Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/A4HvMvWgI4eOhg-hiOVeKhsyRtE.roa
File: A4HvMvWgI4eOhg-hiOVeKhsyRtE.roa (raw, json)
Hash identifier: pYKyl5Frk+QFUIzTIkOvArXomiBWUY/yUELbotSsfLI=
Subject key identifier: 03:81:EF:32:F5:A0:23:87:8E:86:0F:A1:88:E5:5E:2A:1B:32:46:D1
Certificate issuer: /CN=5701528c2a2e2c46913c0b28ca3570f3880f1a56
Certificate serial: 0185626D321E63B95E067B739760CDA2409B
Authority key identifier: 57:01:52:8C:2A:2E:2C:46:91:3C:0B:28:CA:35:70:F3:88:0F:1A:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VwFSjCouLEaRPAsoyjVw84gPGlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/A4HvMvWgI4eOhg-hiOVeKhsyRtE.roa
Signing time: Fri 30 Dec 2022 09:46:41 +0000
ROA not before: Fri 30 Dec 2022 09:46:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33813
IP address blocks: 193.242.124.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:62:6d:32:1e:63:b9:5e:06:7b:73:97:60:cd:a2:40:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5701528c2a2e2c46913c0b28ca3570f3880f1a56
Validity
Not Before: Dec 30 09:46:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0381ef32f5a023878e860fa188e55e2a1b3246d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:48:70:b6:b0:ba:2b:73:80:af:bb:d6:13:09:
c1:49:d9:7d:03:08:89:e4:83:bc:a4:e9:09:7a:d1:
e9:e2:12:42:68:89:4a:83:ea:a0:1d:93:78:a2:2e:
e2:0a:57:89:d3:31:5c:8d:a0:6e:bc:b3:9d:e3:99:
a3:16:31:82:b3:51:41:5d:06:65:a9:47:48:61:69:
cf:9c:e5:76:a1:1e:ce:47:a8:e1:3a:f0:d0:3e:18:
4c:bd:e1:83:c3:83:a8:47:9b:3e:e7:47:a2:5e:af:
01:db:26:a2:03:0f:24:0f:f0:30:6a:f1:90:27:b5:
01:d1:7f:bd:e4:d8:18:bf:0e:74:41:86:3d:4e:d3:
59:8e:96:88:dc:87:31:67:09:3f:08:f0:3f:49:28:
46:4a:a1:48:e5:6c:ca:be:b8:d6:97:ab:f6:c3:1c:
b8:f7:a1:aa:37:18:ce:38:1b:78:46:8e:47:82:2a:
aa:3e:d4:33:1d:88:1d:8d:7c:b5:10:ad:8f:df:f2:
07:4e:50:42:29:bd:2a:44:ca:01:cd:93:fa:71:5d:
53:64:90:d0:f1:5d:2f:5f:7c:81:e2:c3:ec:44:85:
fd:08:c4:f1:74:4b:2e:d5:78:2a:e3:39:3c:1a:82:
cd:fc:58:8f:89:61:f4:7c:76:93:de:3b:95:9f:01:
7c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:81:EF:32:F5:A0:23:87:8E:86:0F:A1:88:E5:5E:2A:1B:32:46:D1
X509v3 Authority Key Identifier:
keyid:57:01:52:8C:2A:2E:2C:46:91:3C:0B:28:CA:35:70:F3:88:0F:1A:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwFSjCouLEaRPAsoyjVw84gPGlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/A4HvMvWgI4eOhg-hiOVeKhsyRtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.242.124.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:2a:7a:c1:86:1d:72:98:af:1f:c3:3b:5b:12:11:ad:51:51:
1d:1f:91:2c:e4:48:f1:31:d9:a6:65:49:ba:16:9f:88:35:26:
8f:fc:f1:99:b8:5b:37:b7:55:f5:a0:c7:c1:f9:2b:fb:cf:5f:
7b:5b:3a:c7:c4:0d:6f:66:78:5c:1f:a2:b1:f7:3b:76:af:88:
25:33:67:e0:37:a3:1d:7c:e1:cf:b8:39:e6:31:4f:aa:3b:f6:
4e:c8:bc:b2:d7:00:b0:0e:80:1f:7e:48:8e:45:c1:c1:4a:d2:
15:3e:7b:21:9c:be:76:23:8b:4e:5f:3e:b7:51:73:f3:52:96:
62:4c:67:52:5b:b3:bc:4e:a1:52:a8:0b:02:7c:c7:83:62:c3:
50:86:60:6d:82:e8:3f:c4:26:3d:7a:cc:6b:ed:7d:68:9f:df:
ac:12:0a:4f:88:3d:9d:8a:f2:b6:65:65:ec:63:c0:82:a6:23:
1d:bf:13:6e:43:57:ed:75:49:4b:63:d0:8c:a1:92:a4:d4:f9:
83:a1:13:74:e9:8a:ba:85:88:71:e4:67:b8:1d:b3:8a:59:8e:
54:e5:7a:90:ac:aa:0c:41:97:43:53:11:cc:2c:b4:06:c6:e9:
82:50:57:88:39:4d:cc:4f:e1:e0:a4:d3:fa:57:b8:c6:d0:fe:
6a:82:55:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:24 2025 by rpki-client