Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/fO1SoQum98gCXAicpVuPh6u-i20.roa
File: fO1SoQum98gCXAicpVuPh6u-i20.roa (raw, json)
Hash identifier: Lk/Sqj+bVgdoBqp9tcJt7BCW0NNCiJey9cA3g/vydy0=
Subject key identifier: 7C:ED:52:A1:0B:A6:F7:C8:02:5C:08:9C:A5:5B:8F:87:AB:BE:8B:6D
Certificate issuer: /CN=7b75d372039b1ab2d416ad83bf6914058411c2a2
Certificate serial: 01825B1FBE9E3F1F45C869DE49EDE98EA3F7
Authority key identifier: 7B:75:D3:72:03:9B:1A:B2:D4:16:AD:83:BF:69:14:05:84:11:C2:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e3XTcgObGrLUFq2Dv2kUBYQRwqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/fO1SoQum98gCXAicpVuPh6u-i20.roa
Signing time: Mon 01 Aug 2022 20:36:23 +0000
ROA not before: Mon 01 Aug 2022 20:36:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49099
IP address blocks: 109.94.166.0/24 maxlen: 24
109.94.167.0/24 maxlen: 24
109.94.166.0/23 maxlen: 23
193.34.246.0/24 maxlen: 24
193.34.244.0/24 maxlen: 24
193.34.244.0/23 maxlen: 23
193.34.245.0/24 maxlen: 24
193.34.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5b:1f:be:9e:3f:1f:45:c8:69:de:49:ed:e9:8e:a3:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b75d372039b1ab2d416ad83bf6914058411c2a2
Validity
Not Before: Aug 1 20:36:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ced52a10ba6f7c8025c089ca55b8f87abbe8b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b6:25:54:69:96:99:80:c6:32:4f:67:fc:60:
0a:3f:1d:d2:6d:dc:53:08:8b:8d:7e:3a:3d:07:a2:
9a:0f:f5:ed:d3:2c:51:6f:f8:c1:60:33:4a:f6:65:
dc:bc:e2:fa:b7:9b:15:69:fb:6c:b0:a7:46:dd:1b:
1b:25:c5:35:39:ad:02:40:1f:ad:8b:ce:a6:85:62:
3e:f0:13:16:24:ad:55:c1:de:5f:54:4c:2b:4b:46:
6a:8a:0a:fc:86:d8:87:20:73:d3:8a:cb:44:95:d4:
49:a3:29:d4:63:7d:a8:38:43:b1:b4:da:ed:24:86:
dd:81:55:26:54:ea:2b:43:d0:0c:42:12:3b:8c:ab:
a8:7b:a8:4b:4f:f1:e1:cc:bb:c0:20:2a:91:04:5d:
4c:d2:39:3c:d2:d0:76:96:29:f5:76:3e:91:4e:dd:
bf:5f:d1:f9:c7:a0:04:59:64:5f:ec:ba:15:2a:91:
54:3b:46:6c:af:1b:8b:22:d6:37:32:b1:fd:db:9a:
79:26:8d:95:c1:b5:df:e5:ac:61:71:64:18:74:b5:
d0:18:38:29:4a:c1:f0:e0:b3:95:48:93:35:c9:aa:
fe:99:80:5f:0b:68:e5:d0:76:64:44:78:a7:1e:f1:
7e:a7:39:2e:08:74:46:87:08:66:ce:78:9a:51:36:
65:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:ED:52:A1:0B:A6:F7:C8:02:5C:08:9C:A5:5B:8F:87:AB:BE:8B:6D
X509v3 Authority Key Identifier:
keyid:7B:75:D3:72:03:9B:1A:B2:D4:16:AD:83:BF:69:14:05:84:11:C2:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3XTcgObGrLUFq2Dv2kUBYQRwqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/fO1SoQum98gCXAicpVuPh6u-i20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.94.166.0/23
193.34.244.0/22
Signature Algorithm: sha256WithRSAEncryption
73:b7:f4:50:80:7c:e9:9c:fc:ac:21:35:94:4a:c0:1a:e1:30:
70:2f:5b:bd:0a:d5:30:aa:43:f3:6c:f5:10:85:26:06:6a:d5:
60:03:21:96:af:78:a8:54:11:dd:ea:bc:ac:6d:8e:61:21:67:
b1:05:2d:61:dc:95:fc:3a:45:99:ed:2d:e0:5a:09:44:d1:5d:
27:c0:a4:be:a7:57:ea:8f:21:ba:53:53:10:48:56:e0:db:f3:
0c:19:2a:d3:4a:b7:6e:1a:ca:2e:36:a9:b1:21:2b:ad:5b:ce:
2d:09:b2:73:29:12:29:c7:a0:b2:69:f2:68:58:b9:82:08:ea:
09:a8:44:fd:3b:b9:bc:eb:f5:c6:d9:ae:2c:91:cd:69:65:da:
dd:77:4e:58:d2:cb:dd:af:e9:8c:91:87:83:72:84:bb:c0:7c:
14:39:0f:38:95:5e:de:62:b2:21:de:be:93:4c:89:b9:a3:ea:
5c:07:40:03:c6:92:a5:4c:c6:c5:86:85:27:3a:ad:94:dc:bf:
fa:ad:f3:0e:54:48:4b:cd:5e:27:10:bc:98:05:a0:49:05:75:
f9:94:44:6a:98:df:f8:e9:57:3f:ae:0c:1e:c7:fc:a4:bd:ee:
90:11:6e:eb:c3:7e:6a:45:5e:89:af:d4:e1:61:57:26:1d:dd:
f7:fc:74:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:00 2025 by rpki-client