Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/aZnSdyQvImk4t-S57aYRDRWfmic.roa
File: aZnSdyQvImk4t-S57aYRDRWfmic.roa (raw, json)
Hash identifier: rxw3oKKvZ3Tqms8bi9lvf0HlIGl7e+nFTDFfJyOhtCQ=
Subject key identifier: 69:99:D2:77:24:2F:22:69:38:B7:E4:B9:ED:A6:11:0D:15:9F:9A:27
Certificate issuer: /CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Certificate serial: 01882086B270E393F9E64D5BE3B68A7D9FC8
Authority key identifier: 70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/aZnSdyQvImk4t-S57aYRDRWfmic.roa
Signing time: Mon 15 May 2023 17:47:58 +0000
ROA not before: Mon 15 May 2023 17:47:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 185.230.246.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:b2:70:e3:93:f9:e6:4d:5b:e3:b6:8a:7d:9f:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Validity
Not Before: May 15 17:47:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6999d277242f226938b7e4b9eda6110d159f9a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3c:c2:12:6c:68:2a:46:18:4f:9d:ad:ed:ae:
0d:38:bf:0d:2a:b9:95:dc:a1:4a:73:5b:c4:a3:0e:
29:54:ff:aa:b3:b0:ea:a3:30:2e:d4:ab:5a:d1:36:
04:ab:9a:51:9b:70:74:12:9e:a4:cc:9e:e7:39:bf:
2e:9a:79:76:f1:58:f5:24:53:16:33:cc:5f:42:de:
a1:a9:89:8d:26:e1:70:9e:76:13:a4:ad:98:45:85:
11:71:81:33:91:36:9c:f3:75:02:32:34:ab:17:3d:
dd:7f:de:9a:a7:9c:58:29:cd:a9:a2:2f:b8:43:68:
76:4b:5f:4a:31:8e:95:d9:de:4d:4e:89:da:ca:6b:
56:62:1a:ce:fc:2e:67:76:46:e2:bc:f3:00:60:8d:
2d:bc:6c:0b:37:d6:92:54:1e:0e:16:a3:01:7c:d9:
5b:a0:f9:11:87:80:70:ac:bf:c9:0c:5e:49:11:74:
74:f7:c6:e8:f6:e7:fe:91:e0:2a:13:cd:56:f4:e9:
55:d8:44:7a:bf:a8:f0:73:c1:b5:9a:05:5c:83:f9:
37:8f:77:cc:0b:6d:63:1f:f5:8e:3f:63:23:f4:17:
3a:a7:e2:39:1b:23:c8:fa:31:47:48:c4:e0:04:bc:
a5:88:43:8c:ba:ed:0a:e3:43:0b:df:4a:ea:b0:10:
70:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:99:D2:77:24:2F:22:69:38:B7:E4:B9:ED:A6:11:0D:15:9F:9A:27
X509v3 Authority Key Identifier:
keyid:70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/aZnSdyQvImk4t-S57aYRDRWfmic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.246.0/24
Signature Algorithm: sha256WithRSAEncryption
69:53:46:43:02:b6:c5:0f:c9:4d:02:3c:fc:6b:5d:d5:af:ca:
67:7d:85:78:37:66:c6:aa:72:78:00:6f:74:d0:20:18:93:e4:
bc:a8:d2:8a:37:30:05:61:b0:73:45:13:af:68:72:b0:5b:c3:
38:40:f5:d9:cd:47:9f:14:cd:e8:98:03:86:32:01:f8:74:79:
cb:30:d8:be:0e:b2:53:0d:8a:3b:1a:1a:b3:28:35:23:73:04:
fe:b3:00:1e:ef:a9:e0:0d:d3:91:0f:0c:3e:1c:da:a3:22:77:
59:4c:f9:35:28:92:33:6c:8c:cc:ee:45:45:83:2f:63:d2:42:
f5:b7:ec:48:13:3e:e2:65:03:65:86:fb:a5:63:68:6a:80:79:
c5:8d:ce:bb:e0:3a:23:06:09:d3:83:14:3c:b5:83:f0:fb:76:
16:13:24:df:ed:24:d8:1d:6a:4d:cf:06:80:9c:9a:41:77:d0:
d2:90:d5:80:62:45:34:8e:38:f4:48:83:10:a0:fe:2d:60:08:
fb:66:e2:47:c3:14:62:a5:c0:15:a2:b0:6f:ff:fe:30:c0:06:
4e:ff:23:00:01:39:65:f6:f5:a0:01:fb:3f:0c:dd:38:fb:69:
6c:8b:19:03:31:c3:04:35:c4:6f:c5:f3:0c:ed:3c:92:ad:ae:
79:45:3a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:20 2025 by rpki-client