Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a721a0-edba-476d-8be3-141422940385/1/T0cciEOwlpgTE9DNhyxJarYUXZA.roa
File: T0cciEOwlpgTE9DNhyxJarYUXZA.roa (raw, json)
Hash identifier: F/LIsBrVp20jnUBSe3zH2lihW+N6F/4sedDntFCjP8U=
Subject key identifier: 4F:47:1C:88:43:B0:96:98:13:13:D0:CD:87:2C:49:6A:B6:14:5D:90
Certificate issuer: /CN=3b363e09bd6942adab42415999f979990ab96682
Certificate serial: 018573313B0725707DDD047792F25D4A0DAA
Authority key identifier: 3B:36:3E:09:BD:69:42:AD:AB:42:41:59:99:F9:79:99:0A:B9:66:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a721a0-edba-476d-8be3-141422940385/1/T0cciEOwlpgTE9DNhyxJarYUXZA.roa
Signing time: Mon 02 Jan 2023 15:54:44 +0000
ROA not before: Mon 02 Jan 2023 15:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211140
IP address blocks: 149.255.184.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:31:3b:07:25:70:7d:dd:04:77:92:f2:5d:4a:0d:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b363e09bd6942adab42415999f979990ab96682
Validity
Not Before: Jan 2 15:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f471c8843b096981313d0cd872c496ab6145d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:87:43:f8:cc:78:56:9f:33:e1:77:24:58:2d:
a8:e6:34:92:14:8c:b5:51:cb:9e:90:1f:10:3a:69:
81:f1:43:7f:b2:c1:f7:c1:20:50:07:57:01:54:2b:
e7:01:8d:10:87:ac:16:28:e6:7c:56:52:0e:7f:77:
c9:88:c4:dd:ce:b2:09:c4:f8:14:2a:a6:5e:3e:55:
6e:a5:05:ed:2f:a7:d2:f3:97:b2:12:1c:98:dd:61:
1b:c4:fd:a8:d1:ea:c5:99:d8:d5:65:8c:cf:fc:65:
7e:2f:0c:e7:14:2b:d9:e4:11:72:95:24:c3:5c:55:
fd:31:59:6c:0c:be:b6:e2:b1:44:a3:a9:dc:fc:cc:
2b:1e:53:56:5a:66:f0:cf:9e:e8:05:2a:a6:3e:f3:
10:0c:94:4a:bd:57:5e:1b:75:c7:d3:bb:d6:1a:f1:
f4:79:1d:5d:84:9a:ff:a9:ed:3a:f0:8f:9d:2f:94:
69:93:3f:80:2b:31:b1:8a:41:b9:1a:b3:53:f4:b0:
3b:8a:1a:71:4d:22:5f:0b:d9:28:39:a3:4e:4c:af:
5a:2c:10:85:23:e3:29:1c:f6:21:fb:1c:a8:99:87:
69:7d:c5:b4:18:20:12:19:55:61:37:d9:a8:42:94:
6d:93:93:39:ed:4a:2e:bf:d8:49:81:ad:8e:2c:57:
3c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:47:1C:88:43:B0:96:98:13:13:D0:CD:87:2C:49:6A:B6:14:5D:90
X509v3 Authority Key Identifier:
keyid:3B:36:3E:09:BD:69:42:AD:AB:42:41:59:99:F9:79:99:0A:B9:66:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a721a0-edba-476d-8be3-141422940385/1/T0cciEOwlpgTE9DNhyxJarYUXZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a721a0-edba-476d-8be3-141422940385/1/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.255.184.0/21
Signature Algorithm: sha256WithRSAEncryption
03:49:3f:4a:d3:37:9b:a8:12:7c:12:63:cc:40:61:c8:33:33:
d8:34:c3:2a:62:10:0b:8b:26:b8:6a:ea:62:fb:c3:78:86:03:
89:97:d1:34:bd:a6:26:8f:ff:df:7d:c3:08:fa:a2:d1:32:3f:
8d:89:f5:12:a8:db:29:99:d8:92:9c:92:ec:bf:43:86:af:fd:
46:5a:d1:51:22:40:cc:9f:4b:3b:27:d3:4b:c9:77:d7:92:97:
15:e0:b1:6c:3e:be:21:8d:3a:a1:c2:69:e2:29:17:25:ad:f4:
64:9e:86:9b:fb:18:89:5e:12:32:59:3b:c3:b0:af:07:4f:e6:
c8:44:aa:52:1c:0c:01:6b:53:ee:42:86:ea:dd:51:d2:d8:85:
07:e4:75:ba:8d:44:4d:99:a4:6c:93:c2:db:71:7b:f0:52:0a:
79:39:0c:d9:23:9d:e4:c6:4a:54:f5:83:74:33:d2:e7:e1:d9:
5f:31:ac:cd:37:85:4d:57:66:27:63:7e:63:9e:ac:66:3a:e7:
c9:06:30:f8:51:6e:df:dd:9e:e2:27:16:67:f5:b7:13:0a:70:
9a:e9:a7:e4:ea:6f:13:de:f2:b0:44:d4:ec:8a:c7:71:0f:6d:
7f:6a:c0:db:6c:17:c0:da:74:ae:16:df:02:d4:02:0f:15:c7:
3e:79:13:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:52:46 2025 by rpki-client