Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/7wBIZ_JLINPv-CWmxrDN8C-CS1E.roa
File: 7wBIZ_JLINPv-CWmxrDN8C-CS1E.roa (raw, json)
Hash identifier: 2mAGEZa0PG7hOuVrWDKg0fMoKAmyaTEgsFcq/auA1Ms=
Subject key identifier: EF:00:48:67:F2:4B:20:D3:EF:F8:25:A6:C6:B0:CD:F0:2F:82:4B:51
Certificate issuer: /CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Certificate serial: 01857130A67FB8371CDF9088ABCEEE6504AE
Authority key identifier: B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/7wBIZ_JLINPv-CWmxrDN8C-CS1E.roa
Signing time: Mon 02 Jan 2023 06:34:51 +0000
ROA not before: Mon 02 Jan 2023 06:34:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210538
IP address blocks: 193.164.4.0/24 maxlen: 24
193.164.7.0/24 maxlen: 24
193.164.6.0/24 maxlen: 24
93.177.102.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:30:a6:7f:b8:37:1c:df:90:88:ab:ce:ee:65:04:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Validity
Not Before: Jan 2 06:34:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef004867f24b20d3eff825a6c6b0cdf02f824b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d0:dc:70:07:12:35:f1:7e:e1:3a:1b:0b:29:
3c:3c:dc:e1:cf:24:52:a8:58:b4:c3:2a:e3:ac:3d:
e2:3e:c4:b5:1d:0d:e8:07:19:d5:d3:b1:1c:12:12:
d7:04:ba:bf:eb:1a:20:04:5f:c7:77:c4:63:6e:e0:
78:3b:c2:b9:4a:e6:cb:dc:86:d9:59:c0:a0:59:49:
d6:bb:ca:1a:f9:87:d3:ca:13:37:d2:c9:58:52:00:
12:3d:27:56:45:98:50:19:c5:e0:95:e6:66:47:af:
be:1b:58:0a:c9:fa:78:57:9c:41:c3:55:2d:fb:ac:
a3:46:e0:5f:c3:e8:5a:af:de:7f:b9:e2:67:ae:41:
07:88:85:e6:37:e3:65:2e:35:80:d3:97:9c:0f:4d:
8e:6e:c2:a7:19:88:b8:a4:6d:14:19:64:37:a5:2c:
5c:a8:d1:ec:11:c2:38:1d:eb:f0:fe:0a:c9:f1:1a:
a6:d4:8c:f3:4a:a7:a7:98:ba:ab:70:4b:9b:0f:67:
64:43:49:1d:4e:e4:74:7b:63:21:22:cc:2c:f2:d5:
0a:6c:89:bf:b1:82:d4:e9:35:7f:ad:b9:92:c2:3f:
d1:d7:97:e4:8e:c4:d1:09:22:24:e4:9b:ed:42:27:
c6:b7:18:71:a4:eb:9a:e2:de:e8:38:fb:48:a8:fb:
4d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:00:48:67:F2:4B:20:D3:EF:F8:25:A6:C6:B0:CD:F0:2F:82:4B:51
X509v3 Authority Key Identifier:
keyid:B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/7wBIZ_JLINPv-CWmxrDN8C-CS1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.102.0/24
193.164.4.0/24
193.164.6.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:bf:ca:30:f3:35:b2:da:92:06:58:3d:7e:72:4a:9b:b8:21:
bd:dd:37:48:a4:cb:d1:9b:97:d8:9e:82:b6:29:b2:75:9b:7e:
83:10:49:af:9a:49:9b:cb:8a:eb:74:e1:48:e8:1f:7e:a9:f2:
f3:34:9e:4f:ba:b6:a9:81:2f:2f:5e:ac:f2:2d:24:d6:fb:c5:
17:c7:b5:4b:ef:4f:a4:52:01:6b:05:92:50:36:1a:00:72:2a:
d1:de:ff:ac:db:49:0f:61:9d:f8:03:b6:c9:31:20:a8:9c:49:
c2:c9:9b:a4:9c:90:81:9b:e3:df:7f:15:7b:11:aa:f5:36:92:
96:b7:8d:35:d3:35:4f:87:88:f0:65:bb:58:13:90:22:b1:84:
f7:cb:60:69:00:46:c7:56:7c:60:bc:55:b1:3e:bb:cf:df:43:
25:32:5e:a5:63:6d:5f:72:58:cc:b6:ad:98:c9:62:a2:0d:a4:
28:b7:7d:31:b6:f4:5e:df:b5:65:98:c1:bc:a1:de:6a:51:c1:
6c:58:8e:b6:bf:fa:e6:c0:4f:dd:f1:33:f4:b2:bd:c5:11:ae:
07:63:a7:a6:7b:73:31:cc:04:72:cd:61:3c:d5:f5:ea:f6:e7:
5e:ec:f9:8c:75:45:89:54:8e:7b:4c:2d:0b:45:68:b4:c7:50:
2c:bc:6a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:31 2025 by rpki-client