Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/f3fw0gQ2R3EoRkZ_caQ7EGzvplI.roa
File: f3fw0gQ2R3EoRkZ_caQ7EGzvplI.roa (raw, json)
Hash identifier: hleQkkrOK8cE6UK/1zVm7U3cxyUUh662yKdp88kl9Os=
Subject key identifier: 7F:77:F0:D2:04:36:47:71:28:46:46:7F:71:A4:3B:10:6C:EF:A6:52
Certificate issuer: /CN=9060c6f01df85d4a033f125653e1317b6f42864e
Certificate serial: 01856B25668BDD09DFE68F13B2AABB58E31C
Authority key identifier: 90:60:C6:F0:1D:F8:5D:4A:03:3F:12:56:53:E1:31:7B:6F:42:86:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGDG8B34XUoDPxJWU-Exe29Chk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/f3fw0gQ2R3EoRkZ_caQ7EGzvplI.roa
Signing time: Sun 01 Jan 2023 02:24:51 +0000
ROA not before: Sun 01 Jan 2023 02:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210962
IP address blocks: 194.26.102.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:25:66:8b:dd:09:df:e6:8f:13:b2:aa:bb:58:e3:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9060c6f01df85d4a033f125653e1317b6f42864e
Validity
Not Before: Jan 1 02:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f77f0d2043647712846467f71a43b106cefa652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9e:cc:a0:12:f6:9e:27:7d:df:b3:4c:c8:14:
eb:1e:3f:8b:c4:43:7d:35:5d:78:3f:b1:89:d5:dd:
db:dc:7b:f2:64:93:69:c7:00:da:a9:d4:b2:64:be:
bc:07:82:45:77:c8:47:8f:6c:89:3d:39:47:c5:99:
ce:05:db:a4:4c:ca:5b:0b:74:7b:0e:2c:3c:7e:68:
d5:ea:37:f9:12:33:82:8f:bb:8e:98:10:13:7f:dc:
b6:28:71:4b:a0:d1:c3:1d:d8:e8:a6:59:1a:f8:87:
65:2b:63:1d:a9:d8:bd:85:cf:b9:69:2e:1d:d6:16:
d0:32:83:0b:cc:c6:2f:b2:e2:47:38:bb:f3:d0:ad:
dc:f0:08:57:da:4b:e4:39:bc:e5:ee:a0:14:70:4b:
19:29:49:26:43:42:d4:4b:cb:24:7e:00:9c:56:9e:
a6:fb:83:36:a2:0d:ca:91:48:3c:27:17:40:5f:4c:
23:ee:ed:08:72:21:44:c9:7e:54:0c:e3:d8:3a:d8:
c4:81:d2:5a:ae:8e:62:81:28:ac:9a:b1:cd:28:aa:
6d:42:3b:eb:44:d1:2d:27:3f:b0:60:cb:b2:b5:0f:
60:2f:0b:92:ee:36:70:4a:f6:83:30:fa:73:03:41:
9d:77:29:82:13:ac:b6:96:f8:b5:3e:44:35:06:11:
e5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:77:F0:D2:04:36:47:71:28:46:46:7F:71:A4:3B:10:6C:EF:A6:52
X509v3 Authority Key Identifier:
keyid:90:60:C6:F0:1D:F8:5D:4A:03:3F:12:56:53:E1:31:7B:6F:42:86:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGDG8B34XUoDPxJWU-Exe29Chk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/f3fw0gQ2R3EoRkZ_caQ7EGzvplI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.102.0/24
Signature Algorithm: sha256WithRSAEncryption
76:06:86:19:b3:6a:a0:34:dd:58:f2:8a:2d:a4:e0:b6:c2:5c:
a9:ca:dd:40:52:43:98:0a:3e:ac:18:b9:9e:05:d3:79:14:c2:
6f:26:c5:d6:83:eb:90:73:1c:25:21:7f:70:35:4b:3b:a8:71:
94:62:93:c9:ac:53:58:86:ac:9f:13:18:ff:52:6f:97:75:38:
00:10:bc:32:5d:17:cb:de:f3:3b:09:91:0c:99:ed:3d:6f:0c:
d4:93:92:20:ae:7a:b8:c7:e5:3b:d1:a7:79:1f:65:b8:77:73:
9e:41:04:9e:56:16:fd:4f:a0:41:83:f5:dc:7b:2a:e4:30:c1:
37:54:57:cc:70:ca:87:e3:37:e2:87:37:ce:af:cd:91:9b:31:
f5:79:a9:94:7a:5f:1e:ff:15:8a:3a:0e:92:f0:c3:a1:87:18:
91:f4:17:b9:62:f5:df:54:9c:b0:a2:22:d6:85:10:5c:bf:51:
fa:de:2f:bc:98:23:25:eb:c4:b0:00:7e:7e:ba:8d:c9:48:20:
74:8a:40:52:fb:59:ae:d5:a0:63:15:c4:1d:f8:98:cd:e8:a4:
38:5a:71:0e:8f:ba:7e:f7:2c:b0:9a:6c:0d:3b:4d:26:ce:c8:
77:0f:00:ad:0d:7a:fb:56:ca:cc:84:f6:10:9e:9e:28:d5:f9:
85:76:f2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:12 2025 by rpki-client