Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/3mv0TuNMZ5lBHrVjmu1Go_iogzI.roa
File: 3mv0TuNMZ5lBHrVjmu1Go_iogzI.roa (raw, json)
Hash identifier: ra0pt5PPwrjmuKBELBoo/AvEWrjCqE+2u4Pp9b5SLH8=
Subject key identifier: DE:6B:F4:4E:E3:4C:67:99:41:1E:B5:63:9A:ED:46:A3:F8:A8:83:32
Certificate issuer: /CN=7a3862134f141365ef887902e6057c28b2829c9d
Certificate serial: 0185729EED82EDE9E955C7E33A63036F5395
Authority key identifier: 7A:38:62:13:4F:14:13:65:EF:88:79:02:E6:05:7C:28:B2:82:9C:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejhiE08UE2XviHkC5gV8KLKCnJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/3mv0TuNMZ5lBHrVjmu1Go_iogzI.roa
Signing time: Mon 02 Jan 2023 13:14:56 +0000
ROA not before: Mon 02 Jan 2023 13:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3303
IP address blocks: 194.124.232.0/23 maxlen: 23
2001:67c:1984::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9e:ed:82:ed:e9:e9:55:c7:e3:3a:63:03:6f:53:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a3862134f141365ef887902e6057c28b2829c9d
Validity
Not Before: Jan 2 13:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=de6bf44ee34c6799411eb5639aed46a3f8a88332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:cc:36:5c:55:8e:f7:8c:f1:fb:56:0c:aa:ce:
a4:d8:9b:50:fe:50:09:ec:1a:4d:62:f5:33:aa:1c:
92:bb:37:74:2e:56:d5:57:54:53:fb:12:e7:19:9a:
89:e0:49:49:b5:a8:d5:48:1a:c5:39:43:07:9a:d3:
dd:e8:e3:72:80:9d:0c:52:b2:84:1f:80:e3:dc:cf:
6f:cd:23:f8:f2:a8:5e:30:48:c8:15:ab:f0:78:8a:
37:61:21:49:5e:8d:78:c7:d8:39:69:65:80:91:d2:
d5:33:5f:15:62:e7:22:18:6c:a4:8c:6e:4b:da:b3:
c7:29:36:63:7d:aa:cc:e2:ba:46:13:a0:cc:ff:1b:
f4:e1:19:73:83:4e:79:10:95:06:9f:7f:5b:d4:20:
99:87:8e:bd:a0:ca:a6:21:9c:69:6a:c2:79:c8:66:
21:6e:06:ea:b6:90:a7:32:9b:0b:5c:82:ce:d7:ef:
5d:d9:d9:79:7f:48:06:f2:13:ab:52:08:eb:f6:84:
95:7c:34:f7:5f:6b:3f:10:3f:38:f5:98:e8:df:e4:
d4:3a:d4:f3:60:39:28:ad:f7:b3:d6:75:18:8c:3b:
22:39:e2:a5:f4:c5:95:55:76:16:70:07:d6:2b:ad:
f2:b1:7e:b1:ac:39:ad:a4:d5:ba:c2:e1:75:19:a6:
4f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:6B:F4:4E:E3:4C:67:99:41:1E:B5:63:9A:ED:46:A3:F8:A8:83:32
X509v3 Authority Key Identifier:
keyid:7A:38:62:13:4F:14:13:65:EF:88:79:02:E6:05:7C:28:B2:82:9C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejhiE08UE2XviHkC5gV8KLKCnJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/3mv0TuNMZ5lBHrVjmu1Go_iogzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.124.232.0/23
IPv6:
2001:67c:1984::/48
Signature Algorithm: sha256WithRSAEncryption
00:f0:06:e3:5e:36:7c:b9:d0:25:e9:1b:7f:0f:66:0d:45:e0:
1c:1e:9b:e5:71:d0:85:c2:14:fa:16:fb:ed:45:a4:75:45:d1:
12:bc:9c:f0:43:63:11:b3:31:31:a2:cf:98:59:0f:1d:a4:1c:
d3:6a:78:f8:99:62:1d:2a:ef:6a:4d:96:06:ae:90:76:b4:fd:
58:ed:14:39:a3:10:43:61:ed:8f:fe:96:25:ed:9e:f7:dd:06:
01:c4:32:47:b3:e0:ea:1c:58:a7:cf:3f:e0:39:51:53:ae:90:
c0:82:ed:26:61:d1:84:45:03:c6:96:51:c5:47:e4:84:c1:f4:
92:16:98:ff:6f:02:d4:3d:58:f2:7e:c5:14:f0:68:7d:80:72:
a6:53:5a:ee:b0:8e:34:d4:26:4f:c6:4f:bb:c9:da:94:93:a1:
2d:d7:93:9a:e6:7c:3f:04:14:91:4a:67:78:a7:20:a0:cd:f6:
08:68:dd:db:c7:ea:41:77:52:6a:1e:1d:5a:ec:4a:30:d9:13:
50:dc:0d:79:65:a1:59:ea:b5:18:fa:10:d9:f1:9d:a8:db:eb:
75:2d:ef:e5:88:5f:c6:42:92:8a:ad:3b:5f:86:b1:84:14:80:
db:18:db:4a:2c:9c:2b:0b:66:4d:3d:29:79:6b:df:67:f5:a0:
58:22:6f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:45:15 2025 by rpki-client