Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/iRVaSY3tc2NX-PoIN1BRY5GKwoA.roa
File: iRVaSY3tc2NX-PoIN1BRY5GKwoA.roa (raw, json)
Hash identifier: OTgABdhnaR8KpJ0uC1EX2uVRaXQNcvBYdvSOwfyXx48=
Subject key identifier: 89:15:5A:49:8D:ED:73:63:57:F8:FA:08:37:50:51:63:91:8A:C2:80
Certificate issuer: /CN=3d14528eefc2df93ffb4e74fa1b6503b76ed96ce
Certificate serial: 01856E2F881844DCF3111E27757B0CB1B383
Authority key identifier: 3D:14:52:8E:EF:C2:DF:93:FF:B4:E7:4F:A1:B6:50:3B:76:ED:96:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRRSju_C35P_tOdPobZQO3btls4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/iRVaSY3tc2NX-PoIN1BRY5GKwoA.roa
Signing time: Sun 01 Jan 2023 16:34:46 +0000
ROA not before: Sun 01 Jan 2023 16:34:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49756
IP address blocks: 194.242.20.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:88:18:44:dc:f3:11:1e:27:75:7b:0c:b1:b3:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d14528eefc2df93ffb4e74fa1b6503b76ed96ce
Validity
Not Before: Jan 1 16:34:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89155a498ded736357f8fa0837505163918ac280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b5:88:37:37:1c:fb:7d:e3:43:47:b4:27:8d:
db:3b:40:21:4e:d7:de:06:b4:10:ed:db:36:eb:5a:
a1:99:8b:68:29:c6:dc:c2:a8:67:64:0c:3f:59:ed:
46:ff:5e:9e:da:e8:9e:8b:01:43:89:c6:a2:35:10:
32:42:56:21:8d:09:87:78:15:6e:03:56:56:ca:b4:
f1:8b:86:78:0a:4d:1b:70:7e:bb:c4:d0:0d:68:03:
3c:1e:49:5c:d5:20:7b:9b:61:b6:2a:b6:fb:31:cc:
bc:0b:aa:4b:4f:31:d6:47:5c:55:98:94:3a:d5:86:
0b:bc:70:09:e6:b0:89:dc:fc:ae:e2:5f:3f:09:3b:
4a:4e:c8:24:0d:5e:d0:e7:ae:08:95:6f:e6:39:9a:
7c:37:71:5b:91:6a:82:aa:94:22:23:e6:b3:16:53:
55:e9:17:7e:ed:40:5f:af:59:d7:35:d7:d8:cd:99:
7f:e1:31:9a:a9:de:3d:81:9b:63:89:15:24:06:ce:
54:f5:c9:fc:01:96:c4:2a:96:6f:14:b0:4e:40:81:
58:1e:85:32:29:1f:69:4d:de:a6:f2:d2:b2:a3:03:
95:84:bb:4b:9a:4e:9f:62:75:e3:81:ba:68:da:aa:
8b:73:1d:28:0f:df:6d:8f:af:83:2b:8f:af:54:8a:
d3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:15:5A:49:8D:ED:73:63:57:F8:FA:08:37:50:51:63:91:8A:C2:80
X509v3 Authority Key Identifier:
keyid:3D:14:52:8E:EF:C2:DF:93:FF:B4:E7:4F:A1:B6:50:3B:76:ED:96:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRRSju_C35P_tOdPobZQO3btls4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/iRVaSY3tc2NX-PoIN1BRY5GKwoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.242.20.0/23
Signature Algorithm: sha256WithRSAEncryption
67:87:a8:d4:ab:25:42:80:de:f2:6c:cf:a9:dd:99:4f:bd:d3:
45:38:15:92:50:f3:74:bd:84:86:26:47:53:6e:99:66:2d:9a:
e7:8a:e7:1e:c1:11:fd:65:e6:b7:e7:a3:46:af:12:43:67:1c:
fb:74:b1:f7:20:1e:db:67:37:23:17:13:07:cd:67:b0:aa:56:
a6:17:c0:7d:d3:19:99:e4:0a:fc:fa:41:ba:f2:d6:aa:a2:bb:
19:ec:ba:67:4c:3d:22:b3:0c:0c:45:25:29:fa:92:ce:66:9c:
b3:1d:6d:e8:88:8a:85:a2:7d:bc:8e:f8:64:a9:be:ea:63:73:
96:34:72:23:36:e4:d8:31:05:1a:54:66:ac:98:6a:d3:52:0e:
b5:98:37:8b:87:bb:03:5f:90:de:3f:37:05:0d:0a:bc:93:62:
75:3c:03:d2:89:87:d8:20:eb:5f:62:d0:f3:31:64:73:fe:8b:
99:f5:4c:f5:49:11:b0:28:fd:8e:0d:b7:26:08:98:f9:ac:4b:
c6:77:5d:30:f8:b9:92:1a:50:64:f5:ab:f6:17:46:0e:81:95:
7c:91:27:5c:13:dd:d2:2a:d2:08:2a:3e:f4:49:38:cb:56:02:
bc:3a:ca:a5:29:08:db:be:80:32:52:fa:86:64:c3:9b:8c:5a:
5e:b4:31:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:35 2025 by rpki-client