Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/RPBrlOVy-D-hiyxnfPM_538wOag.roa
File: RPBrlOVy-D-hiyxnfPM_538wOag.roa (raw, json)
Hash identifier: BPE2dwwRIysHl8CSlydeOoGoPbSk7Ea0jzgHNjmBP6Y=
Subject key identifier: 44:F0:6B:94:E5:72:F8:3F:A1:8B:2C:67:7C:F3:3F:E7:7F:30:39:A8
Certificate issuer: /CN=36eaa00ea777098b1bf036756d640e9d31d63b3b
Certificate serial: 01899735010AE30BDF575B38D6DA55B507A1
Authority key identifier: 36:EA:A0:0E:A7:77:09:8B:1B:F0:36:75:6D:64:0E:9D:31:D6:3B:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/RPBrlOVy-D-hiyxnfPM_538wOag.roa
Signing time: Thu 27 Jul 2023 11:56:20 +0000
ROA not before: Thu 27 Jul 2023 11:56:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 195.66.224.0/19 maxlen: 19
2001:7f8:4::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:97:35:01:0a:e3:0b:df:57:5b:38:d6:da:55:b5:07:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36eaa00ea777098b1bf036756d640e9d31d63b3b
Validity
Not Before: Jul 27 11:56:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44f06b94e572f83fa18b2c677cf33fe77f3039a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fd:3f:f7:0d:86:00:7d:41:72:75:a8:06:7e:
79:03:6f:27:d7:de:b6:87:1d:f3:4e:f1:df:a7:f2:
d9:3e:bd:2c:c7:44:18:24:54:fa:07:4f:89:68:cc:
89:cf:a4:57:be:38:f4:b5:d8:27:b2:c8:26:50:15:
5f:17:28:86:e5:dc:b5:09:7d:55:00:bb:bd:99:23:
fe:3d:ab:fb:a3:b2:8c:c5:d4:b7:0c:60:9d:55:e9:
c7:48:f9:10:87:95:8e:ee:66:fe:df:52:09:57:04:
8e:04:d8:b3:13:8a:0e:69:45:cf:eb:39:e4:70:18:
df:ac:7a:6d:22:93:ae:98:6c:2a:5c:53:e6:38:ec:
8a:15:e0:db:fd:2b:da:b0:99:76:be:cd:f5:2c:4f:
83:2b:e0:ba:07:14:a2:5b:2f:12:b0:88:1e:9e:39:
db:63:bc:bd:54:fe:93:ec:7b:01:11:30:42:76:25:
6a:2d:92:3d:9f:84:88:8a:e1:38:49:94:ea:92:06:
30:53:c0:3c:e7:fe:a4:3b:f2:7a:e2:e6:5f:81:6e:
cf:b7:2d:a0:07:8e:e0:91:be:2c:5e:28:90:98:84:
ec:cb:cf:3f:05:81:c8:e5:bc:07:c8:f4:2a:94:97:
f9:e8:00:12:c0:04:0f:92:e7:98:96:a1:ff:bf:ad:
b9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F0:6B:94:E5:72:F8:3F:A1:8B:2C:67:7C:F3:3F:E7:7F:30:39:A8
X509v3 Authority Key Identifier:
keyid:36:EA:A0:0E:A7:77:09:8B:1B:F0:36:75:6D:64:0E:9D:31:D6:3B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/RPBrlOVy-D-hiyxnfPM_538wOag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.66.224.0/19
IPv6:
2001:7f8:4::/48
Signature Algorithm: sha256WithRSAEncryption
04:9f:a8:5a:7e:df:fe:a8:cb:8e:39:29:bd:a7:94:a2:a0:70:
3d:a4:f2:50:5f:41:24:3d:9d:d0:7f:3e:ef:37:b4:5a:f6:b0:
03:38:cf:ff:91:9e:31:35:ad:ee:6b:97:04:7d:2b:a0:cf:d5:
b1:d1:5c:ed:c6:e8:f8:38:55:6b:8c:ec:bb:8d:fc:06:e0:1e:
1f:bf:12:f2:cc:12:b5:64:76:d7:e2:37:c0:9c:44:ed:73:a2:
32:97:8d:83:03:47:55:61:86:ac:9b:3e:b4:69:1c:e6:e7:77:
48:d4:1a:07:7b:0f:1c:5a:62:61:74:47:6e:8c:8d:9b:cb:84:
9e:60:ba:52:61:2d:b4:de:1b:33:3f:ff:93:9a:b9:ac:a1:0a:
0a:ad:3e:4c:f2:b8:9d:4c:cd:b1:7e:28:2b:3e:80:0a:da:9b:
f4:60:19:0a:e3:79:fe:cd:05:c0:ff:f9:dd:09:75:3f:0a:72:
9b:86:cd:6c:35:68:0d:62:c3:e3:30:90:89:71:33:0b:9b:63:
d7:e8:00:3e:32:aa:78:c4:e8:4b:2a:36:0c:3f:ca:fc:37:31:
7b:a9:d9:41:15:4f:85:f4:21:10:98:d4:79:dd:c3:47:85:95:
4b:54:07:ec:e3:74:8a:b2:98:9c:ea:9d:43:49:65:3e:aa:a3:
03:0f:d8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:14 2025 by rpki-client