Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/rDB0mPiqrMmDKuxalXG83tzC3KU.roa
File: rDB0mPiqrMmDKuxalXG83tzC3KU.roa (raw, json)
Hash identifier: pCsxt2858H8H9eRcCcJvPBCEHMWc+kFa/hv9vS5YXU8=
Subject key identifier: AC:30:74:98:F8:AA:AC:C9:83:2A:EC:5A:95:71:BC:DE:DC:C2:DC:A5
Certificate issuer: /CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
Certificate serial: 411C7CC8
Authority key identifier: E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/rDB0mPiqrMmDKuxalXG83tzC3KU.roa
Signing time: Thu 03 Feb 2022 08:48:59 +0000
ROA not before: Thu 03 Feb 2022 08:48:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1759
IP address blocks: 194.188.145.0/24 maxlen: 24
192.126.64.0/24 maxlen: 24
192.126.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1092385992 (0x411c7cc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
Validity
Not Before: Feb 3 08:48:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ac307498f8aaacc9832aec5a9571bcdedcc2dca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:23:81:7d:4c:c4:be:d8:4b:a9:60:1c:f8:c5:
61:43:51:ff:d6:90:d3:46:58:93:d2:71:b9:56:95:
d9:99:dd:fa:5a:98:2d:e5:20:05:b4:f4:1c:ce:dd:
02:d6:9b:1a:4c:38:c6:37:4d:df:05:b0:b2:61:c7:
ca:7b:01:29:cd:72:a0:75:86:bb:8d:fd:ab:af:9c:
2e:d7:87:1b:1f:74:e2:50:f7:f7:cf:46:5d:34:b3:
7d:c3:7e:cc:bb:73:8e:e9:0c:96:e9:e2:d8:c2:3e:
a7:03:ec:58:f4:3d:ce:b9:e6:85:0f:9a:b6:5b:e2:
46:7b:1b:b3:e4:80:a2:48:21:e0:ee:9b:f1:77:64:
e1:50:d9:b1:01:eb:a4:68:c6:d2:17:ba:91:5e:2a:
e9:86:2e:46:29:1f:a8:8c:e1:5a:0b:d5:46:90:c2:
a4:44:c9:4f:53:88:e8:6f:68:33:51:b2:01:b9:d3:
cb:1a:d6:f4:c5:fe:7d:47:06:14:89:63:4a:4b:86:
66:3c:8a:01:92:4d:be:22:05:5f:ca:8a:e0:6f:a3:
f1:a3:0f:17:eb:5c:f8:94:6b:b8:7f:14:60:de:69:
36:48:64:c2:1f:e2:b0:82:fc:56:06:47:f5:80:74:
d6:99:76:72:2f:56:91:70:bf:7c:73:30:78:0d:8b:
8b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:30:74:98:F8:AA:AC:C9:83:2A:EC:5A:95:71:BC:DE:DC:C2:DC:A5
X509v3 Authority Key Identifier:
keyid:E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/rDB0mPiqrMmDKuxalXG83tzC3KU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.126.63.0-192.126.64.255
194.188.145.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:79:cb:45:5e:e4:7b:c5:48:6d:69:f1:95:ec:28:24:01:00:
a1:f9:c3:e8:13:b6:3e:3a:ba:0b:8a:dc:16:42:1e:6a:2e:b4:
73:d9:b1:f5:56:e5:a0:d1:ed:97:0b:65:51:b1:01:0e:9a:1c:
33:13:ff:52:10:63:c3:c1:62:86:c5:cb:c4:5a:74:63:68:59:
17:56:3d:2d:1e:ab:36:45:66:4b:54:f8:98:49:40:de:36:dd:
8e:ce:c4:e4:98:26:c9:e6:d5:d7:cb:70:3a:c7:89:95:63:ef:
9b:8c:64:80:17:b8:3d:a5:41:f8:b5:d6:17:50:cf:e1:8d:6e:
f9:28:31:c6:74:a6:23:9c:14:11:12:fc:d3:a4:5e:96:f1:2f:
56:79:fe:5c:d4:10:9c:66:7c:ee:98:5d:aa:37:e3:18:3d:aa:
e4:82:50:78:f6:71:ec:74:43:b4:fb:f5:17:7c:33:98:ba:32:
69:bb:20:19:5c:26:02:66:f1:f6:df:13:f4:6e:d2:c2:a1:eb:
66:69:b2:59:32:5c:4c:d1:45:c1:bf:d5:82:2d:42:e5:8d:9e:
8a:ef:ca:54:b2:14:9f:b9:ae:81:cf:bd:ed:f0:17:de:88:a1:
52:e0:7c:ee:6a:45:4f:c4:e4:cb:87:34:41:68:81:9b:07:0a:
6e:df:ab:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:56 2025 by rpki-client