Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/DubtdlATlM7_QpAOwdmTAPBkvQs.roa
File: DubtdlATlM7_QpAOwdmTAPBkvQs.roa (raw, json)
Hash identifier: j3y1EvHFHm+BJAuI/WFQHC/oTykEdgBuAzgF+9TG4ug=
Subject key identifier: 0E:E6:ED:76:50:13:94:CE:FF:42:90:0E:C1:D9:93:00:F0:64:BD:0B
Certificate issuer: /CN=022c8ffc50609ec0d8b4a72805c8990a64aae71e
Certificate serial: 01856EEFE83B7F8B2958321E933F7AA0D9AF
Authority key identifier: 02:2C:8F:FC:50:60:9E:C0:D8:B4:A7:28:05:C8:99:0A:64:AA:E7:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AiyP_FBgnsDYtKcoBciZCmSq5x4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/DubtdlATlM7_QpAOwdmTAPBkvQs.roa
Signing time: Sun 01 Jan 2023 20:04:54 +0000
ROA not before: Sun 01 Jan 2023 20:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56695
IP address blocks: 195.128.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:ef:e8:3b:7f:8b:29:58:32:1e:93:3f:7a:a0:d9:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=022c8ffc50609ec0d8b4a72805c8990a64aae71e
Validity
Not Before: Jan 1 20:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ee6ed76501394ceff42900ec1d99300f064bd0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bf:da:ae:7c:47:77:f4:27:22:ae:71:78:89:
55:31:5f:91:ae:ed:39:27:d6:26:97:72:3d:97:4f:
bd:61:14:23:e3:d1:de:a4:83:48:25:39:f7:6a:af:
d6:3a:b7:48:3b:6f:ea:15:89:d5:3f:aa:e7:6a:9c:
a8:20:d5:b8:a3:3a:47:c3:65:52:89:8d:b2:b6:8c:
a2:e8:85:3d:e0:06:7f:a8:88:b1:78:53:3d:5e:db:
2f:2e:f8:2c:b4:c0:52:de:f2:b5:d1:50:7d:c7:7c:
36:42:b4:ca:eb:82:70:e6:ae:f8:28:d8:c9:cf:74:
ea:b2:b4:48:86:98:a7:8c:2f:1e:f3:7f:6f:88:af:
50:df:ef:4b:bd:1d:a1:76:2c:4c:e1:e7:f0:0d:08:
e7:2e:25:6d:d2:46:24:f9:84:f3:42:ee:fa:95:ff:
08:ba:af:0d:33:d4:ab:9f:ea:be:c6:be:05:43:96:
c3:81:dc:c5:b3:09:db:15:83:e6:a4:49:3f:d3:d0:
5f:3d:17:cc:84:44:e6:a1:1a:b5:fe:ce:56:cb:b6:
bb:bf:1c:31:9a:07:e8:65:7a:31:98:f6:d0:2f:81:
86:b1:0f:b3:23:33:13:65:cf:85:c6:fc:3c:8c:aa:
e6:ad:58:b6:47:33:57:10:c8:fb:ca:52:b0:1b:57:
d9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E6:ED:76:50:13:94:CE:FF:42:90:0E:C1:D9:93:00:F0:64:BD:0B
X509v3 Authority Key Identifier:
keyid:02:2C:8F:FC:50:60:9E:C0:D8:B4:A7:28:05:C8:99:0A:64:AA:E7:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AiyP_FBgnsDYtKcoBciZCmSq5x4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/DubtdlATlM7_QpAOwdmTAPBkvQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.128.128.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:f1:7c:b9:73:9f:b3:d1:95:7d:e5:e9:ef:be:16:4b:eb:16:
83:c8:60:39:dd:26:d6:6f:54:13:36:36:2c:fe:ab:5e:41:ea:
75:a7:e9:55:8c:20:8b:24:0c:84:2f:f7:1d:a0:ab:21:fa:85:
7c:40:53:a9:93:c0:78:c3:8d:2c:12:1d:77:83:8c:ed:28:bc:
74:bc:8f:26:5d:6b:64:7a:8f:31:b2:22:9e:ce:e7:3c:4f:e0:
71:0e:c2:69:7b:82:66:ae:96:4b:d5:6c:ae:bc:7a:ce:eb:32:
3b:c4:9b:fb:28:ab:ed:35:29:0c:0c:62:ee:d4:7c:31:ad:3c:
ce:c3:84:83:1d:eb:46:99:f0:8e:5a:b6:de:2d:bf:a4:9b:53:
27:8b:d3:d3:d4:e1:18:f0:09:6c:c0:7b:ae:ca:bc:eb:c0:43:
0c:63:19:4a:1e:c8:c9:3f:94:9c:b8:34:69:2f:1f:2c:a7:35:
11:34:37:bf:98:12:b3:a3:cf:36:ce:ee:38:54:33:2d:ff:21:
14:9f:1b:c7:26:79:b1:9e:77:0d:0a:ae:32:ab:a1:9b:20:4e:
c1:8b:e4:ed:b9:da:a9:27:43:5a:34:d9:67:84:74:36:7b:ef:
d8:3b:f4:d4:26:64:d2:d5:2c:9a:c5:25:e3:e2:67:11:42:33:
65:93:f9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:34:27 2025 by rpki-client