Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/oVAdKI-jMnuej2eQAUvB0QXaP1U.roa
File: oVAdKI-jMnuej2eQAUvB0QXaP1U.roa (raw, json)
Hash identifier: X/8Jk6oBZW7REY4tJ5TvHYCJZ6GYJoQ2gIGW8HBgn8E=
Subject key identifier: A1:50:1D:28:8F:A3:32:7B:9E:8F:67:90:01:4B:C1:D1:05:DA:3F:55
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 018A96DF77147C81A777FB9497DB740A926B
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/oVAdKI-jMnuej2eQAUvB0QXaP1U.roa
Signing time: Fri 15 Sep 2023 03:25:42 +0000
ROA not before: Fri 15 Sep 2023 03:25:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 109.203.168.0/21 maxlen: 24
94.74.152.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:96:df:77:14:7c:81:a7:77:fb:94:97:db:74:0a:92:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Sep 15 03:25:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a1501d288fa3327b9e8f6790014bc1d105da3f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:59:27:ca:d7:ab:38:f4:d2:5f:9e:85:b7:9d:
eb:b1:a8:d2:18:f1:f9:9a:8f:43:0b:38:25:3a:2e:
d8:85:c7:a4:f3:c8:b3:da:32:e7:0a:d1:67:b5:02:
60:a4:89:ff:5a:f0:32:3c:7d:e9:4c:0a:ac:c2:e9:
25:0e:4e:f3:33:84:44:69:1e:7e:93:4d:e4:a4:4b:
36:23:a2:1a:b2:30:a4:cf:9f:6b:44:98:e6:7b:d0:
c7:8c:dd:b2:1e:fb:2d:ad:53:61:2d:3a:76:eb:3f:
d5:37:62:cd:bb:32:fb:93:8e:a1:bc:51:3b:6a:2b:
0f:43:8d:62:cc:f9:94:b4:bd:9c:b9:96:65:b7:19:
c1:50:1b:8e:7f:c0:12:ec:5e:9a:7f:59:b7:cb:72:
3e:14:27:32:b3:c3:44:d4:99:3f:fb:22:c0:14:55:
f6:06:7d:bc:6a:e1:26:da:cb:9c:47:e4:34:09:ae:
6f:f1:1c:91:bf:b2:b3:e6:e5:e7:8e:00:e9:9b:53:
8e:d2:0d:6b:25:73:2a:e6:d0:12:7b:96:35:6a:7b:
79:7a:70:f8:c1:29:7a:75:81:31:9a:2a:2e:32:23:
4f:68:c4:cf:99:c1:a6:76:3b:24:48:bf:84:74:7d:
62:ef:d7:b7:47:85:ce:99:82:d4:2c:f3:96:a5:63:
f2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:50:1D:28:8F:A3:32:7B:9E:8F:67:90:01:4B:C1:D1:05:DA:3F:55
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/oVAdKI-jMnuej2eQAUvB0QXaP1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.74.152.0/22
109.203.168.0/21
Signature Algorithm: sha256WithRSAEncryption
64:c3:0d:58:88:72:88:76:58:af:5f:98:bc:a8:f6:d6:13:04:
cf:a5:6e:44:00:16:35:91:cf:5f:ee:a4:82:65:06:1f:9a:4f:
1c:c5:bf:2a:66:99:38:e9:a0:76:b9:e7:45:12:69:a2:a3:d5:
7f:17:84:7b:d1:2a:4a:66:28:ee:e2:3e:f5:f6:d8:76:d7:38:
ec:60:6a:44:f1:db:db:41:62:fa:8f:a6:bb:f1:87:47:a4:03:
33:1d:d4:9a:ef:7d:4f:74:4c:b9:7d:15:e4:f1:6e:45:4a:1c:
79:8e:17:40:b8:cb:ff:d3:cd:c2:19:76:49:ca:c6:f1:b7:57:
53:8c:d6:b7:d5:40:60:57:69:35:50:d7:78:7a:2f:7a:8b:3c:
12:b8:09:8c:a8:d2:5f:90:19:4e:78:a7:f0:c0:6d:e9:33:ab:
32:3f:7a:e1:d9:69:0d:3b:64:e3:7b:03:2a:94:4e:37:9c:83:
27:7f:a7:45:7e:66:65:b9:12:93:bd:d8:33:e6:c4:6d:5c:97:
de:ad:ec:44:43:ce:b0:ba:9c:0c:da:c8:ff:16:1a:32:10:91:
de:ca:f3:d3:50:69:dd:03:4d:4d:e9:8e:e7:74:72:61:2c:e5:
0f:af:56:24:f1:87:b3:07:9d:9f:d1:ee:97:23:09:45:c5:55:
a6:8e:9b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:08 2025 by rpki-client