Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/sACE7dBKfAu_iv2xvQy--qqcLQk.roa
File: sACE7dBKfAu_iv2xvQy--qqcLQk.roa (raw, json)
Hash identifier: 5ZGU8bOW+vDLAgUxZUwoSVWjsIaonG8MjZDf81g4YCQ=
Subject key identifier: B0:00:84:ED:D0:4A:7C:0B:BF:8A:FD:B1:BD:0C:BE:FA:AA:9C:2D:09
Certificate issuer: /CN=c3593644c70919f6083f2819a73f3d39eb9cb5e8
Certificate serial: 01857295A4B3A9E7E65B9CB13A659EC89FC9
Authority key identifier: C3:59:36:44:C7:09:19:F6:08:3F:28:19:A7:3F:3D:39:EB:9C:B5:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w1k2RMcJGfYIPygZpz89Oeucteg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/sACE7dBKfAu_iv2xvQy--qqcLQk.roa
Signing time: Mon 02 Jan 2023 13:04:47 +0000
ROA not before: Mon 02 Jan 2023 13:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200023
IP address blocks: 146.19.103.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:95:a4:b3:a9:e7:e6:5b:9c:b1:3a:65:9e:c8:9f:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3593644c70919f6083f2819a73f3d39eb9cb5e8
Validity
Not Before: Jan 2 13:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b00084edd04a7c0bbf8afdb1bd0cbefaaa9c2d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:67:68:b1:9b:71:ba:4c:2f:3f:80:a7:46:6f:
85:29:d7:10:4a:d2:2a:a0:b7:e9:65:49:52:fc:5d:
30:e7:64:b8:e9:48:63:e8:57:0a:2c:0f:0a:21:d4:
75:a0:03:e5:c9:57:4b:df:dd:45:b6:43:7e:e3:32:
7d:4a:f0:f8:55:95:57:0a:b3:83:97:f6:c0:d0:8a:
41:bf:53:6d:66:b7:9d:48:6b:9b:be:8e:d1:fd:ad:
d5:84:96:c3:7e:9d:3a:6c:4e:f5:cc:2d:81:fb:11:
4a:bd:45:c9:48:22:45:24:aa:07:9a:17:b7:f8:35:
6b:65:f0:b2:59:a5:20:3a:16:2d:bf:4c:7f:90:a5:
52:bb:1f:8a:a4:41:ea:b3:ae:44:05:f1:df:62:eb:
2d:c3:7b:aa:9c:b7:91:e1:e1:4d:6c:4b:47:99:d2:
a9:f1:b2:6c:4c:51:8b:ea:9f:44:cf:f2:70:47:08:
16:3f:c9:ff:85:d9:65:27:e3:c0:37:0d:1c:9d:6e:
e6:1d:ef:04:a1:bc:c7:e0:ec:0a:fd:96:6c:45:b9:
80:2d:a5:3f:22:b6:87:fe:7d:19:00:17:30:06:1f:
cc:11:bd:b8:ad:03:da:97:b9:e2:14:8b:43:df:08:
7f:43:7e:66:f2:a3:03:04:89:ab:d2:fe:7b:9e:fe:
d8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:00:84:ED:D0:4A:7C:0B:BF:8A:FD:B1:BD:0C:BE:FA:AA:9C:2D:09
X509v3 Authority Key Identifier:
keyid:C3:59:36:44:C7:09:19:F6:08:3F:28:19:A7:3F:3D:39:EB:9C:B5:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w1k2RMcJGfYIPygZpz89Oeucteg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/sACE7dBKfAu_iv2xvQy--qqcLQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.103.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:52:b7:0c:57:be:22:e8:0e:99:fe:87:3c:94:b2:11:26:f1:
0b:5a:be:b2:c7:aa:f1:d4:8b:54:d1:50:fa:79:3e:1f:4e:29:
30:55:54:15:1d:7a:d3:26:d3:57:b2:37:5d:98:65:6a:e9:2d:
f6:cd:76:27:04:bb:e9:6f:2b:c5:f8:cd:e9:ca:98:79:32:e2:
80:e6:14:74:e5:18:61:78:b1:d1:b3:ec:db:46:2d:79:99:14:
ec:00:cd:83:cd:c5:b9:76:72:5b:96:4d:6e:8d:95:33:7a:30:
05:79:ab:56:e9:ea:8d:6c:8d:31:f3:3b:0a:14:24:5e:98:eb:
42:ae:a6:10:62:7c:37:a2:82:a5:33:f6:4d:e1:cc:b0:32:a5:
db:56:6a:36:25:73:1e:7a:ee:59:04:87:12:f4:b0:84:94:93:
83:52:7c:61:ab:73:ce:d2:38:0c:30:85:d0:66:9f:60:7c:df:
f5:b7:6c:e6:96:4d:7a:23:0b:9d:5e:de:cc:8a:82:85:7d:de:
9c:71:dd:a7:88:88:69:83:95:7c:5f:de:03:0e:b0:9e:ed:24:
b2:f0:26:22:a1:bc:15:fd:f9:0b:4c:b6:a2:62:50:fb:92:d8:
47:b0:f2:dc:f1:3b:65:a3:ad:30:c6:7f:d3:61:39:f8:2e:18:
c9:be:22:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:22:06 2025 by rpki-client