Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/DUIVxbXCMQ6o99wiT7bQnMxfQa8.roa
File: DUIVxbXCMQ6o99wiT7bQnMxfQa8.roa (raw, json)
Hash identifier: +pckaj/3OURg/rKICINrsXZ7Wv8ciM8pGjDxe0c/Dzw=
Subject key identifier: 0D:42:15:C5:B5:C2:31:0E:A8:F7:DC:22:4F:B6:D0:9C:CC:5F:41:AF
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 01848AFF947161E1C58FE36FE9265A447468
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/DUIVxbXCMQ6o99wiT7bQnMxfQa8.roa
Signing time: Fri 18 Nov 2022 13:48:36 +0000
ROA not before: Fri 18 Nov 2022 13:48:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207326
IP address blocks: 212.116.226.0/23 maxlen: 24
91.147.124.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:8a:ff:94:71:61:e1:c5:8f:e3:6f:e9:26:5a:44:74:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Nov 18 13:48:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0d4215c5b5c2310ea8f7dc224fb6d09ccc5f41af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2c:de:9e:1e:92:4d:99:90:ed:b4:c3:fd:05:
13:b7:fa:47:50:8d:77:77:7c:36:04:fd:c7:c0:0d:
74:ce:21:88:b3:0f:45:2e:cd:45:9b:a9:73:e7:4e:
11:d8:4a:85:f2:4f:d1:2c:f5:ce:cd:ae:c0:9c:9f:
2e:5c:34:02:63:2e:99:b0:f8:da:93:28:98:89:d0:
c3:eb:90:13:75:e5:5b:45:fa:0a:c1:26:5c:59:64:
95:cb:06:7e:8e:12:5d:bc:79:d5:9c:04:d4:c5:e9:
16:0b:38:f2:04:49:2e:6e:6a:37:0d:d3:ba:d4:61:
c1:34:4e:c9:59:73:d2:43:c7:17:65:a2:6c:10:b8:
df:cc:2b:2f:fe:48:77:99:05:a4:b0:cf:e2:4d:92:
18:02:d0:29:02:88:b9:7e:9b:33:cd:ee:da:19:c0:
17:ed:7b:ae:df:6d:47:0c:34:82:e3:e4:f7:85:3f:
bd:22:cc:e0:8c:a6:82:bb:aa:90:c9:8c:14:85:5f:
35:dd:5b:ee:c8:d9:67:00:61:1f:bb:90:3a:ca:83:
57:2a:bc:56:03:eb:fa:ca:41:f9:53:3e:f3:a8:37:
e9:c5:fc:ad:31:e2:2e:ba:82:90:99:b7:83:a8:31:
22:0b:7a:97:ea:58:e5:15:6d:2e:bc:1e:27:41:8c:
c6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:42:15:C5:B5:C2:31:0E:A8:F7:DC:22:4F:B6:D0:9C:CC:5F:41:AF
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/DUIVxbXCMQ6o99wiT7bQnMxfQa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.124.0/23
212.116.226.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:67:41:af:84:9e:dc:7d:ff:1b:8e:78:05:19:d3:d8:af:27:
1a:b5:1a:c0:4d:82:db:5a:0d:e3:be:7a:3f:c9:46:82:8a:5d:
1a:49:b4:35:c3:19:8b:9c:f7:d1:11:ab:84:b2:6b:16:23:53:
da:61:2c:76:f9:de:da:16:98:e6:ab:10:38:e9:38:c5:7d:39:
77:9a:76:39:c6:42:87:0c:78:78:9a:bf:e0:3a:31:f2:d3:65:
ab:1f:4e:b3:6a:91:7e:ca:de:ad:e1:e1:8e:9d:7e:b8:de:d1:
0c:4c:1d:69:dc:fb:48:62:7b:27:d5:a6:a2:0e:4a:ab:d2:64:
4d:17:cb:d7:dc:b6:b6:66:80:1e:e3:11:c4:b0:6b:1d:f9:6b:
7d:fd:a5:27:4e:8d:73:69:32:ea:f9:75:84:35:a2:31:2f:9c:
45:13:86:c2:4e:f2:ff:49:e7:4b:f4:ec:2b:67:ae:da:a6:d7:
06:b5:55:2e:bb:47:f3:22:f3:20:54:6d:55:5c:da:c1:d2:21:
d4:36:33:f5:a7:3c:f2:6b:16:76:a0:23:c0:44:6a:6d:7c:7d:
19:2d:42:7d:34:9d:13:22:6c:1f:b1:4c:bf:96:3f:77:66:f9:
29:0f:11:ac:de:79:c9:f0:00:9b:22:84:da:78:73:ba:2f:39:
34:cb:90:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:56:44 2025 by rpki-client