Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/M2nN8CGVOW2A2F0XakEq-fAFqd0.roa
File: M2nN8CGVOW2A2F0XakEq-fAFqd0.roa (raw, json)
Hash identifier: uVI8TLfdtkJhMo3EzYiFTPUWnXZOESNOIs44XhAhyv4=
Subject key identifier: 33:69:CD:F0:21:95:39:6D:80:D8:5D:17:6A:41:2A:F9:F0:05:A9:DD
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 018B713A6B8CE60B7CD62A1DB404EFFE6C71
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/M2nN8CGVOW2A2F0XakEq-fAFqd0.roa
Signing time: Fri 27 Oct 2023 13:02:15 +0000
ROA not before: Fri 27 Oct 2023 13:02:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52159
IP address blocks: 188.241.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:71:3a:6b:8c:e6:0b:7c:d6:2a:1d:b4:04:ef:fe:6c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Oct 27 13:02:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3369cdf02195396d80d85d176a412af9f005a9dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:43:2c:3f:e6:75:27:b3:b7:78:cd:ee:a8:f8:
69:81:f0:f5:8a:a3:57:e5:23:bc:4f:e7:3d:6f:d5:
ee:8c:e5:49:b7:28:22:45:e2:4f:04:69:9a:72:d7:
28:50:7e:f6:74:eb:9d:73:55:78:eb:5e:2c:dc:89:
00:24:3c:f8:83:74:18:08:0b:99:55:8f:5b:7f:02:
d1:33:67:d2:d2:59:3f:4c:f8:52:47:51:83:7c:16:
81:15:a1:86:cc:62:ba:05:0b:71:21:35:48:f0:b2:
b0:8d:ad:35:7d:4e:f8:97:ad:0a:13:0c:6d:e3:a5:
c9:85:fc:92:65:26:75:6f:18:d4:be:86:ad:25:a1:
c3:94:fc:ec:57:02:10:fa:62:69:4e:3f:59:49:13:
43:80:7d:78:24:c6:56:d0:b4:0b:48:2f:79:b4:94:
bb:90:d0:4b:81:c4:f3:fe:f4:48:17:36:59:49:e3:
f1:92:6a:90:83:90:b9:fc:90:c4:f9:2e:6d:83:4a:
d2:23:a9:94:50:8d:f2:90:f6:3b:4c:bc:16:24:f9:
fd:12:3f:36:4a:cd:4d:39:eb:a7:bf:fc:ea:75:9b:
c3:a0:89:6d:ef:a0:1a:48:3d:55:0b:6c:81:27:60:
22:ce:a1:24:29:63:83:6c:b3:a6:5f:e7:e6:4b:ef:
72:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:69:CD:F0:21:95:39:6D:80:D8:5D:17:6A:41:2A:F9:F0:05:A9:DD
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/M2nN8CGVOW2A2F0XakEq-fAFqd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.241.19.0/24
Signature Algorithm: sha256WithRSAEncryption
43:84:7a:df:23:5f:d9:ba:62:41:cc:34:a7:1c:d4:0e:40:7e:
36:be:5f:f7:0e:3b:b4:0a:d2:2e:c5:8e:fc:7f:e2:df:f0:ad:
9c:55:53:70:fc:4d:aa:3a:72:4b:dc:6e:c3:1d:2d:9e:b5:1b:
45:f6:3f:97:ec:f6:d2:91:d0:7d:3c:d4:17:6e:2a:05:0d:db:
cc:5c:13:78:69:0e:07:08:26:20:ec:17:d4:ed:40:1a:3b:5d:
15:33:48:e0:1e:97:ef:70:ce:46:d2:54:ee:99:ec:a9:06:d3:
cf:0a:c5:68:63:17:db:e5:89:1e:75:5d:8e:37:b9:5e:aa:d4:
e8:95:d1:9d:ce:12:6a:f0:12:01:84:62:25:71:0c:3e:e7:a2:
03:47:bb:74:df:ee:c0:11:75:cf:dd:9e:10:59:6b:48:8f:9a:
d7:a8:65:52:9a:ae:d3:c1:54:28:fe:84:d1:09:63:1b:fb:7f:
81:b3:f5:23:47:c7:73:d3:e7:54:6b:03:ab:da:88:e3:d3:24:
8f:93:e5:d7:25:28:fe:15:59:ce:6a:08:93:13:41:eb:c9:e0:
b6:e3:4a:b2:3d:e5:44:ed:fb:83:8e:39:b9:16:41:7b:20:4e:
72:af:06:47:44:7c:0f:4e:27:66:8b:8d:b6:83:2b:61:0c:19:
a2:73:d9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:05 2025 by rpki-client