Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/meOSfaLNVoSA9AA-nyCA2j2DuRw.roa
File: meOSfaLNVoSA9AA-nyCA2j2DuRw.roa (raw, json)
Hash identifier: 99ctPKWG5xkLXJgwJvlwzqjiu4wrHYh0npNz/Pg/hvQ=
Subject key identifier: 99:E3:92:7D:A2:CD:56:84:80:F4:00:3E:9F:20:80:DA:3D:83:B9:1C
Certificate issuer: /CN=a0afe1fed1f2b7db24a0c2d1f61010684e93cbd5
Certificate serial: 01856D2F3BF9CCBF93215EB7B1A13D860878
Authority key identifier: A0:AF:E1:FE:D1:F2:B7:DB:24:A0:C2:D1:F6:10:10:68:4E:93:CB:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/meOSfaLNVoSA9AA-nyCA2j2DuRw.roa
Signing time: Sun 01 Jan 2023 11:54:50 +0000
ROA not before: Sun 01 Jan 2023 11:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48613
IP address blocks: 188.214.101.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:2f:3b:f9:cc:bf:93:21:5e:b7:b1:a1:3d:86:08:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0afe1fed1f2b7db24a0c2d1f61010684e93cbd5
Validity
Not Before: Jan 1 11:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99e3927da2cd568480f4003e9f2080da3d83b91c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b1:3a:01:bd:5f:50:8a:62:52:26:9f:4d:3b:
47:7a:2d:59:18:d1:c3:12:4d:e1:1a:76:70:6f:97:
e1:10:0b:3e:ab:a5:84:a3:2a:dd:cf:ba:d7:18:f1:
95:d0:54:ff:d7:7e:40:e7:c7:38:80:38:1a:de:e9:
a0:f6:4e:fa:0a:75:45:27:08:27:21:1c:db:a7:65:
24:6d:c1:db:b1:ba:3c:07:8a:ee:ee:09:d0:29:51:
87:41:5f:36:69:ab:bf:41:aa:11:68:ad:cb:e2:26:
93:4a:7f:3d:b6:bb:dc:cc:e2:32:52:98:36:63:36:
99:7a:0d:99:41:1c:8a:22:dd:7b:75:e1:9c:f7:a3:
67:ba:93:6a:ca:52:ed:4d:b2:46:72:25:0f:d5:e4:
c4:56:9d:6e:10:bb:56:78:7e:28:eb:37:9a:33:66:
b0:9e:47:7a:d3:b6:78:e8:42:4a:7c:af:b4:5a:dd:
2d:0c:99:c9:53:02:b4:ac:a5:3f:62:b7:4c:85:28:
06:06:43:68:34:c6:86:87:ea:c3:10:79:4d:ca:95:
22:a0:d0:cb:26:ee:ab:e6:8b:e0:cb:fe:55:7d:ee:
f2:5e:8c:12:38:66:28:68:c4:82:aa:36:82:da:93:
9f:46:ca:04:cf:8d:ed:b1:fb:96:6e:e6:87:b3:bd:
75:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E3:92:7D:A2:CD:56:84:80:F4:00:3E:9F:20:80:DA:3D:83:B9:1C
X509v3 Authority Key Identifier:
keyid:A0:AF:E1:FE:D1:F2:B7:DB:24:A0:C2:D1:F6:10:10:68:4E:93:CB:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/meOSfaLNVoSA9AA-nyCA2j2DuRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.214.101.0/24
Signature Algorithm: sha256WithRSAEncryption
75:d8:bc:06:21:24:b1:04:f9:34:93:04:11:19:b0:2c:54:ad:
bf:c6:3f:6e:ea:45:28:53:60:c1:c9:b4:76:67:36:db:c7:0e:
f6:a1:15:1b:30:ec:52:73:4f:cd:ee:f5:9d:65:57:2a:77:27:
53:b9:e4:17:a9:99:a8:06:d2:ba:d4:15:5d:7c:73:dd:65:75:
f2:a3:e0:07:00:3e:ff:a7:e0:9e:c0:2c:e0:ac:0d:d3:d4:c6:
67:2a:13:bb:6d:dd:0d:45:05:e8:c9:0e:05:37:91:13:71:81:
af:b3:0c:12:f3:39:48:91:91:cd:66:33:f6:27:0c:10:2a:51:
ee:22:42:d1:e3:c3:5b:69:e8:f1:5f:b0:eb:02:87:4e:7f:e0:
3b:02:f6:a1:ee:34:f7:a2:ab:69:86:a1:be:20:50:23:b5:02:
a8:48:69:c2:b0:7d:ec:f6:ea:13:4e:38:42:c9:15:30:e4:79:
ec:70:a5:e4:17:9e:da:ed:f2:d7:fb:06:87:62:c4:4e:49:0e:
c2:c4:91:a6:4a:91:94:9a:e3:58:43:82:c6:aa:bd:fa:37:76:
8e:80:e1:f0:38:82:62:c2:e5:16:61:82:89:49:38:b2:9d:ee:
f6:ca:6d:e1:b7:87:e2:19:70:a5:cd:3a:7d:fc:37:ce:69:25:
ac:fb:41:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:20:14 2025 by rpki-client