Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1wAMogdddzeROruboVnKOLoFMLQ.roa
File: 1wAMogdddzeROruboVnKOLoFMLQ.roa (raw, json)
Hash identifier: UYXeCvowh2z8AxJj8RWO1z97WcGzoRQ+yRaRvkte8DM=
Subject key identifier: D7:00:0C:A2:07:5D:77:37:91:3A:BB:9B:A1:59:CA:38:BA:05:30:B4
Certificate issuer: /CN=d484e0cee575c619053f8ee2b1004cc442fd2ced
Certificate serial: 01856BF7DD5FBEBFEC42987C008175DB321E
Authority key identifier: D4:84:E0:CE:E5:75:C6:19:05:3F:8E:E2:B1:00:4C:C4:42:FD:2C:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ITgzuV1xhkFP47isQBMxEL9LO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1wAMogdddzeROruboVnKOLoFMLQ.roa
Signing time: Sun 01 Jan 2023 06:14:44 +0000
ROA not before: Sun 01 Jan 2023 06:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31027
IP address blocks: 193.163.222.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:f7:dd:5f:be:bf:ec:42:98:7c:00:81:75:db:32:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d484e0cee575c619053f8ee2b1004cc442fd2ced
Validity
Not Before: Jan 1 06:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7000ca2075d7737913abb9ba159ca38ba0530b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d0:92:ad:4b:6d:36:ff:e6:e2:af:22:25:71:
8a:10:bd:06:bf:4e:45:7a:a6:82:1a:ed:4e:74:1e:
4e:01:2c:5a:c2:ec:1a:82:d1:dd:a1:b3:c6:9e:4b:
a0:9a:2f:0c:06:84:b5:18:3b:17:cf:f6:5b:f8:9e:
b5:af:8f:60:f3:1f:1f:9c:4c:fa:da:73:07:97:a6:
8c:f3:ba:fc:ac:32:06:7d:d7:5d:6d:d8:b2:d8:63:
d5:17:9a:c9:b2:2d:58:95:d2:0d:f1:37:2b:3c:35:
af:64:80:3f:f3:c5:d7:c0:f2:d8:b1:5d:0f:e1:97:
21:45:47:1f:04:1d:25:5e:85:a0:ea:3f:95:ce:71:
8c:a7:5c:3f:71:01:bf:d0:51:65:e3:1a:89:b2:33:
00:64:53:31:e8:59:8c:1b:38:f1:ce:04:72:ce:e9:
81:eb:d8:c1:2e:50:ca:ab:fc:5c:31:47:b3:b7:85:
a4:7d:3c:2c:85:9d:bb:a3:20:8d:21:e7:f6:63:18:
30:a7:ce:82:e0:89:55:a6:79:06:f4:bf:1a:d9:08:
b3:67:65:87:1c:50:3e:2d:d6:90:a5:d8:ef:b4:d0:
a1:09:2e:8d:ac:14:fb:0e:b8:68:41:2f:3c:3e:95:
31:ed:6c:8b:39:6b:af:6b:28:48:6f:17:e2:67:1d:
53:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:00:0C:A2:07:5D:77:37:91:3A:BB:9B:A1:59:CA:38:BA:05:30:B4
X509v3 Authority Key Identifier:
keyid:D4:84:E0:CE:E5:75:C6:19:05:3F:8E:E2:B1:00:4C:C4:42:FD:2C:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ITgzuV1xhkFP47isQBMxEL9LO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1wAMogdddzeROruboVnKOLoFMLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.222.0/24
Signature Algorithm: sha256WithRSAEncryption
67:39:03:a9:27:b5:44:8a:14:9e:9d:77:41:73:05:85:76:15:
94:39:c5:c9:1e:5c:13:5f:de:a6:d7:99:57:f2:9e:b0:dd:c2:
8c:c5:b0:22:cd:aa:21:b3:8f:15:e6:dd:61:20:9d:a2:d0:5a:
bc:47:49:2a:c8:a4:9a:8b:3e:03:b4:a3:18:e9:64:55:6c:fe:
c0:44:6f:f6:96:c4:be:be:c5:9c:14:c8:1c:81:33:63:93:d6:
c1:f2:1a:21:52:fa:c6:3e:c7:76:a9:15:0a:67:55:da:23:91:
c6:76:86:cd:55:00:ce:bf:17:9e:14:c8:70:1e:5e:c2:8e:47:
8e:94:5a:9e:2b:df:2a:19:31:1c:7d:f2:95:5d:87:8f:b8:44:
1a:f7:8c:79:b4:d6:90:a0:53:72:e3:d6:f4:ae:63:03:0f:8b:
2d:62:af:51:a2:6e:cf:01:6f:70:33:3c:be:16:2f:07:1e:a2:
c0:35:4f:02:db:45:5e:22:e0:8e:ef:16:e5:04:71:0b:f4:06:
01:b9:c8:50:7f:8a:db:2b:c8:b7:6a:7c:62:45:0a:8c:8a:ef:
05:e4:37:e8:da:09:7f:9a:6f:4e:7d:bb:ce:4f:b0:fe:60:52:
d1:50:19:bb:38:26:72:58:d5:41:96:7a:40:21:49:6d:78:7b:
e3:e4:6f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:34:43 2025 by rpki-client