Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/O7ZCWESTptpC8Moi7PV5hfmm4Pk.roa
File: O7ZCWESTptpC8Moi7PV5hfmm4Pk.roa (raw, json)
Hash identifier: /5bMK2F7OJfuddL/efs2T8SMI/CNknQZbqKxctIw558=
Subject key identifier: 3B:B6:42:58:44:93:A6:DA:42:F0:CA:22:EC:F5:79:85:F9:A6:E0:F9
Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Certificate serial: 018649558C39A2CC129DA564316F7F8C50FD
Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/O7ZCWESTptpC8Moi7PV5hfmm4Pk.roa
Signing time: Mon 13 Feb 2023 05:53:08 +0000
ROA not before: Mon 13 Feb 2023 05:53:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206531
IP address blocks: 94.188.196.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:49:55:8c:39:a2:cc:12:9d:a5:64:31:6f:7f:8c:50:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Validity
Not Before: Feb 13 05:53:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3bb642584493a6da42f0ca22ecf57985f9a6e0f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:74:8f:e7:53:d7:4b:56:de:5a:d6:03:08:21:
67:4b:5e:d4:77:19:4b:94:6d:d2:cf:57:74:e4:2f:
5d:65:f5:4d:28:cb:43:24:d9:61:54:37:cc:40:d5:
68:14:d1:24:67:41:c2:41:08:7c:95:3f:07:1f:05:
89:96:ba:26:b9:6d:4f:0a:f7:e7:c2:94:aa:69:45:
03:1f:6a:fa:5d:e8:cd:64:b2:d3:52:09:6b:7c:27:
8f:ee:00:29:84:2f:b1:54:e2:27:d7:5a:e9:d8:22:
ab:f0:fe:c2:b2:ab:e6:8d:63:37:14:15:19:64:c0:
4b:d2:96:56:cb:85:8f:ad:1b:28:a9:a3:ff:80:01:
2a:91:80:b7:19:a9:85:f3:c8:d4:5c:f3:a3:dd:46:
51:aa:52:2b:75:87:50:bc:85:18:cf:f0:e9:53:6a:
7d:27:c0:8c:3d:71:bf:f9:5e:5d:67:69:9c:83:59:
9a:88:ed:6b:fd:30:b7:f8:52:64:1b:fb:fb:11:95:
8c:9d:4c:20:be:eb:e8:c7:2a:fa:e7:fa:7e:3c:99:
fd:f9:8b:9f:32:56:c8:b1:c6:3f:c7:3a:c8:ae:fb:
e1:36:3c:78:cd:d2:73:ac:a0:88:78:a1:32:a4:7b:
22:72:a8:9c:65:5a:7c:18:6f:e5:d8:9f:7d:47:2d:
4f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B6:42:58:44:93:A6:DA:42:F0:CA:22:EC:F5:79:85:F9:A6:E0:F9
X509v3 Authority Key Identifier:
keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/O7ZCWESTptpC8Moi7PV5hfmm4Pk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.188.196.0/24
Signature Algorithm: sha256WithRSAEncryption
03:1f:1c:0e:af:72:fc:a6:39:09:90:fc:7e:47:78:8c:d5:02:
f0:5f:63:85:1d:41:7e:54:71:0d:b9:93:4b:0d:51:68:40:36:
f7:c2:00:d4:ca:8a:ae:bb:72:a0:66:2e:68:7d:01:96:e9:67:
fd:a9:35:59:65:a5:d2:c9:f7:50:47:dc:04:97:b6:3a:3f:51:
8c:d1:d2:16:d2:7f:35:51:ec:ee:fe:72:cb:e2:3f:a1:37:0b:
b7:a8:31:94:c3:19:1b:4d:ae:82:05:c1:c4:6d:76:0a:43:72:
51:40:b7:01:ca:ac:65:f0:fe:4e:d9:4d:4a:c3:9e:d7:0c:d1:
4e:c3:52:2a:22:cb:12:a5:4d:63:9f:28:3c:2b:8c:e1:0d:db:
10:96:9c:6a:b5:53:fb:37:e9:f9:b2:37:dd:8a:8e:e4:7d:4d:
c5:b4:b3:59:8e:d0:53:32:0e:be:9b:1f:08:c5:dd:fb:82:84:
1d:8f:97:59:56:ba:93:e9:ac:ab:07:b0:86:7e:64:41:e4:3a:
1c:5d:6f:d4:9b:05:21:92:f1:d1:fe:fa:c3:cc:ac:bd:e2:c3:
b8:fb:c1:6e:17:fe:03:e1:f8:35:52:af:3d:ea:e7:bb:70:c1:
05:52:c8:7e:96:9f:93:df:b7:2b:2f:1d:26:aa:00:e7:b9:f1:
25:a9:4c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:16:34 2025 by rpki-client