Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/a6076e-1510-488c-b7fb-c94fe4c971d4/1/oLNzdEKV8R10i2I8BC-9M70DRWk.roa
File: oLNzdEKV8R10i2I8BC-9M70DRWk.roa (raw, json)
Hash identifier: w7m0mLsguBH/njoOIXTHbkhQ5A4FUyRJ5TFr1OzafJg=
Subject key identifier: A0:B3:73:74:42:95:F1:1D:74:8B:62:3C:04:2F:BD:33:BD:03:45:69
Certificate issuer: /CN=7607ccc309291dc81b19143d4d3fe28d01c6bebd
Certificate serial: 01EA4602
Authority key identifier: 76:07:CC:C3:09:29:1D:C8:1B:19:14:3D:4D:3F:E2:8D:01:C6:BE:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/a6076e-1510-488c-b7fb-c94fe4c971d4/1/oLNzdEKV8R10i2I8BC-9M70DRWk.roa
Signing time: Tue 10 May 2022 14:22:01 +0000
ROA not before: Tue 10 May 2022 14:22:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210728
IP address blocks: 194.26.103.0/24 maxlen: 24
2a11:2440::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32130562 (0x1ea4602)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7607ccc309291dc81b19143d4d3fe28d01c6bebd
Validity
Not Before: May 10 14:22:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a0b373744295f11d748b623c042fbd33bd034569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e0:5a:69:a1:d9:cd:84:7d:bd:da:f4:a7:37:
57:1d:e5:41:97:46:5d:ac:cb:d7:48:cf:7d:c6:23:
13:87:ee:a3:54:60:51:65:39:74:9a:6c:a5:e3:d7:
25:56:c7:b8:87:16:02:44:5a:3e:ff:2d:76:c9:ab:
46:47:d4:e8:a8:85:35:92:95:78:91:2e:1d:81:e5:
14:1b:6f:ef:f4:2f:05:6b:16:27:b2:5a:2f:e5:c0:
15:7c:13:ac:46:15:ef:17:f1:16:37:5c:a7:07:0f:
4f:a4:b4:89:73:dd:80:7b:a3:b6:a2:64:22:76:8a:
49:77:5e:0e:1c:94:7f:76:06:28:e3:15:f7:af:5e:
ad:0a:cf:d2:e4:01:87:52:ae:56:b2:58:17:3e:b1:
07:bc:0e:45:02:87:71:63:39:e3:20:d6:64:50:0d:
89:a4:06:cd:a7:60:fc:c0:cd:af:66:70:b5:4b:6e:
17:66:90:db:6b:a2:67:4f:16:aa:65:32:25:55:f6:
db:f0:12:4a:27:de:27:37:e7:e1:69:a8:51:f3:c4:
06:37:8a:4d:82:31:dd:99:65:65:97:e6:88:4d:69:
c1:e5:f2:be:4a:56:12:ea:dc:2e:ad:5a:1d:a1:6f:
1f:45:ed:74:b3:76:f9:5d:7e:0e:62:b5:e1:76:04:
86:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B3:73:74:42:95:F1:1D:74:8B:62:3C:04:2F:BD:33:BD:03:45:69
X509v3 Authority Key Identifier:
keyid:76:07:CC:C3:09:29:1D:C8:1B:19:14:3D:4D:3F:E2:8D:01:C6:BE:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a6076e-1510-488c-b7fb-c94fe4c971d4/1/oLNzdEKV8R10i2I8BC-9M70DRWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a6076e-1510-488c-b7fb-c94fe4c971d4/1/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.103.0/24
IPv6:
2a11:2440::/32
Signature Algorithm: sha256WithRSAEncryption
68:52:b6:e8:cd:24:88:ad:c4:7a:96:73:71:3f:1c:ab:37:5a:
f3:eb:36:73:04:f3:d8:f0:dd:29:6a:81:2b:d6:b0:02:f7:74:
b1:be:9e:7c:48:70:10:d4:d9:14:75:47:00:da:18:a2:d8:c7:
b9:cb:90:33:44:b3:a9:30:e9:88:75:fb:9f:83:3d:2c:6f:30:
95:fc:0b:b9:e2:ab:a1:a9:83:7f:1c:fe:40:99:81:89:5a:11:
74:d4:59:d8:52:cc:43:4c:78:3c:79:0a:9a:e5:bd:23:7a:f5:
2e:95:e4:06:13:a9:84:00:c8:48:68:90:01:a7:62:95:ac:e6:
b4:fe:dd:ad:11:b5:38:c3:79:fb:f7:80:9b:72:8c:9e:29:b6:
d2:3d:d2:0b:97:8c:e4:4c:f6:60:3c:4d:93:02:da:a6:98:0d:
e7:e7:76:39:6e:10:f3:d2:59:20:d0:1a:35:35:5b:f5:97:f4:
87:2c:a1:23:cc:d7:79:d8:5e:6e:f0:c6:1a:da:d4:40:30:a9:
a7:23:99:aa:99:93:be:05:51:9b:57:e1:d5:1f:a3:90:43:57:
6e:b3:50:7f:2b:92:50:da:86:a4:7a:63:ce:76:a5:fa:4b:9b:
b3:71:da:f0:64:ad:7f:4d:00:69:6b:f2:e0:3e:a5:c9:95:5f:
72:61:f9:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:54 2025 by rpki-client