Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/cf4aa6-28ca-4e71-8aaa-3cc592898789/1/rra5amHYYrJVzArSO7mOol-YGLU.roa
File: rra5amHYYrJVzArSO7mOol-YGLU.roa (raw, json)
Hash identifier: 0XbZk4oeaF5yyC6YephMCWP8hv2UBujmXK9jJ5PLNks=
Subject key identifier: AE:B6:B9:6A:61:D8:62:B2:55:CC:0A:D2:3B:B9:8E:A2:5F:98:18:B5
Certificate issuer: /CN=3a7cb592d7e4ec71b67855d1dfc55d9d06705471
Certificate serial: 01856B89FAC108A0A1A53BDAB1887DC91E80
Authority key identifier: 3A:7C:B5:92:D7:E4:EC:71:B6:78:55:D1:DF:C5:5D:9D:06:70:54:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ony1ktfk7HG2eFXR38VdnQZwVHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/cf4aa6-28ca-4e71-8aaa-3cc592898789/1/rra5amHYYrJVzArSO7mOol-YGLU.roa
Signing time: Sun 01 Jan 2023 04:14:42 +0000
ROA not before: Sun 01 Jan 2023 04:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3303
IP address blocks: 193.247.128.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:89:fa:c1:08:a0:a1:a5:3b:da:b1:88:7d:c9:1e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a7cb592d7e4ec71b67855d1dfc55d9d06705471
Validity
Not Before: Jan 1 04:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aeb6b96a61d862b255cc0ad23bb98ea25f9818b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e8:cb:73:24:67:f7:d4:84:c9:32:97:f2:3c:
4a:25:e0:24:d0:15:7e:59:88:77:d9:fe:39:1a:b8:
bb:aa:03:d5:44:55:33:fb:59:9b:71:28:83:c8:0d:
02:f6:1a:6b:7c:3b:a2:76:7c:60:09:b1:a3:b5:79:
d6:a1:bc:af:e4:c0:21:fc:00:6e:16:60:c5:52:cd:
ac:ba:60:8c:9d:bc:be:17:b0:e7:81:ad:25:05:11:
1a:99:c7:66:12:b7:b1:7f:e1:11:1d:af:fb:e8:83:
3c:76:9f:48:06:81:22:ad:50:28:34:e5:29:18:90:
b2:2e:8c:3a:f7:65:e4:02:d1:a7:42:1c:c1:69:24:
e1:9e:57:8b:85:12:72:2f:86:cc:5e:ee:2d:8c:cc:
62:05:3f:31:01:64:ee:3f:ff:91:14:d3:e4:8b:48:
80:12:a1:77:6b:56:9c:26:f5:50:59:8a:c1:23:9d:
2b:d3:c5:e2:ab:7f:09:20:df:88:0c:0e:9d:c2:49:
eb:7b:b6:07:40:c7:c2:44:f6:d1:ea:6a:4d:58:af:
8d:4c:50:23:17:f2:c8:10:a3:4d:11:cf:39:d6:31:
d1:35:2f:b1:61:72:aa:40:97:39:b7:fd:78:80:0b:
98:81:09:49:ae:b5:2f:11:25:a0:58:82:c3:6d:db:
20:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B6:B9:6A:61:D8:62:B2:55:CC:0A:D2:3B:B9:8E:A2:5F:98:18:B5
X509v3 Authority Key Identifier:
keyid:3A:7C:B5:92:D7:E4:EC:71:B6:78:55:D1:DF:C5:5D:9D:06:70:54:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ony1ktfk7HG2eFXR38VdnQZwVHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/cf4aa6-28ca-4e71-8aaa-3cc592898789/1/rra5amHYYrJVzArSO7mOol-YGLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/cf4aa6-28ca-4e71-8aaa-3cc592898789/1/Ony1ktfk7HG2eFXR38VdnQZwVHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.128.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:50:d6:eb:19:4b:3c:a4:8f:87:ca:1f:3e:08:53:07:1a:98:
eb:81:18:34:c6:4e:d9:68:03:7a:86:58:11:7c:5c:30:c0:1b:
3e:0e:47:af:13:c6:1c:ed:01:75:92:26:08:e4:cc:f6:d2:6d:
f3:68:b9:8b:66:63:80:d7:63:c4:6b:9b:fa:01:22:14:6c:89:
da:3e:b9:ac:56:85:1e:b3:23:e8:37:06:63:89:dc:32:13:20:
f7:68:58:91:b8:0d:9a:7b:01:d2:d5:f2:e7:7d:3e:ec:07:25:
f4:c7:4a:23:fb:5d:24:c1:ae:ed:87:b2:8f:e0:5e:6e:5d:36:
df:3a:8a:db:ee:cb:40:b2:85:80:48:95:1e:0a:30:83:4f:c2:
74:9e:fe:78:5b:c9:dd:5d:e5:03:85:60:c3:a9:2d:dc:19:60:
6d:96:c7:9b:c0:9d:3a:64:db:1a:a9:ee:4a:e1:65:e4:98:ce:
9c:2b:71:64:55:9a:9c:64:6c:46:90:58:00:49:d9:db:0a:30:
c1:0c:f3:44:79:11:6c:44:5f:3a:4c:07:13:f9:51:57:54:a6:
42:62:71:b9:06:17:6f:48:9e:62:46:eb:c0:fc:ed:15:f8:2f:
84:f3:36:42:90:15:22:2b:f6:fb:26:fc:ba:35:ae:b4:47:fb:
2e:a2:01:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:53 2025 by rpki-client