Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/O-ID7AWGSApR5m_RBYxPJpMiStA.roa
File: O-ID7AWGSApR5m_RBYxPJpMiStA.roa (raw, json)
Hash identifier: tVAyhrN+PaQ+1iySgISAYCmJ1tf8+7jSiEXUhH7oMu0=
Subject key identifier: 3B:E2:03:EC:05:86:48:0A:51:E6:6F:D1:05:8C:4F:26:93:22:4A:D0
Certificate issuer: /CN=67b3b58b452239001eac2e221ba56c3afed7a790
Certificate serial: 01856FF033306C35C58FC19D1D38CCBE9AE7
Authority key identifier: 67:B3:B5:8B:45:22:39:00:1E:AC:2E:22:1B:A5:6C:3A:FE:D7:A7:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/O-ID7AWGSApR5m_RBYxPJpMiStA.roa
Signing time: Mon 02 Jan 2023 00:44:50 +0000
ROA not before: Mon 02 Jan 2023 00:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35597
IP address blocks: 194.117.242.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:33:30:6c:35:c5:8f:c1:9d:1d:38:cc:be:9a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b3b58b452239001eac2e221ba56c3afed7a790
Validity
Not Before: Jan 2 00:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3be203ec0586480a51e66fd1058c4f2693224ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f0:d3:b1:5f:c3:84:e6:0d:90:61:c2:04:e1:
fe:5b:b7:77:61:c7:23:00:95:b8:aa:48:35:42:e4:
2a:e2:97:1f:57:aa:aa:56:12:f6:57:34:77:cc:03:
9f:1b:8d:99:89:eb:5d:17:0e:3c:e7:45:fb:e7:c2:
19:c3:b0:11:4e:04:54:6b:03:d4:a9:9c:1a:94:9c:
a2:1d:a6:a5:5e:34:1f:d9:2b:2d:af:9e:f2:b8:e6:
c4:a1:4d:a1:ce:6f:da:be:ea:65:84:c2:49:97:bd:
8f:34:33:87:a8:e0:43:1f:63:15:c1:c7:32:1e:9f:
4c:7b:d6:22:d3:54:6f:fe:ba:f4:f6:85:99:f1:37:
99:2f:43:75:14:6b:b5:d3:54:0d:80:da:ff:1d:46:
b6:d3:4d:7f:8d:f1:b9:ca:f9:dd:d9:91:d4:d1:f3:
89:6e:f7:cd:96:64:95:4f:db:4a:f0:be:06:3c:73:
f5:ad:cc:90:f2:35:64:e4:e3:21:a3:44:2b:90:d6:
59:62:63:84:da:52:48:0b:9e:cb:7d:33:39:7b:a9:
26:b5:81:6d:1d:af:1a:d2:0d:26:44:c5:d3:32:74:
10:c9:cb:a8:7e:b4:d7:c8:01:18:39:28:1b:6a:ab:
b4:00:79:79:51:33:88:f9:6e:b9:58:f6:ac:53:c4:
64:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E2:03:EC:05:86:48:0A:51:E6:6F:D1:05:8C:4F:26:93:22:4A:D0
X509v3 Authority Key Identifier:
keyid:67:B3:B5:8B:45:22:39:00:1E:AC:2E:22:1B:A5:6C:3A:FE:D7:A7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/O-ID7AWGSApR5m_RBYxPJpMiStA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.117.242.0/23
Signature Algorithm: sha256WithRSAEncryption
89:69:7f:9a:00:3e:26:6e:11:90:87:14:ca:cb:c2:b8:91:d5:
28:59:d2:83:c3:3f:c9:06:f6:4e:1f:40:07:4c:56:27:b2:9d:
87:00:1f:43:12:e8:9f:e3:30:51:a5:fa:fb:69:24:08:3a:00:
e1:5a:7d:b8:d4:7f:a4:43:f0:46:52:6f:06:d8:5b:07:42:29:
8a:bb:77:84:87:af:b8:db:9a:59:6e:3b:c5:f3:6f:0c:33:94:
2a:36:00:7b:60:79:c0:81:45:08:6f:1d:29:be:a8:0d:05:11:
40:c8:09:18:0d:af:f6:46:9b:41:ef:62:6c:c8:e9:1f:5a:36:
bf:48:86:fe:a4:ee:76:1c:55:34:c3:61:32:c2:a7:b1:57:bb:
52:2e:11:41:77:09:52:96:1a:27:a7:3c:2b:ab:2b:ae:fc:e6:
74:29:fc:86:44:1c:5e:89:4f:3d:a7:1b:8c:15:ac:18:b9:1f:
d2:b8:29:d7:f7:41:c6:9b:be:b5:c0:26:02:06:96:fc:ad:c2:
ab:62:d1:6d:5f:1d:66:9a:45:92:23:7c:59:54:58:87:38:ae:
c8:d4:b7:42:31:7e:53:ab:7f:17:7f:90:9f:a3:dc:4c:eb:68:
43:6d:f0:ae:83:6e:3d:d9:8e:fc:5b:1c:aa:6a:fe:cb:4c:bf:
18:14:0d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:38 2025 by rpki-client