Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/irbG7kmyoBYaxeP1_r2rI8FyCVI.roa
File: irbG7kmyoBYaxeP1_r2rI8FyCVI.roa (raw, json)
Hash identifier: 9eOVMZzv31k4mhPbx9+8Hf1pEUpynLQcdh5yG803Cic=
Subject key identifier: 8A:B6:C6:EE:49:B2:A0:16:1A:C5:E3:F5:FE:BD:AB:23:C1:72:09:52
Certificate issuer: /CN=d2c2b0ee187928409065d19ee9c0858e8c17ea13
Certificate serial: 01856DE641F7B0AB1FB3562887D5C6B822DF
Authority key identifier: D2:C2:B0:EE:18:79:28:40:90:65:D1:9E:E9:C0:85:8E:8C:17:EA:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/irbG7kmyoBYaxeP1_r2rI8FyCVI.roa
Signing time: Sun 01 Jan 2023 15:14:44 +0000
ROA not before: Sun 01 Jan 2023 15:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210004
IP address blocks: 194.0.5.0/24 maxlen: 24
2001:678:8::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:e6:41:f7:b0:ab:1f:b3:56:28:87:d5:c6:b8:22:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c2b0ee187928409065d19ee9c0858e8c17ea13
Validity
Not Before: Jan 1 15:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ab6c6ee49b2a0161ac5e3f5febdab23c1720952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fb:27:30:76:b7:9f:3a:36:f5:16:b6:83:2e:
fd:63:13:f0:68:08:a5:14:1a:fa:c9:40:68:10:7a:
d1:30:97:78:3c:9f:a5:41:dd:2f:60:98:7f:04:5a:
78:a1:61:35:11:70:ce:dd:83:55:80:96:a6:1f:dc:
8a:1e:88:6e:ad:09:32:f4:39:c7:da:1e:d5:d0:8a:
9d:52:bb:73:1b:3d:c5:f7:79:b3:02:0f:d0:8a:45:
f8:5d:68:cc:9d:1a:7e:55:fb:b9:14:f7:32:c9:b6:
38:7e:49:f6:2b:d2:4e:f8:41:4e:de:7f:6a:6e:74:
38:91:e4:49:73:9f:9a:c6:9e:7e:2a:bd:dd:29:23:
27:2f:d5:62:8a:67:58:37:4b:90:30:b1:ab:aa:1e:
e5:7c:22:e5:26:d1:06:18:98:82:d5:dd:32:0f:6a:
3b:a5:7a:85:20:d2:55:5d:58:91:37:32:54:e8:66:
4f:79:fb:1d:5c:d1:8c:d6:9f:3c:ac:67:bc:d6:6c:
ed:32:b8:69:cb:c2:81:cb:27:dc:ee:94:3e:e9:b2:
79:b6:e6:e5:08:ed:82:72:9e:ab:bc:1a:d9:58:e5:
90:4c:d8:c2:ad:d8:55:66:34:25:b2:c0:52:ed:e8:
11:a9:bb:fc:01:f2:41:86:cc:05:4c:5c:77:2d:f7:
29:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B6:C6:EE:49:B2:A0:16:1A:C5:E3:F5:FE:BD:AB:23:C1:72:09:52
X509v3 Authority Key Identifier:
keyid:D2:C2:B0:EE:18:79:28:40:90:65:D1:9E:E9:C0:85:8E:8C:17:EA:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/irbG7kmyoBYaxeP1_r2rI8FyCVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.5.0/24
IPv6:
2001:678:8::/48
Signature Algorithm: sha256WithRSAEncryption
6e:8a:3f:f9:24:50:04:76:f5:59:eb:1a:dc:12:1d:8e:e2:4c:
dd:af:7b:96:68:bf:9a:28:53:13:2a:c8:a7:6b:6f:73:c2:01:
b5:a6:89:e4:d8:c8:3e:46:ad:f1:52:57:17:10:93:c9:9e:84:
ec:17:c0:dc:9b:2e:3d:b9:e1:c6:68:7a:2a:c3:5a:7a:34:15:
70:49:f3:0a:4d:9c:00:17:2d:af:a6:f9:37:a2:e1:26:4c:1d:
d7:92:fb:7c:c5:13:7e:40:07:3c:a5:54:62:6d:bb:e3:08:f8:
1f:ae:70:5a:3c:98:2d:87:f3:93:e2:30:77:8e:98:82:c5:d7:
96:a3:bf:92:39:51:c4:17:aa:42:68:9d:86:ab:b6:3d:e3:87:
9a:1e:4d:d2:4d:59:f7:a4:04:71:ac:89:6c:7f:49:b9:b2:34:
f9:3b:ae:58:29:e5:e9:d0:37:9c:a4:cd:21:75:3d:1d:02:54:
61:8c:bc:31:54:db:ee:84:3c:d6:9c:1b:11:db:63:42:57:3e:
75:65:b4:f0:02:8e:49:4e:f6:c2:7c:f0:34:f8:b2:68:5d:7e:
61:34:7a:c9:a9:e4:7d:db:12:d0:04:1a:28:7a:d7:46:d2:bf:
10:a5:a5:6a:9a:83:a1:f6:4e:4f:2b:77:58:3e:a5:58:59:e9:
a3:99:cb:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 16:40:32 2025 by rpki-client