Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/1-BuhpWcpomuN6S1mHoh4Qql7cSg.roa
File: 1-BuhpWcpomuN6S1mHoh4Qql7cSg.roa (raw, json)
Hash identifier: O+W/Nyko1a6QYOmUjlred7qXG2yYpfxnvxcd4zpsRXc=
Subject key identifier: F8:1B:A1:A5:67:29:A2:6B:8D:E9:2D:66:1E:88:78:42:A9:7B:71:28
Certificate issuer: /CN=a082dd5b86f958d5be73fdbe3f0ccf6dff02f721
Certificate serial: 07FB1D18
Authority key identifier: A0:82:DD:5B:86:F9:58:D5:BE:73:FD:BE:3F:0C:CF:6D:FF:02:F7:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oILdW4b5WNW-c_2-PwzPbf8C9yE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/1-BuhpWcpomuN6S1mHoh4Qql7cSg.roa
Signing time: Sat 01 Jan 2022 01:56:47 +0000
ROA not before: Sat 01 Jan 2022 01:56:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50423
IP address blocks: 193.105.20.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133897496 (0x7fb1d18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a082dd5b86f958d5be73fdbe3f0ccf6dff02f721
Validity
Not Before: Jan 1 01:56:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f81ba1a56729a26b8de92d661e887842a97b7128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e6:aa:3d:d4:52:86:5b:0e:22:c5:05:32:f4:
9a:a9:1b:cf:83:e6:a2:6d:93:34:44:12:43:8d:7e:
70:97:d2:9a:96:c2:cc:1e:52:71:57:9d:09:78:67:
d4:f4:12:b9:6a:b2:5f:f8:ee:73:64:bf:45:29:6a:
2e:0c:11:b2:d5:22:b7:33:0a:34:d0:3b:99:52:ae:
c5:42:58:8b:c2:a8:2a:9f:29:df:d8:2b:27:7c:f6:
8d:13:2f:52:39:01:c8:fb:f2:23:ba:df:cb:09:d3:
20:3a:ff:70:d5:6d:1b:62:6c:e6:a9:96:0f:e1:62:
6b:bb:e4:9e:a1:72:07:8f:94:14:35:bf:13:fa:08:
ea:c0:12:ea:2a:4f:15:c0:6a:64:36:aa:17:d8:dd:
06:9c:a7:3c:a5:dc:a2:57:d8:a0:16:62:ae:f3:63:
8e:37:64:2a:85:6d:3c:04:6a:2c:de:59:56:5b:6c:
8c:88:09:bf:e3:ed:a3:07:7e:3a:77:08:b4:d5:a1:
5e:71:82:24:ad:f7:0a:20:c0:57:05:e1:2e:f1:34:
7a:a2:92:65:fc:7a:6c:99:10:da:14:15:d0:14:81:
58:6f:17:84:27:ba:bf:97:b3:33:d2:08:7e:9f:73:
34:45:0c:2c:95:10:11:a8:d9:1e:0d:03:5e:12:fa:
40:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:1B:A1:A5:67:29:A2:6B:8D:E9:2D:66:1E:88:78:42:A9:7B:71:28
X509v3 Authority Key Identifier:
keyid:A0:82:DD:5B:86:F9:58:D5:BE:73:FD:BE:3F:0C:CF:6D:FF:02:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oILdW4b5WNW-c_2-PwzPbf8C9yE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/1-BuhpWcpomuN6S1mHoh4Qql7cSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.20.0/24
Signature Algorithm: sha256WithRSAEncryption
23:25:20:5d:e4:e4:a6:60:7f:0d:7f:d0:5e:e5:97:ce:5e:d1:
73:c8:4a:60:65:5a:c8:7e:22:ff:59:7c:86:cd:75:1b:3e:e1:
1b:25:ff:bd:09:24:ce:bc:bd:b6:23:bd:55:80:78:7d:c7:82:
61:c2:ed:bd:a6:6f:90:27:87:4e:f0:62:c7:c2:8f:d6:93:a3:
06:2e:55:62:d8:e1:8b:76:eb:21:7b:c8:2a:1c:4a:91:97:ac:
e6:a7:7c:b4:70:1f:69:c1:c3:b8:66:5b:70:31:4f:d2:1c:88:
3c:05:e4:2d:f7:d6:dd:5a:f9:53:67:f7:f2:31:10:58:91:c9:
68:cb:1d:2c:40:0a:53:88:93:b0:98:00:a8:2c:89:6e:be:e8:
eb:9f:36:70:e1:3c:a9:c6:8d:4f:d9:71:2e:40:55:04:af:d7:
50:32:c1:d6:90:4e:e1:17:76:10:78:bd:a5:3a:d0:f3:b1:d2:
20:6a:e1:bf:2c:74:9b:2e:52:7d:7e:3e:44:d9:db:13:c1:e2:
e4:a4:03:e3:d5:ef:96:5b:d9:60:f7:94:18:a9:c6:dd:38:90:
b8:9f:a7:e0:a2:97:89:a8:98:bf:a4:74:01:68:09:07:45:58:
e8:bc:f8:a1:2e:1b:8f:ff:90:6d:2f:ef:26:8e:1f:c7:dc:f1:
65:f0:cb:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:33 2025 by rpki-client