Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/f5KcB8KvXc7Ka2K4P5Dkz2Y8aeM.roa
File: f5KcB8KvXc7Ka2K4P5Dkz2Y8aeM.roa (raw, json)
Hash identifier: SLV0F0YjVeYcZxi4YexJfT3TiKCAKR33d2OIJWVrCPM=
Subject key identifier: 7F:92:9C:07:C2:AF:5D:CE:CA:6B:62:B8:3F:90:E4:CF:66:3C:69:E3
Certificate issuer: /CN=9c47ee73c28780b12f152cfa259ade3d8ae0d13b
Certificate serial: 0DA406F8
Authority key identifier: 9C:47:EE:73:C2:87:80:B1:2F:15:2C:FA:25:9A:DE:3D:8A:E0:D1:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nEfuc8KHgLEvFSz6JZrePYrg0Ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/f5KcB8KvXc7Ka2K4P5Dkz2Y8aeM.roa
Signing time: Sat 01 Jan 2022 03:57:43 +0000
ROA not before: Sat 01 Jan 2022 03:57:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197343
IP address blocks: 194.33.105.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228853496 (0xda406f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c47ee73c28780b12f152cfa259ade3d8ae0d13b
Validity
Not Before: Jan 1 03:57:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f929c07c2af5dceca6b62b83f90e4cf663c69e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1b:ca:26:69:5a:ed:71:3a:c1:c4:84:b6:20:
2c:7a:d3:c4:33:4a:98:0f:af:53:6b:b3:ae:f9:54:
af:ab:ea:d5:38:c2:5e:ef:32:60:3b:c4:a1:a8:74:
83:c9:e1:8d:b6:68:ad:fb:3e:dc:b4:68:46:4a:77:
4d:48:ab:88:4f:13:b4:67:b1:fa:c0:e1:a0:44:fe:
05:36:38:53:63:35:94:14:0d:76:3b:be:7d:c1:89:
50:98:61:c2:87:b9:66:c9:f9:90:b7:5e:07:ca:43:
72:7f:f5:0e:48:bf:1e:72:4b:3d:82:ff:83:e2:4a:
fb:30:d3:56:6e:fc:ec:49:bf:ea:6a:71:ad:b4:aa:
fc:3a:5d:4f:e4:17:ac:20:56:bf:60:80:c8:08:05:
27:ad:d9:49:69:69:43:10:f2:3a:92:ea:5a:53:3f:
07:a9:55:12:4f:e3:56:89:22:51:9a:c1:e0:9a:eb:
20:7a:4b:ff:ae:b5:28:49:c1:95:b5:29:c4:fe:80:
a0:b8:60:25:90:50:3c:c2:f5:99:ad:b5:b4:35:ab:
b3:fb:49:0b:79:4b:63:12:81:db:50:10:15:3c:a6:
8c:14:64:4f:a1:ad:47:13:92:6e:74:98:82:d8:6b:
46:bf:93:a8:2b:d0:34:e5:7a:f5:61:b5:05:9b:be:
a0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:92:9C:07:C2:AF:5D:CE:CA:6B:62:B8:3F:90:E4:CF:66:3C:69:E3
X509v3 Authority Key Identifier:
keyid:9C:47:EE:73:C2:87:80:B1:2F:15:2C:FA:25:9A:DE:3D:8A:E0:D1:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEfuc8KHgLEvFSz6JZrePYrg0Ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/f5KcB8KvXc7Ka2K4P5Dkz2Y8aeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.105.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:3e:82:49:f5:36:46:56:1b:8f:52:44:4d:56:72:42:31:aa:
8f:b8:01:17:58:21:36:f8:67:d8:72:45:89:3a:a1:0d:be:1b:
24:cf:84:7b:53:72:6b:2f:7f:e0:40:cc:75:c6:4a:17:e9:ed:
46:26:9a:96:b2:08:3f:e4:f8:16:b8:ee:60:0e:cd:d5:2c:78:
b2:d5:49:87:28:55:54:d0:26:e7:1a:2a:f6:8e:c2:71:78:e0:
56:b7:95:56:d6:ec:3b:43:ac:4b:29:54:9e:23:80:d2:0d:13:
ff:ad:2c:c9:22:ce:b2:01:2b:93:f5:72:c6:83:56:9b:a6:c6:
68:23:d6:f3:de:59:78:ea:30:ab:28:d7:5b:35:08:3f:bc:dc:
a7:06:5c:3a:60:d8:6b:ee:32:73:34:f8:e5:15:07:5b:65:16:
99:43:8b:a3:69:ef:2d:82:04:f3:5f:83:cf:e3:26:52:08:76:
40:0d:c0:6e:56:8f:6e:1a:b9:78:f1:72:6d:74:c4:db:e0:fd:
a3:52:f6:65:e8:51:5c:f2:5b:b2:7a:cb:16:45:c2:f7:b2:c5:
35:f2:63:e3:b3:06:f1:44:7c:e6:43:03:46:fe:55:e0:48:d3:
fb:00:5e:8a:87:10:49:c2:a1:4e:58:36:d3:94:30:3f:ab:e7:
44:86:d5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:29 2025 by rpki-client