Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/cc1013-5dcb-4ebc-b79e-5c067b8b91a5/1/e-myaoYliWrGXe9moryKu763ZD4.roa
File: e-myaoYliWrGXe9moryKu763ZD4.roa (raw, json)
Hash identifier: as/mm2yHzbeDsaBosaL2pWgZzuR2B5TlVXNmAL+cEs8=
Subject key identifier: 7B:E9:B2:6A:86:25:89:6A:C6:5D:EF:66:A2:BC:8A:BB:BE:B7:64:3E
Certificate issuer: /CN=f59d56c52c7733f83be774afa47bbd55d28797ac
Certificate serial: 018572FA803DC2D0BED73FDACF107A9B1A0C
Authority key identifier: F5:9D:56:C5:2C:77:33:F8:3B:E7:74:AF:A4:7B:BD:55:D2:87:97:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Z1WxSx3M_g753SvpHu9VdKHl6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/cc1013-5dcb-4ebc-b79e-5c067b8b91a5/1/e-myaoYliWrGXe9moryKu763ZD4.roa
Signing time: Mon 02 Jan 2023 14:54:57 +0000
ROA not before: Mon 02 Jan 2023 14:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202368
IP address blocks: 194.34.163.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:fa:80:3d:c2:d0:be:d7:3f:da:cf:10:7a:9b:1a:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f59d56c52c7733f83be774afa47bbd55d28797ac
Validity
Not Before: Jan 2 14:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7be9b26a8625896ac65def66a2bc8abbbeb7643e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e3:8d:06:9c:04:c5:48:f0:d8:5f:38:bf:2f:
6c:35:03:81:f4:3b:32:32:93:a0:90:d0:8e:2f:05:
e2:1e:45:b1:8b:f6:8f:f9:e5:8d:4c:7e:3e:08:32:
85:2b:66:4b:2e:c9:87:8b:22:e7:5e:33:72:23:f6:
0f:c2:a0:b7:79:53:a8:66:6a:31:fa:71:42:50:bf:
c4:c1:40:46:fa:a5:f7:9b:0b:24:9d:24:b0:13:e9:
94:73:b0:3d:ab:d0:4d:2a:86:66:44:7b:a3:cb:9d:
68:6a:c5:b4:41:55:96:06:67:79:0c:dd:67:af:49:
21:a2:10:ed:a3:1a:23:b1:6c:26:07:dd:0d:08:b6:
c4:f5:ed:68:ec:6c:de:02:48:3e:c7:52:f0:1c:91:
3e:3c:80:06:e2:06:d7:9f:1b:9a:d8:57:e5:d7:0b:
20:da:a3:24:43:bd:94:be:72:4a:c9:c0:10:5c:61:
f6:93:89:36:c0:64:b0:ce:8a:fd:64:64:6a:4d:52:
c9:53:9a:49:7d:a1:93:81:e8:40:d8:99:92:4a:b8:
8a:82:bc:63:56:4d:68:6c:2b:86:b9:f1:ed:7b:7c:
d9:44:02:b9:fa:71:5a:0f:68:8c:27:4b:a8:e2:67:
be:dc:94:93:93:61:f2:94:c0:a3:63:a7:30:31:4c:
6f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E9:B2:6A:86:25:89:6A:C6:5D:EF:66:A2:BC:8A:BB:BE:B7:64:3E
X509v3 Authority Key Identifier:
keyid:F5:9D:56:C5:2C:77:33:F8:3B:E7:74:AF:A4:7B:BD:55:D2:87:97:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Z1WxSx3M_g753SvpHu9VdKHl6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cc1013-5dcb-4ebc-b79e-5c067b8b91a5/1/e-myaoYliWrGXe9moryKu763ZD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cc1013-5dcb-4ebc-b79e-5c067b8b91a5/1/9Z1WxSx3M_g753SvpHu9VdKHl6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.163.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:64:e4:6c:0e:f7:24:42:09:90:af:d5:57:e3:71:7b:c9:c0:
a2:ee:c8:63:03:2f:1e:b2:50:be:68:50:cc:46:46:bf:15:8d:
be:fb:16:4d:0b:46:2f:ad:fc:26:cb:f5:69:8f:13:03:1c:02:
ef:22:ef:d0:19:f1:77:f5:10:9d:48:43:0a:f3:59:ad:1d:4b:
a7:3e:33:e4:b0:a2:2e:0d:63:8c:d1:43:d4:cf:fc:9d:f6:80:
fb:be:16:f1:93:c3:be:e3:82:6f:d7:56:85:cf:93:a9:63:b8:
d5:57:87:38:19:bc:ec:60:99:30:b0:36:5d:90:eb:54:73:91:
cc:60:2e:b0:e0:85:4c:48:53:c2:7a:fe:a2:3a:ef:fa:59:79:
ae:f1:4a:04:7f:3b:ad:e3:13:9b:66:16:b1:e6:b7:4e:85:af:
3f:e2:99:a1:35:0b:d0:6c:6f:c7:86:3d:07:f7:9e:e4:23:04:
1a:a0:25:f8:08:b1:c4:1c:80:c5:27:be:be:0e:1c:00:34:2f:
ff:61:bc:ab:a8:63:1f:c0:1c:2a:5c:08:57:44:4a:ae:ac:81:
8a:88:6f:31:52:91:87:94:cc:34:8d:a1:9a:59:53:1e:49:17:
52:bd:d2:d0:60:01:66:75:da:05:d9:a8:33:b5:84:03:ec:2a:
f2:12:68:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:19:16 2025 by rpki-client