Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/rdONlt46QIBgggyNe2wHfWdSLso.roa
File: rdONlt46QIBgggyNe2wHfWdSLso.roa (raw, json)
Hash identifier: LoVfwvCdXjalPsFF5eubH9+qa3SckEY2ra92l2/OCUM=
Subject key identifier: AD:D3:8D:96:DE:3A:40:80:60:82:0C:8D:7B:6C:07:7D:67:52:2E:CA
Certificate issuer: /CN=c330acdf041b5dcc7e5ec6cf8ff8bd0648e8670c
Certificate serial: 034E2083
Authority key identifier: C3:30:AC:DF:04:1B:5D:CC:7E:5E:C6:CF:8F:F8:BD:06:48:E8:67:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzCs3wQbXcx-XsbPj_i9BkjoZww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/rdONlt46QIBgggyNe2wHfWdSLso.roa
Signing time: Sat 01 Jan 2022 13:55:15 +0000
ROA not before: Sat 01 Jan 2022 13:55:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207858
IP address blocks: 193.28.255.0/24 maxlen: 24
193.29.4.0/24 maxlen: 24
193.29.1.0/24 maxlen: 24
193.29.8.0/24 maxlen: 24
2a0f:7a40::/31 maxlen: 31
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55451779 (0x34e2083)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c330acdf041b5dcc7e5ec6cf8ff8bd0648e8670c
Validity
Not Before: Jan 1 13:55:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=add38d96de3a408060820c8d7b6c077d67522eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:84:d0:86:ac:f1:a0:c1:18:e5:af:be:e0:ed:
f0:81:c6:0e:70:bb:8e:7d:0f:36:06:d2:fb:7c:fd:
b9:40:f2:22:6e:11:21:b7:29:ce:14:e1:17:13:1c:
aa:3c:02:48:41:e7:8c:3b:70:8b:a7:1e:3c:85:2b:
e3:48:53:25:a2:6f:56:02:1e:e2:56:45:65:ec:1c:
b1:43:d2:2b:57:fa:00:48:af:27:ca:bd:d5:7c:a5:
b6:12:fb:02:8d:18:e8:0b:f6:46:35:5f:9f:fc:65:
0d:cf:79:7e:12:e0:cb:05:fa:f2:c8:98:78:19:63:
20:a9:a1:01:23:46:ce:98:b5:17:3e:15:c2:7e:e2:
28:78:60:43:ca:d1:51:af:d4:53:f5:e2:70:21:90:
30:99:de:ca:3b:1e:e2:4f:30:f9:d4:3d:20:13:e4:
5c:12:45:8e:d9:83:ff:7a:d2:32:01:c3:77:13:2a:
a5:ce:64:c2:6c:f5:e0:ad:d3:ca:d8:fc:98:d5:84:
56:67:24:42:51:96:c6:a6:17:2b:18:46:04:3a:e0:
66:de:9c:c8:02:e8:30:ef:d5:1a:60:25:ef:9d:c5:
3d:be:9f:12:58:a8:22:99:c9:e1:bf:bf:9f:c1:eb:
35:25:c5:5a:c0:da:cc:e8:2b:48:86:78:57:97:20:
8b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D3:8D:96:DE:3A:40:80:60:82:0C:8D:7B:6C:07:7D:67:52:2E:CA
X509v3 Authority Key Identifier:
keyid:C3:30:AC:DF:04:1B:5D:CC:7E:5E:C6:CF:8F:F8:BD:06:48:E8:67:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzCs3wQbXcx-XsbPj_i9BkjoZww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/rdONlt46QIBgggyNe2wHfWdSLso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.28.255.0/24
193.29.1.0/24
193.29.4.0/24
193.29.8.0/24
IPv6:
2a0f:7a40::/31
Signature Algorithm: sha256WithRSAEncryption
03:6a:52:e3:d6:4b:f0:51:53:6c:a4:66:db:1d:c7:d7:84:68:
d0:7b:cb:ea:3e:05:8b:5c:9d:7a:cd:e4:4e:95:fb:de:59:56:
0a:44:c6:fc:1f:d7:a1:b6:17:1d:db:11:60:99:8d:ae:73:67:
0a:6b:dc:3e:3a:5c:b2:04:68:2e:89:1c:89:9d:1e:6b:c9:b3:
c7:6f:88:fe:c6:cf:7d:c9:04:9e:57:82:1a:1e:c4:f0:84:02:
31:32:04:de:c9:10:2a:c2:cc:0f:fb:ee:1a:52:55:96:b7:f3:
5c:2c:41:35:9b:2a:41:7f:a4:38:17:80:a4:0c:96:30:0d:1e:
b3:77:ef:74:7e:30:f9:6a:7b:4d:b6:97:83:35:66:61:ca:98:
ff:d7:bd:3a:c1:98:0d:87:89:73:0a:9e:27:37:eb:8a:00:08:
33:26:a6:d7:e5:97:83:ad:51:7b:ab:52:e8:cb:7a:5e:7a:5f:
df:bc:b5:d6:99:74:2d:fd:ff:12:7b:93:ba:62:46:8d:53:ae:
b6:c0:37:94:84:a6:19:f9:61:f2:5c:11:13:2f:15:f3:b4:9f:
44:92:06:6f:9c:b9:7e:af:ff:14:53:e4:97:0c:70:be:d0:be:
02:0c:5e:f8:13:73:98:d5:b5:d6:a7:51:39:69:39:c3:a5:87:
cb:f0:fa:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:43 2025 by rpki-client