Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/crIq0oS1ol5Zcy9d_9yTWWAM2Zk.roa
File: crIq0oS1ol5Zcy9d_9yTWWAM2Zk.roa (raw, json)
Hash identifier: o++d9lHO07Qc4FDzfzFCOB1iLA5sWgk0TzfEhWSq3q4=
Subject key identifier: 72:B2:2A:D2:84:B5:A2:5E:59:73:2F:5D:FF:DC:93:59:60:0C:D9:99
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 2DEAA575
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/crIq0oS1ol5Zcy9d_9yTWWAM2Zk.roa
Signing time: Mon 09 May 2022 06:18:42 +0000
ROA not before: Mon 09 May 2022 06:18:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41406
IP address blocks: 194.9.24.0/24 maxlen: 24
194.9.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 770352501 (0x2deaa575)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: May 9 06:18:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=72b22ad284b5a25e59732f5dffdc9359600cd999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:66:db:ea:fe:96:ae:20:d6:68:d4:60:e3:62:
15:dc:73:0b:3b:8e:ee:37:f7:8d:ee:aa:09:26:39:
37:05:e6:e1:be:64:4c:e2:b3:3e:cd:42:79:2e:43:
f0:40:9b:40:8d:95:27:3f:e6:fb:7c:b4:92:de:59:
76:a1:b5:d2:ed:06:75:ae:f2:8e:2d:e3:40:1d:28:
bc:36:81:47:7e:87:b4:83:19:32:24:4b:bb:97:71:
e8:ae:25:4a:bd:45:ad:87:f8:c8:05:19:52:c1:d8:
cf:3d:fe:d8:75:88:9e:58:55:4b:d6:e4:51:e5:30:
66:71:54:de:2b:50:24:ad:44:29:be:ce:de:0b:44:
14:92:c4:2f:f1:45:c1:9f:6d:27:38:3d:5a:6e:7b:
01:92:79:08:7f:8f:73:7b:74:6a:80:9f:03:7c:87:
d9:99:fa:5a:6d:cd:4f:08:2a:29:c9:42:bf:5e:c1:
a5:c6:52:f2:aa:88:dd:64:d4:d5:5e:c7:b7:52:5c:
4a:71:e9:d6:85:3b:1c:73:b7:52:23:09:89:64:c5:
90:89:ea:ad:61:5f:f8:ed:3a:1f:45:c3:9d:09:f8:
d7:64:16:a1:de:1f:a9:07:a2:62:b8:24:4d:40:ff:
14:49:33:96:d4:dc:38:94:c3:65:52:cd:b7:65:43:
9d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B2:2A:D2:84:B5:A2:5E:59:73:2F:5D:FF:DC:93:59:60:0C:D9:99
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/crIq0oS1ol5Zcy9d_9yTWWAM2Zk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.9.24.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:25:60:37:bb:5b:38:2e:13:ca:76:d4:88:fa:39:3a:62:93:
f5:7a:60:76:b8:92:b8:f2:0d:d7:83:61:cb:ff:4d:28:0d:57:
52:a4:81:44:8e:af:53:9d:50:95:7e:36:cc:a4:09:ec:cd:b5:
ec:3c:d1:98:1a:d6:7e:c5:84:67:02:93:5f:39:da:b9:9f:d1:
d9:c2:1c:49:08:da:d4:dd:74:ad:91:81:18:6c:1c:d7:c7:6a:
08:4b:80:dc:07:00:1c:29:db:07:d9:2a:42:e5:42:d5:39:24:
87:24:c4:3b:ce:be:1f:92:6f:83:64:81:a8:b2:27:3a:ad:9c:
05:df:a4:dc:d3:bd:d0:e3:38:63:e8:05:71:b9:3f:45:e1:cd:
83:22:7c:d4:0b:89:8a:1e:ad:f1:c2:63:36:3c:ac:3e:32:f8:
d6:20:9e:6a:88:f6:7a:1e:89:cc:4e:7d:9f:09:50:ee:c8:b5:
68:7e:6d:ff:21:48:64:36:0f:87:6c:04:f5:b2:0c:1a:e9:0b:
c3:2c:59:a0:36:e9:47:25:6b:23:34:a5:22:3a:9b:ab:45:81:
32:46:cb:f6:25:df:4d:d1:03:ef:42:31:30:63:57:4c:d0:55:
fd:ff:73:18:d3:4c:fc:a9:2c:b9:23:29:3c:3e:62:48:76:70:
47:cf:04:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:33 2025 by rpki-client