Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/lLrpZ7EjDSNPvSgAXL5IAEoissY.roa
File: lLrpZ7EjDSNPvSgAXL5IAEoissY.roa (raw, json)
Hash identifier: BsuO9kVe8jicCiU0FaqcuZqIM1m+9edLMsSWh1nKCCY=
Subject key identifier: 94:BA:E9:67:B1:23:0D:23:4F:BD:28:00:5C:BE:48:00:4A:22:B2:C6
Certificate issuer: /CN=659a6b975eafd2ce51468723814355f56c55bafb
Certificate serial: 0185704BC287F5F82427CDD123C52A016DB0
Authority key identifier: 65:9A:6B:97:5E:AF:D2:CE:51:46:87:23:81:43:55:F5:6C:55:BA:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/lLrpZ7EjDSNPvSgAXL5IAEoissY.roa
Signing time: Mon 02 Jan 2023 02:24:51 +0000
ROA not before: Mon 02 Jan 2023 02:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15924
IP address blocks: 194.125.232.0/22 maxlen: 24
194.242.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:c2:87:f5:f8:24:27:cd:d1:23:c5:2a:01:6d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=659a6b975eafd2ce51468723814355f56c55bafb
Validity
Not Before: Jan 2 02:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94bae967b1230d234fbd28005cbe48004a22b2c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b1:53:d6:f4:13:25:a2:b3:4b:26:d3:0e:1e:
eb:38:d5:24:2d:c2:cd:22:ea:24:b5:d0:90:31:91:
d2:cf:0a:f2:97:83:4e:27:2c:63:cd:6c:62:ad:39:
ee:5e:b0:3e:5e:1f:3b:e5:f7:d8:cb:78:90:a0:41:
35:5f:0e:76:37:b3:4e:43:31:6a:77:3d:16:b7:63:
c3:da:41:71:70:80:7d:73:a8:90:f3:04:84:c0:eb:
0f:c3:72:17:e5:94:4d:10:0b:9d:43:9a:f2:d5:27:
a8:45:3c:da:3d:71:b8:51:6f:06:cc:dc:dc:51:b8:
11:5e:00:d4:49:dd:64:ff:63:71:3f:6f:3b:c0:6c:
07:e9:51:82:fa:ea:92:eb:f9:bd:fe:24:49:8e:e7:
41:43:6a:d6:25:e8:49:9f:2e:1f:ff:3f:9b:14:4d:
27:52:7b:b5:15:eb:5f:5f:b4:7e:b8:b2:32:68:1f:
39:21:03:c9:04:df:b6:d3:c0:7c:e6:5e:cc:de:ef:
1d:5b:f0:e0:8d:60:0f:07:c5:8a:ef:8a:47:02:da:
d7:5d:41:81:d2:ff:64:8f:a4:4f:3d:9d:c5:cf:47:
6a:b6:ff:21:19:c5:c0:a9:57:ec:b3:c8:42:00:91:
45:c1:c1:c7:02:59:fe:d0:ab:87:e3:e1:36:02:d5:
cc:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:BA:E9:67:B1:23:0D:23:4F:BD:28:00:5C:BE:48:00:4A:22:B2:C6
X509v3 Authority Key Identifier:
keyid:65:9A:6B:97:5E:AF:D2:CE:51:46:87:23:81:43:55:F5:6C:55:BA:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/lLrpZ7EjDSNPvSgAXL5IAEoissY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.125.232.0/22
194.242.32.0/24
Signature Algorithm: sha256WithRSAEncryption
74:f1:31:49:a0:6f:56:12:a8:73:32:a8:43:33:58:77:08:b8:
81:f6:14:93:04:e1:c1:95:59:ea:7b:c2:73:48:3b:e6:6b:98:
9c:c5:2e:ac:92:a0:5d:b9:52:e9:1a:b9:ab:7e:87:6e:e6:c5:
a0:7d:4c:75:60:2e:cf:b4:1c:33:36:27:ca:23:70:09:e8:11:
47:f8:f9:7b:d2:7d:20:12:aa:79:81:9b:f6:0f:5b:e5:02:57:
41:d8:8b:9b:ae:f4:4a:13:89:af:14:06:7d:e5:28:8d:f8:52:
d3:32:77:bb:c1:25:a4:b1:45:07:c8:b9:72:ef:81:84:96:7a:
03:ca:ea:3f:4d:42:74:b4:4d:49:f8:9a:be:4d:47:97:42:cc:
f0:38:79:85:a0:4d:5a:78:7e:82:b2:84:79:a4:a2:10:7d:3e:
1e:53:8d:90:29:cf:cb:2f:fc:58:8c:bb:f3:d4:70:0b:30:af:
99:db:33:21:de:df:b4:1f:85:73:51:bf:e5:36:44:da:fc:13:
01:fa:1d:31:72:51:c1:1a:53:7a:37:5a:ce:1c:56:16:ed:e7:
61:d3:69:80:44:0f:ef:7c:2f:1a:e4:29:eb:06:ea:0c:65:f8:
3e:a2:91:cb:56:e0:47:c2:f4:54:27:61:25:a3:fc:4e:3d:b7:
21:5b:ab:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:18:44 2025 by rpki-client