf:d1:f4:99:fc:91:60:41:89:57:e0:89:ca:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08cb89a11114efbe0e1e2550ecda336fd792ec5f
Validity
Not Before: Jan 2 07:37:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=00a1da9e26167c62fbca6ae67b9cdaa110740399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9d:46:57:1e:07:c1:81:0b:a0:f8:ec:8f:61:
01:9b:97:50:36:f4:58:d7:e1:a3:c8:a0:95:b2:32:
aa:a1:de:55:45:f5:c0:ac:08:b3:3a:d8:01:94:2a:
df:8f:62:a5:22:5b:ec:d2:bb:a0:22:ef:1f:20:28:
ee:0c:4f:b6:03:be:f1:be:87:38:e0:a4:6b:4e:1e:
de:84:a1:3b:44:bd:4b:9e:91:65:8d:90:24:01:69:
d3:58:4e:6c:19:a6:ca:c4:36:66:9f:50:77:63:18:
f7:84:7a:13:57:ee:54:0e:81:75:76:f9:1f:75:1b:
2e:70:a3:0b:b1:7c:66:08:30:a3:e5:ea:ca:6f:f6:
d8:6f:f8:0e:33:47:a4:94:63:8a:d9:ec:a9:97:0e:
13:6e:3b:2d:94:b9:c0:20:e3:87:dd:22:12:4f:54:
a2:2d:11:54:e0:1d:f5:f4:4d:c7:13:04:6d:25:6d:
1c:d4:a6:23:c9:62:fc:43:4b:dc:1a:39:3d:43:93:
8d:01:7b:39:cb:9b:05:40:0f:2c:1a:d0:47:73:cb:
63:0a:55:48:84:0a:49:be:4f:22:7d:0d:8f:01:21:
e2:eb:a3:50:49:05:50:a6:13:c5:4d:36:23:7c:4e:
9f:a7:e9:d0:cd:c8:61:0e:7d:51:8d:2b:4e:8e:a6:
0d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A1:DA:9E:26:16:7C:62:FB:CA:6A:E6:7B:9C:DA:A1:10:74:03:99
X509v3 Authority Key Identifier:
keyid:08:CB:89:A1:11:14:EF:BE:0E:1E:25:50:EC:DA:33:6F:D7:92:EC:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/AKHaniYWfGL7ymrme5zaoRB0A5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.127.228.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:bc:a7:8b:44:9b:45:fa:e8:ba:fd:e2:89:1f:fb:5d:eb:95:
3b:c8:d2:ba:17:90:d5:6b:fd:88:89:30:11:33:fa:64:a2:2d:
f9:3b:68:9a:df:b1:9c:e5:2e:bd:47:f5:6a:90:d7:a9:1d:2a:
7a:38:9a:89:dc:3b:6c:2d:c4:0c:60:5e:94:45:0b:9a:4e:a2:
52:a1:fc:df:f7:71:76:3f:51:99:4f:b2:11:ee:28:44:6f:aa:
e6:39:d7:b8:c2:ae:a4:c1:60:f8:06:bf:a9:0b:f1:3c:3f:66:
92:e9:c9:7b:c3:1c:8f:52:98:d0:f7:43:ce:b2:e0:c4:ba:65:
a5:84:e9:2a:d9:ad:d6:7b:a2:64:d0:f6:0e:ab:e7:23:c3:44:
de:76:5d:fd:10:a2:ea:64:6f:e5:76:a0:fb:eb:a6:c7:5e:44:
3a:9d:0e:68:29:f9:bf:9e:5c:89:34:5d:f5:ab:f4:2c:ae:ee:
49:c1:bd:8a:73:de:c1:14:3e:04:dd:e7:67:8f:6d:12:5b:ea:
9a:89:3f:ba:66:71:f5:b5:95:46:42:44:a1:e0:42:0a:65:3c:
8f:7f:84:07:66:eb:f8:8f:a3:39:d5:58:82:5d:85:fe:ad:3d:
1e:5b:28:6b:cf:ea:e4:f0:e6:cb:fd:a7:5e:ee:cd:fe:84:6d:
46:ed:16:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:19:03 2025 by rpki-client