Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/42v_ivIXPx4lPZAJqi2OIt0E59I.roa
File: 42v_ivIXPx4lPZAJqi2OIt0E59I.roa (raw, json)
Hash identifier: bXKPpjwTXAIFBl0lwmDJZREem/U1HAccHs0g3v2GEcc=
Subject key identifier: E3:6B:FF:8A:F2:17:3F:1E:25:3D:90:09:AA:2D:8E:22:DD:04:E7:D2
Certificate issuer: /CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Certificate serial: 018B03844C7230F9B75D77A85037664AC998
Authority key identifier: A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/42v_ivIXPx4lPZAJqi2OIt0E59I.roa
Signing time: Fri 06 Oct 2023 05:44:43 +0000
ROA not before: Fri 06 Oct 2023 05:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 194.32.146.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:03:84:4c:72:30:f9:b7:5d:77:a8:50:37:66:4a:c9:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Validity
Not Before: Oct 6 05:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e36bff8af2173f1e253d9009aa2d8e22dd04e7d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5c:ab:57:de:a1:16:98:a8:ee:10:bd:64:e6:
e0:bf:c7:6a:a6:ba:3c:ce:48:d4:75:96:62:a6:2f:
78:10:ad:ef:73:6b:b3:29:58:84:04:0e:c8:bb:7c:
5a:34:eb:e6:90:21:ae:7d:7a:a0:d7:b0:27:8b:c9:
2b:36:2f:e4:8d:10:66:bf:8f:0e:cc:6a:cc:e2:56:
df:86:3e:63:8d:bc:eb:58:3e:62:b0:03:c9:17:bc:
c0:1e:89:f6:90:b6:56:7d:cb:3b:0b:46:c1:42:a2:
54:e4:7e:38:2a:da:b3:ed:36:f8:c9:02:ee:70:91:
66:94:99:56:d9:ee:97:71:d5:61:92:f3:98:88:97:
cd:b9:ec:e3:e8:df:3a:2e:f1:85:e8:75:58:8c:5d:
bb:f8:45:3b:2e:3b:a6:db:bd:ec:2b:1c:20:f9:c7:
5f:81:21:8b:7a:ca:69:b6:5b:b3:08:ad:89:da:62:
6b:7f:15:d8:0b:73:ec:d8:63:0e:42:c0:b0:61:bb:
86:a1:96:13:60:19:96:66:0e:ac:1a:6c:b3:10:9d:
bb:ba:4a:b7:d1:d4:b6:94:44:c7:d2:29:40:30:8f:
b4:be:91:1c:2a:91:c6:8f:c7:de:c4:fc:3d:94:21:
98:df:b3:32:32:36:a3:05:46:49:d8:6b:92:26:78:
78:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:6B:FF:8A:F2:17:3F:1E:25:3D:90:09:AA:2D:8E:22:DD:04:E7:D2
X509v3 Authority Key Identifier:
keyid:A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/42v_ivIXPx4lPZAJqi2OIt0E59I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.32.146.0/24
Signature Algorithm: sha256WithRSAEncryption
00:44:3e:36:8d:a6:d1:06:0b:15:fe:6c:d5:e8:58:27:69:85:
f9:4d:cf:c6:85:f1:24:d3:ad:c3:c7:a7:e1:41:2a:82:94:19:
14:c4:ca:0b:b1:c7:1c:ae:ed:0d:92:a8:4b:01:57:83:be:e3:
70:ed:1e:8f:54:00:87:88:b1:72:41:ac:ec:80:71:89:db:3b:
4d:07:de:d8:2b:d0:31:6b:5b:01:77:99:86:12:1f:c1:00:16:
75:f4:66:5a:2b:2e:87:0f:38:2b:31:91:9e:ed:72:cf:53:85:
61:dd:44:e3:48:fe:9c:9e:71:21:a8:2d:64:7a:ea:98:f0:db:
de:22:45:9f:4c:de:58:7f:31:aa:ca:84:dd:15:9d:9c:f7:05:
94:17:bd:df:14:89:4f:c7:8b:8a:ed:49:88:bd:d7:3d:4f:fb:
4f:08:97:b2:2b:48:81:75:81:46:b5:e8:a3:94:23:1b:90:61:
ed:c4:a9:46:61:61:50:56:a8:dc:21:e7:97:1a:c3:b5:a7:8c:
9b:9b:b2:83:fc:ef:24:30:f0:61:92:58:05:d1:e1:dd:77:3f:
a7:4e:d1:28:de:34:4c:3c:89:7a:84:c7:08:a3:ee:7c:d0:92:
a4:99:a1:df:d2:10:eb:bd:2b:63:13:74:f0:c6:54:49:16:08:
9c:7a:fc:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:25 2025 by rpki-client