Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/Df5liMLh85owcARx827k5HZkF64.roa
File: Df5liMLh85owcARx827k5HZkF64.roa (raw, json)
Hash identifier: j1RQTyVNXF0dAcLsPQkYH9DZJunp954FLhseM+sMXRQ=
Subject key identifier: 0D:FE:65:88:C2:E1:F3:9A:30:70:04:71:F3:6E:E4:E4:76:64:17:AE
Certificate issuer: /CN=b209721f4548c26cf362e944a81b1acee7b24b53
Certificate serial: 018B33BAB4CF8659703B852F74C2B9A80B21
Authority key identifier: B2:09:72:1F:45:48:C2:6C:F3:62:E9:44:A8:1B:1A:CE:E7:B2:4B:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sglyH0VIwmzzYulEqBsazueyS1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/Df5liMLh85owcARx827k5HZkF64.roa
Signing time: Sun 15 Oct 2023 14:25:55 +0000
ROA not before: Sun 15 Oct 2023 14:25:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 192.115.7.0/24 maxlen: 24
2a01:4280:7::/48 maxlen: 64
2a01:4280:2::/48 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:33:ba:b4:cf:86:59:70:3b:85:2f:74:c2:b9:a8:0b:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b209721f4548c26cf362e944a81b1acee7b24b53
Validity
Not Before: Oct 15 14:25:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0dfe6588c2e1f39a30700471f36ee4e4766417ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c0:3a:b6:c1:71:aa:64:80:bc:10:06:f9:9f:
b9:bd:23:b2:c3:2f:d5:65:fc:f0:8a:35:f6:69:48:
2d:39:5e:69:17:91:58:e9:50:4c:65:5b:8a:3b:fb:
ab:e0:56:e4:9a:b1:2b:be:ca:df:5a:2a:86:35:54:
9e:13:a7:5e:77:4c:3d:84:96:e6:38:7e:78:b6:a6:
d4:7f:3d:c8:f6:b1:35:b0:f0:b9:f0:4b:1b:2a:ca:
a6:c1:c4:aa:0a:7b:8d:7e:5a:62:e2:fc:25:76:92:
8a:b5:29:39:35:32:d9:ca:5d:f5:6e:13:39:18:22:
ca:a2:76:bb:03:fc:eb:05:c2:24:14:6c:bb:a9:0e:
e1:d2:48:79:c1:8e:f7:a6:fe:61:9f:62:d0:6b:d3:
0b:b5:6d:67:96:a6:9e:3a:fa:96:50:e5:a0:f8:29:
e4:6a:3b:6f:79:f1:65:18:96:59:db:49:5a:89:72:
6d:a2:64:26:8e:d2:2c:0e:01:71:ca:2e:01:ca:9b:
69:6d:16:6d:19:ec:db:0f:7b:4f:ea:5c:36:44:49:
33:f0:20:5d:d6:ab:62:56:8a:5d:bf:6c:e5:c6:5d:
b5:95:fc:f0:ee:b5:29:f5:75:f8:3c:a9:5d:26:9c:
7b:cb:e1:c5:3c:cb:c1:ec:82:79:0c:e6:7c:8f:eb:
e1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:FE:65:88:C2:E1:F3:9A:30:70:04:71:F3:6E:E4:E4:76:64:17:AE
X509v3 Authority Key Identifier:
keyid:B2:09:72:1F:45:48:C2:6C:F3:62:E9:44:A8:1B:1A:CE:E7:B2:4B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sglyH0VIwmzzYulEqBsazueyS1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/Df5liMLh85owcARx827k5HZkF64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/sglyH0VIwmzzYulEqBsazueyS1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.115.7.0/24
IPv6:
2a01:4280:2::/48
2a01:4280:7::/48
Signature Algorithm: sha256WithRSAEncryption
29:19:b1:a1:41:9e:2d:b5:17:4f:43:90:df:fc:eb:de:c3:5a:
42:88:d7:9d:d7:ff:ec:2d:10:2c:cd:90:a5:61:cb:f8:78:d2:
37:5f:4e:2a:8d:90:b8:71:5a:45:b5:d4:c0:e5:82:ef:71:b9:
c3:d3:b4:8f:83:f5:24:dc:3e:ed:62:17:0a:45:c5:85:e2:bd:
60:f4:b4:f9:7a:35:25:8f:46:7d:aa:88:79:ce:6b:eb:47:29:
3f:da:a4:a3:a9:82:92:3a:9d:24:9d:29:2a:f3:88:cb:da:e2:
ff:4e:09:a9:1f:bf:82:fb:70:c0:2e:fa:a0:f2:aa:0a:97:6d:
54:a5:11:43:fe:6e:39:bd:c4:24:c0:5f:08:74:b2:e3:53:de:
ee:11:d9:69:d8:49:4e:6a:a2:f8:da:2c:76:e4:2a:12:d1:e2:
4a:95:bf:96:c7:df:c9:47:99:1f:ca:a5:4a:f6:d7:40:14:b8:
a0:9d:39:eb:45:ee:39:2a:45:b3:7a:75:7f:9c:e2:13:17:8b:
6e:42:57:0f:fe:b8:00:f3:fa:6b:48:13:77:45:d9:e4:f7:6b:
cc:a6:cc:60:d4:d8:13:b4:cf:ed:56:23:d6:a6:99:dd:2f:a8:
1e:8b:0e:bb:05:30:be:f1:de:a4:8b:91:5b:01:b2:2d:84:c6:
12:bb:7f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:14:20 2025 by rpki-client