Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/Z04WDAq9O--FQWGUcE0Ypgzd5G8.roa
File: Z04WDAq9O--FQWGUcE0Ypgzd5G8.roa (raw, json)
Hash identifier: eqz9sf+qKVkxeOCUEEWVBTkWUKWDsgsizyO/ms8HOIw=
Subject key identifier: 67:4E:16:0C:0A:BD:3B:EF:85:41:61:94:70:4D:18:A6:0C:DD:E4:6F
Certificate issuer: /CN=318cbfffcd21127de3628697598db0c2d9e11351
Certificate serial: 0185708CCB95B2228E2A6F0E40E26D1C6EC6
Authority key identifier: 31:8C:BF:FF:CD:21:12:7D:E3:62:86:97:59:8D:B0:C2:D9:E1:13:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYy__80hEn3jYoaXWY2wwtnhE1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/Z04WDAq9O--FQWGUcE0Ypgzd5G8.roa
Signing time: Mon 02 Jan 2023 03:35:53 +0000
ROA not before: Mon 02 Jan 2023 03:35:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42721
IP address blocks: 194.110.205.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:cb:95:b2:22:8e:2a:6f:0e:40:e2:6d:1c:6e:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=318cbfffcd21127de3628697598db0c2d9e11351
Validity
Not Before: Jan 2 03:35:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=674e160c0abd3bef85416194704d18a60cdde46f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7e:cd:25:b3:3e:b6:95:4b:f8:a0:f5:65:de:
e7:3c:d9:d0:03:f7:2e:d1:17:a0:3f:a9:5e:97:23:
cb:56:e9:b2:8e:35:97:22:9b:01:ce:e5:0c:54:2a:
59:40:3c:c9:59:3e:40:e3:40:d7:f1:89:9f:fe:06:
d3:ef:43:3e:04:0a:e7:a2:2a:1e:c1:5f:f8:54:ae:
cc:52:5b:f5:10:88:33:ba:2d:ee:12:8d:56:71:ae:
93:41:6d:ec:53:96:76:9e:c2:47:99:b8:3e:2c:da:
10:8a:71:b4:04:f6:c6:b8:43:6b:bd:57:64:cf:44:
98:5d:f6:e2:02:b3:d1:49:cd:9f:cd:9e:7f:bb:6d:
0f:cc:38:f7:35:b6:c3:9f:b0:3d:f5:a3:96:e5:6e:
94:b7:74:4c:87:6e:85:ca:c4:48:b8:44:22:d5:a8:
ca:94:4f:da:81:fc:d7:44:6e:0b:73:6a:99:a6:0b:
a4:f8:1c:5a:ac:e6:77:b0:2b:7b:75:29:64:4a:ca:
61:f6:e1:02:35:b5:20:e6:6e:80:ba:09:6c:88:57:
27:d5:d2:bc:f5:6d:f8:26:95:a6:c7:4e:fe:7b:20:
85:f7:02:a2:2c:8d:d7:69:6c:8d:1d:d5:1d:46:37:
23:0c:42:27:12:d2:c1:2a:a3:96:c6:8c:59:bf:b5:
b8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:4E:16:0C:0A:BD:3B:EF:85:41:61:94:70:4D:18:A6:0C:DD:E4:6F
X509v3 Authority Key Identifier:
keyid:31:8C:BF:FF:CD:21:12:7D:E3:62:86:97:59:8D:B0:C2:D9:E1:13:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYy__80hEn3jYoaXWY2wwtnhE1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/Z04WDAq9O--FQWGUcE0Ypgzd5G8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.205.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:3b:02:4a:d6:ba:e3:38:55:14:d7:bd:5e:12:c6:1d:06:4e:
66:bb:c5:bd:01:7c:90:b2:7e:32:c9:ed:5c:6e:59:cd:58:d9:
b4:b3:53:57:d4:3e:d5:1f:3a:53:d3:b2:23:09:32:30:27:98:
b6:42:4b:74:3b:42:5b:a7:88:7c:eb:0e:6e:e8:82:a2:17:4b:
e2:58:d3:3d:eb:56:fb:66:da:0a:6c:3f:1a:4d:08:62:43:66:
ed:a4:44:bd:2b:33:1d:66:df:7f:d1:57:a6:2d:ca:a8:af:bf:
07:f9:f2:8c:9b:88:c4:b5:d3:f5:85:82:1d:f9:2d:fb:bb:90:
5b:16:f0:b0:67:34:3a:d2:05:c4:e0:2a:73:79:b1:6a:24:66:
09:e8:2e:f9:8e:39:92:50:c5:46:29:1c:56:ea:f4:c4:ed:30:
32:6a:28:9d:ff:b2:59:09:95:39:a5:52:b3:42:8f:1e:9b:46:
3a:a1:22:93:a5:3b:33:6c:81:0d:d8:3a:4d:68:f0:4f:f8:47:
48:27:13:e9:19:e8:d0:a0:d0:e2:c7:62:b3:94:02:e9:9a:19:
4e:93:21:e8:17:ff:c0:1f:76:e6:c4:fc:86:91:7a:5d:d7:db:
b2:9f:34:2c:1c:51:da:7d:17:88:5b:f6:ad:e9:ad:b1:06:8e:
85:12:b2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:11 2025 by rpki-client