Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/x8B_euEG7NWH6ZPdnVGikW6WtHI.roa
File: x8B_euEG7NWH6ZPdnVGikW6WtHI.roa (raw, json)
Hash identifier: ZHxk7KrcMB637MqML5EPg5jeFJd9qYXiincBb7Td3nM=
Subject key identifier: C7:C0:7F:7A:E1:06:EC:D5:87:E9:93:DD:9D:51:A2:91:6E:96:B4:72
Certificate issuer: /CN=7768a31e5c8a5a88225989a1baef4a381338601a
Certificate serial: 01856BD36B3996DAF3AF762C2DC9C7F27A8F
Authority key identifier: 77:68:A3:1E:5C:8A:5A:88:22:59:89:A1:BA:EF:4A:38:13:38:60:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/x8B_euEG7NWH6ZPdnVGikW6WtHI.roa
Signing time: Sun 01 Jan 2023 05:34:55 +0000
ROA not before: Sun 01 Jan 2023 05:34:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42012
IP address blocks: 194.36.162.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d3:6b:39:96:da:f3:af:76:2c:2d:c9:c7:f2:7a:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7768a31e5c8a5a88225989a1baef4a381338601a
Validity
Not Before: Jan 1 05:34:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7c07f7ae106ecd587e993dd9d51a2916e96b472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ac:0a:a0:ab:9e:79:b5:03:d5:c3:be:ac:ba:
e9:3a:7c:6a:77:f5:88:e8:3c:8a:13:b5:d9:d3:26:
42:c2:8b:3e:0e:da:a5:86:51:8f:c5:66:92:da:17:
95:b6:94:9c:7d:26:42:20:bd:9b:c0:17:cb:8e:9e:
4b:e4:67:76:da:de:1d:47:64:27:ba:25:39:84:78:
44:67:5b:01:d0:14:ef:73:f0:40:f5:ab:4f:6f:64:
21:64:fb:56:5d:9f:27:72:99:6d:fe:2f:2a:85:6d:
42:a4:c1:44:7b:4f:83:2d:9a:e1:da:6f:d5:e3:9d:
3f:e9:9f:e0:e0:6d:59:31:79:34:61:b4:08:6c:fa:
48:4b:39:a5:4d:d5:60:1f:c9:5e:0d:2d:50:95:bf:
a3:2b:eb:cd:82:eb:c1:77:ef:eb:b9:e8:2f:26:1d:
cf:b5:d3:61:f3:5c:e7:13:62:c9:22:9d:1f:31:ea:
d1:0d:9c:7a:b9:3c:1a:2e:9d:77:e4:e1:a6:09:47:
25:72:32:d5:1a:b7:e5:7b:47:c0:47:2b:34:35:2e:
b6:87:85:56:47:56:5b:c7:82:db:c2:32:c8:9f:19:
17:78:d8:2e:aa:08:e8:cc:8e:f7:51:7e:1e:9f:e1:
31:fb:9f:1b:14:fa:fe:98:1b:10:e6:43:16:fc:70:
49:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C0:7F:7A:E1:06:EC:D5:87:E9:93:DD:9D:51:A2:91:6E:96:B4:72
X509v3 Authority Key Identifier:
keyid:77:68:A3:1E:5C:8A:5A:88:22:59:89:A1:BA:EF:4A:38:13:38:60:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/x8B_euEG7NWH6ZPdnVGikW6WtHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.162.0/24
Signature Algorithm: sha256WithRSAEncryption
60:b0:85:b8:12:1c:28:95:3c:bd:12:a8:7b:11:7c:12:96:88:
c0:c5:b4:3c:bc:d7:cd:e5:56:3d:d8:92:66:c5:16:42:e9:c7:
3d:24:6b:0c:94:06:e2:1d:f5:d9:91:1f:1c:26:48:fb:e0:1c:
bf:7a:d7:a8:9d:4e:4b:c8:7e:cd:e2:2c:d0:18:61:16:da:a0:
72:c1:19:d6:08:ad:df:45:a7:84:44:16:ce:e3:d2:6b:36:10:
9c:f1:f4:58:ac:d3:c1:ff:c9:d2:f3:61:14:55:5e:a0:e3:96:
84:19:f1:a5:d8:ec:84:6d:6d:38:04:e8:22:aa:57:d9:9b:58:
7b:7e:a7:a0:64:42:d6:b5:2a:fb:04:3b:f3:96:bc:a0:57:b7:
34:03:bd:3c:49:27:82:fd:37:ab:97:cd:0f:56:40:21:7d:1e:
39:0e:05:e4:0e:69:b7:89:87:69:d4:15:33:da:78:49:a6:08:
a1:75:70:87:ea:3c:6a:73:cc:54:5f:3a:48:99:3d:56:f1:38:
5f:6b:b8:41:ab:6d:bf:5e:ea:be:7c:e2:42:72:08:e5:c1:a5:
25:ab:ea:20:6d:a5:5f:c9:b5:2d:95:8c:0f:f9:c3:b0:a3:7a:
2d:55:93:28:3a:ea:c6:0b:f6:62:7e:0e:8b:24:11:fc:70:5c:
7c:41:29:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:20:05 2025 by rpki-client