Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/3hsfHCsjQRg8aaxcsRk6339oeww.roa
File: 3hsfHCsjQRg8aaxcsRk6339oeww.roa (raw, json)
Hash identifier: lQx0wL0Hj4WifjxsujkFdlFtsTLEQZBx3ng/9rsdl5Q=
Subject key identifier: DE:1B:1F:1C:2B:23:41:18:3C:69:AC:5C:B1:19:3A:DF:7F:68:7B:0C
Certificate issuer: /CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Certificate serial: 01399EE8
Authority key identifier: 70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/3hsfHCsjQRg8aaxcsRk6339oeww.roa
Signing time: Sat 01 Jan 2022 06:01:34 +0000
ROA not before: Sat 01 Jan 2022 06:01:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 185.230.246.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20553448 (0x1399ee8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Validity
Not Before: Jan 1 06:01:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=de1b1f1c2b2341183c69ac5cb1193adf7f687b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5e:0e:c3:14:b1:26:0e:5f:a1:00:55:c6:a2:
5d:b5:70:b7:8c:25:b8:47:bd:9a:19:80:b7:b4:13:
0b:9c:37:bf:aa:d7:4b:e1:d5:5b:21:cb:87:75:d9:
aa:90:a1:fd:b1:02:a9:3d:e8:41:60:9e:d9:0d:d9:
7c:7b:0a:1f:26:99:8e:56:4d:bb:42:e9:f0:92:d4:
6f:a6:6c:f9:87:c1:63:e5:f3:16:51:9b:26:59:d3:
a3:77:17:b7:2e:73:e8:ca:7c:4c:44:25:e2:45:79:
ea:9a:1f:d9:b4:8d:2b:c2:8a:98:cf:b8:8b:bd:ce:
e5:a8:9d:bb:24:2c:65:07:1c:63:a0:be:1d:a5:0d:
fa:76:5e:cd:21:08:96:e3:7e:72:fb:97:39:a0:cc:
49:ef:28:3c:ba:a5:82:a7:c7:a6:d4:a5:44:21:d0:
27:d9:55:f7:34:55:cd:79:18:85:19:22:16:f3:32:
c7:ab:4a:96:c5:ae:8b:48:ff:69:9b:3a:ad:cc:e7:
17:1b:48:bb:ee:8b:13:59:f1:86:74:bb:96:e6:0d:
49:bd:09:03:d4:e0:5a:9b:f3:37:52:64:cc:af:18:
09:c1:a6:90:2f:d5:8d:38:10:08:8e:a6:ee:f1:36:
e0:3d:50:70:be:1e:36:38:74:e9:7c:a4:c0:57:1f:
b2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:1B:1F:1C:2B:23:41:18:3C:69:AC:5C:B1:19:3A:DF:7F:68:7B:0C
X509v3 Authority Key Identifier:
keyid:70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/3hsfHCsjQRg8aaxcsRk6339oeww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.246.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:95:c6:3b:fe:27:e0:cc:ed:bb:db:a2:ab:2e:15:23:82:1e:
90:37:e7:9e:2c:ea:9a:bb:c9:ae:ca:c3:87:9c:a9:d5:5d:97:
35:92:a1:c1:5d:37:ad:9f:be:55:39:a6:0c:0f:a5:5f:ca:98:
a2:4c:0d:fe:f0:e4:25:3b:12:13:a5:86:dc:c4:01:75:1b:12:
86:1b:0a:9a:33:58:cf:9f:7d:bc:8e:5f:e6:88:41:01:37:51:
76:76:45:2f:03:e6:67:39:72:fb:2b:9d:42:64:f9:72:73:8c:
29:42:f5:72:f8:8c:c6:5c:5f:a9:33:ee:b3:2f:03:66:5e:c5:
81:77:fa:ee:07:5d:76:4d:37:52:8e:2e:8c:42:4d:9c:cb:63:
79:54:aa:3a:08:fa:49:29:76:24:f0:87:70:52:22:b4:13:66:
0e:16:b8:b7:3b:ff:c3:66:37:f0:4b:c9:b8:7d:1d:df:7f:53:
2e:72:87:60:86:ce:f5:61:d7:e9:89:ba:f4:75:33:4f:42:dd:
05:0d:37:21:4c:39:e0:b5:07:fa:0c:c2:1d:7c:f7:87:e4:0a:
e4:f8:6a:a1:2e:8e:16:23:57:95:a5:59:0b:e3:b2:3c:a9:9c:
22:d3:f3:51:a6:15:54:99:28:a8:8c:c7:81:46:9c:f7:03:1a:
74:ff:31:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:32 2025 by rpki-client