Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/PrNBatyNAVP3RIoByOKKmv8VlyU.roa
File: PrNBatyNAVP3RIoByOKKmv8VlyU.roa (raw, json)
Hash identifier: qseZPjWpe30C53om2EaKkHQb2vNHcAk587ZwwC4HsA4=
Subject key identifier: 3E:B3:41:6A:DC:8D:01:53:F7:44:8A:01:C8:E2:8A:9A:FF:15:97:25
Certificate issuer: /CN=826be1fb71af48d6b318510aa8bdf9a815f33db8
Certificate serial: 01856E6663293EB92F85504034344A17393E
Authority key identifier: 82:6B:E1:FB:71:AF:48:D6:B3:18:51:0A:A8:BD:F9:A8:15:F3:3D:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmvh-3GvSNazGFEKqL35qBXzPbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/PrNBatyNAVP3RIoByOKKmv8VlyU.roa
Signing time: Sun 01 Jan 2023 17:34:41 +0000
ROA not before: Sun 01 Jan 2023 17:34:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62563
IP address blocks: 192.166.226.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:66:63:29:3e:b9:2f:85:50:40:34:34:4a:17:39:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826be1fb71af48d6b318510aa8bdf9a815f33db8
Validity
Not Before: Jan 1 17:34:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3eb3416adc8d0153f7448a01c8e28a9aff159725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a6:5b:84:d4:a2:12:c2:3b:19:7d:6c:a6:94:
bc:a6:61:98:dd:62:59:71:06:91:55:a9:00:c2:4b:
af:09:9a:e0:93:72:b2:7e:2a:70:92:77:ab:51:bf:
64:d9:1b:76:d2:cd:01:f0:f0:e4:ec:24:39:06:78:
41:a9:de:98:78:a8:b2:0a:ed:b6:db:38:f6:9e:1b:
f4:b5:b4:06:a5:2c:7a:34:d0:b8:06:1e:5e:03:fe:
ec:bc:46:28:67:aa:59:1c:51:4a:cd:af:22:9b:17:
df:03:bc:cf:d2:af:44:5d:c7:13:56:1c:da:bc:f5:
70:bb:d7:60:09:b2:f2:1e:85:cc:fe:65:87:ab:bc:
c4:2f:15:41:96:cb:a2:4b:b1:0e:da:05:15:a3:bd:
14:ff:5c:f8:bb:5b:72:70:8e:d2:bf:5a:7c:83:d0:
58:a8:39:dc:2a:87:6b:e0:25:3e:27:44:3b:e1:75:
79:e8:17:6e:8c:6f:53:59:e7:34:67:89:8c:e5:9f:
82:70:e3:e8:86:79:80:62:cc:07:e8:6b:6c:4c:ef:
60:01:88:3e:2b:4e:c2:e5:c7:f8:c6:09:13:08:ad:
8f:09:33:e6:cf:e9:f6:59:aa:eb:f3:c1:7c:1d:e1:
be:1c:75:2d:72:d3:6c:2d:dd:fb:61:ce:5a:15:1a:
c4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B3:41:6A:DC:8D:01:53:F7:44:8A:01:C8:E2:8A:9A:FF:15:97:25
X509v3 Authority Key Identifier:
keyid:82:6B:E1:FB:71:AF:48:D6:B3:18:51:0A:A8:BD:F9:A8:15:F3:3D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmvh-3GvSNazGFEKqL35qBXzPbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/PrNBatyNAVP3RIoByOKKmv8VlyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/gmvh-3GvSNazGFEKqL35qBXzPbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.166.226.0/24
Signature Algorithm: sha256WithRSAEncryption
47:46:d3:8a:33:68:42:68:2e:3b:37:50:51:7a:3d:34:1e:a1:
bd:3d:38:b0:bb:92:f4:09:c2:e3:45:96:65:40:7a:44:a2:f3:
a3:08:26:77:75:e6:21:cb:79:ad:d0:09:64:b7:48:38:af:71:
d4:2e:2c:59:92:54:97:7b:b5:f5:34:a8:9d:bb:94:62:d9:08:
3f:43:24:22:76:4e:9f:7f:80:26:0a:ea:b4:59:c0:d3:af:0a:
a5:92:b3:cc:ab:3c:54:c9:1b:41:63:7e:cc:7a:08:47:2b:d9:
a8:ba:05:d3:c2:1a:ec:22:92:1e:b4:58:d1:ad:6d:fe:3f:4f:
42:be:93:64:bd:3d:be:fc:c9:99:b8:8a:8f:75:26:f4:fb:69:
ec:a2:4f:93:08:41:0f:1f:48:d6:87:50:22:9a:0c:59:83:7b:
44:b3:d2:86:ed:5b:d9:83:18:7f:fd:aa:06:e5:d8:c0:72:e2:
3c:06:6e:97:6a:b7:e5:cc:21:57:ef:b1:d0:42:7e:47:ae:5a:
5d:ee:b1:4d:11:1f:b0:99:02:f3:37:7c:37:2b:57:2b:d7:21:
08:80:0f:d0:33:de:71:ee:0d:6b:9e:44:8c:1d:81:df:2b:42:
17:c0:3e:d2:b9:94:33:4b:f7:f4:da:9c:e2:c6:2a:93:9c:08:
b7:c0:41:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:26:51 2025 by rpki-client