Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e62089-b98a-4fdd-9c4e-62789182a0f3/1/RmZy8FbIKf8cOtqVyPTuHexszJ4.roa
File: RmZy8FbIKf8cOtqVyPTuHexszJ4.roa (raw, json)
Hash identifier: p7DUt8O/Y1g9yaW4n2AxrL++2VTHHkryN79PuI216nE=
Subject key identifier: 46:66:72:F0:56:C8:29:FF:1C:3A:DA:95:C8:F4:EE:1D:EC:6C:CC:9E
Certificate issuer: /CN=5dab0b08e51f818224629fb3a211d83d5be35440
Certificate serial: 0185738FC3A9E929AFDBB8A2CCB0170F1175
Authority key identifier: 5D:AB:0B:08:E5:1F:81:82:24:62:9F:B3:A2:11:D8:3D:5B:E3:54:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XasLCOUfgYIkYp-zohHYPVvjVEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e62089-b98a-4fdd-9c4e-62789182a0f3/1/RmZy8FbIKf8cOtqVyPTuHexszJ4.roa
Signing time: Mon 02 Jan 2023 17:37:59 +0000
ROA not before: Mon 02 Jan 2023 17:37:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15576
IP address blocks: 194.56.179.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:8f:c3:a9:e9:29:af:db:b8:a2:cc:b0:17:0f:11:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dab0b08e51f818224629fb3a211d83d5be35440
Validity
Not Before: Jan 2 17:37:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=466672f056c829ff1c3ada95c8f4ee1dec6ccc9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:83:8e:71:7f:6c:51:cb:fc:f5:0c:3d:c3:b0:
a4:94:26:05:84:f4:ab:ad:e8:eb:7a:88:8b:65:22:
2f:e6:72:7b:e4:6d:eb:0a:f1:d6:f0:e5:78:f2:da:
f5:81:2d:d5:f0:91:fa:7a:03:e4:38:4a:12:6e:d5:
37:b1:51:74:7a:bd:2f:d7:7f:cb:7c:a1:71:b8:17:
8a:80:0d:29:2d:17:3c:00:20:1e:3d:0f:99:c9:b0:
3d:06:4c:d0:b3:49:b5:74:07:2e:4c:38:c3:78:5e:
98:4b:df:4e:0f:cf:ab:89:b9:a8:c5:09:b5:0e:7b:
27:65:28:d0:70:5d:21:86:45:b7:29:81:e0:45:79:
37:dc:24:52:f2:13:02:b0:48:bc:60:71:80:95:6b:
1a:7b:e8:d6:33:01:f9:3e:c6:98:25:9b:b0:37:b5:
8b:86:ff:65:21:fc:0d:be:38:5f:54:2a:8c:c2:08:
4f:b4:45:6b:7a:57:8f:c1:84:6e:55:dd:13:e6:28:
e2:43:9d:46:43:23:e6:80:13:6b:b3:5a:82:b4:8d:
ee:98:d7:eb:1e:78:d7:e2:3a:d2:a4:9c:81:b6:43:
3c:da:3d:7c:06:e6:9a:d3:7d:c4:d7:f3:18:f8:47:
b8:d3:9b:34:8a:a8:30:29:7b:94:31:09:87:c2:d8:
7e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:66:72:F0:56:C8:29:FF:1C:3A:DA:95:C8:F4:EE:1D:EC:6C:CC:9E
X509v3 Authority Key Identifier:
keyid:5D:AB:0B:08:E5:1F:81:82:24:62:9F:B3:A2:11:D8:3D:5B:E3:54:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XasLCOUfgYIkYp-zohHYPVvjVEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e62089-b98a-4fdd-9c4e-62789182a0f3/1/RmZy8FbIKf8cOtqVyPTuHexszJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e62089-b98a-4fdd-9c4e-62789182a0f3/1/XasLCOUfgYIkYp-zohHYPVvjVEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.179.0/24
Signature Algorithm: sha256WithRSAEncryption
38:0d:c4:12:a4:e4:70:b5:21:04:12:17:36:ee:36:5e:fa:7a:
f8:2d:f9:a0:62:f9:1d:aa:7e:88:87:ef:6d:33:d2:73:2c:ec:
c1:ef:28:80:40:10:74:b6:1b:ef:c5:46:0a:40:6c:3c:de:49:
d2:a5:05:09:72:67:81:6a:68:6f:fb:06:7c:c2:a9:0c:65:6f:
1c:e0:ec:ff:07:de:6c:0a:bd:b3:fe:0d:f1:ef:c7:f6:f4:b4:
89:63:f9:71:32:fc:d9:22:75:d0:b4:6b:82:2c:19:cf:6d:80:
09:9c:d4:3b:72:5f:a0:ba:76:20:0b:b6:7f:1c:72:7d:8c:1d:
b8:5f:c3:ba:03:7e:6f:17:ae:19:93:c4:84:37:14:ca:74:59:
29:94:b7:c4:bf:f6:23:53:32:5b:09:b0:2b:c0:7b:5f:29:0c:
f8:a0:92:18:bd:8a:90:12:7f:9e:5a:2b:43:82:8d:94:42:91:
d9:fa:2c:09:21:97:e5:6f:66:0a:0a:89:56:93:86:9b:21:7b:
e6:7d:2b:a7:ed:af:03:d3:a2:65:6d:2a:02:d5:12:db:44:76:
89:e9:9b:1d:69:d2:ce:54:09:af:09:ca:c0:74:8b:08:0e:46:
19:74:44:67:49:5a:d0:ee:5e:05:7a:ec:78:37:5a:19:f7:7a:
f0:85:62:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 10:40:01 2025 by rpki-client