Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/DUV-Dw8meGGcQ6Qa8xtZp9uNzwQ.roa
File: DUV-Dw8meGGcQ6Qa8xtZp9uNzwQ.roa (raw, json)
Hash identifier: uTT8/smhnOFnCyPJ3o4hyENIFT+f+5X7H/Wz9jnzRrM=
Subject key identifier: 0D:45:7E:0F:0F:26:78:61:9C:43:A4:1A:F3:1B:59:A7:DB:8D:CF:04
Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial: 01856B8118AB0220F175B47E10B6ED675553
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/DUV-Dw8meGGcQ6Qa8xtZp9uNzwQ.roa
Signing time: Sun 01 Jan 2023 04:05:00 +0000
ROA not before: Sun 01 Jan 2023 04:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42815
IP address blocks: 87.118.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:81:18:ab:02:20:f1:75:b4:7e:10:b6:ed:67:55:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Validity
Not Before: Jan 1 04:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d457e0f0f2678619c43a41af31b59a7db8dcf04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:48:e6:57:f0:cf:90:19:f0:e0:38:f5:16:c1:
4b:9b:92:da:41:5b:8b:f2:4b:8b:65:c0:14:ff:24:
93:33:92:4c:1d:e5:dc:da:e1:df:34:6c:89:a7:ed:
cc:ed:0e:eb:12:39:08:14:d4:76:5e:a2:db:ff:04:
4a:92:9a:36:f8:55:bc:51:c6:47:51:1b:1b:3d:88:
68:1c:70:0e:11:0d:97:08:d3:45:c3:a9:a0:32:e8:
bf:64:e7:ab:eb:cd:d2:86:85:29:b1:e9:7f:5c:3b:
99:1e:0f:72:e3:33:02:8f:e4:22:6b:71:23:b6:fa:
a0:e1:b9:98:49:90:ea:5a:5b:ca:24:5a:14:5c:12:
db:ef:d5:b7:f2:aa:65:dd:a1:26:eb:c4:15:cc:21:
16:bb:0b:79:a9:58:0f:9e:6b:75:8c:10:35:a8:9c:
a2:49:35:87:99:f0:05:df:eb:37:6b:be:46:f9:df:
fc:a3:17:ea:66:d2:1f:0c:e5:23:3c:87:c9:5b:bb:
19:3a:6b:60:d4:32:82:ba:85:a5:cb:ec:72:05:e1:
06:81:cc:1b:46:b8:fa:ae:ee:36:57:fc:ff:77:4e:
fb:3e:7c:d2:07:17:44:c4:96:8d:48:a9:12:b7:be:
a4:2a:c9:e6:6a:9a:f3:d2:3c:e5:3d:94:99:bf:98:
51:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:45:7E:0F:0F:26:78:61:9C:43:A4:1A:F3:1B:59:A7:DB:8D:CF:04
X509v3 Authority Key Identifier:
keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/DUV-Dw8meGGcQ6Qa8xtZp9uNzwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.118.134.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:46:ed:c4:03:76:41:ae:60:50:12:40:00:72:d3:ce:64:26:
b8:14:1f:01:f8:98:09:29:53:57:4e:3b:2c:bf:1f:6d:44:60:
b4:0f:e8:22:66:ab:58:cd:47:f5:b8:74:5b:cf:39:2d:59:39:
72:ec:c0:58:27:22:cb:d9:8f:5b:a0:a9:36:d8:b4:43:ae:ff:
42:59:82:66:14:b8:8c:0f:32:8d:0e:b1:7b:bf:92:25:5b:fc:
44:c7:3c:f0:56:31:0d:fa:e0:73:1f:47:f8:9d:04:11:e4:8b:
cb:6a:f8:bc:c3:d3:b3:30:27:7b:42:8d:a0:ea:71:dd:2d:f8:
e3:41:69:6c:56:3d:64:81:7b:dc:10:32:48:47:aa:b3:32:a8:
81:13:26:c6:d4:d2:a5:b4:30:83:d6:05:b9:5d:dd:40:05:63:
37:9c:95:63:ef:26:9c:49:eb:17:4a:ce:51:e2:22:53:1c:63:
8a:63:4a:03:82:43:43:b0:82:ee:cf:99:55:e5:b7:e3:29:d9:
ba:2b:4a:6f:75:e9:6c:64:33:20:47:f7:f5:f7:d7:d2:3c:60:
65:f8:75:08:59:fb:83:4e:b4:fa:ce:bd:b0:91:4b:ff:58:2f:
08:70:33:6f:71:84:f9:5b:de:d0:95:96:5c:24:1c:9a:08:4c:
6f:28:7c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:18 2025 by rpki-client