Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/f-zLQwbp7_FVhpYXbamDQ8Ts4xk.roa
File: f-zLQwbp7_FVhpYXbamDQ8Ts4xk.roa (raw, json)
Hash identifier: pdi4wL/awIsalQf6D7boLdKyXp9XU2j6lGhmoH6Bw0U=
Subject key identifier: 7F:EC:CB:43:06:E9:EF:F1:55:86:96:17:6D:A9:83:43:C4:EC:E3:19
Certificate issuer: /CN=a7f09ad8aad3b3354875bbeaed05b61a54a03704
Certificate serial: 0182EE87065D5F1A26E64271CD67013AC59D
Authority key identifier: A7:F0:9A:D8:AA:D3:B3:35:48:75:BB:EA:ED:05:B6:1A:54:A0:37:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/f-zLQwbp7_FVhpYXbamDQ8Ts4xk.roa
Signing time: Tue 30 Aug 2022 11:33:22 +0000
ROA not before: Tue 30 Aug 2022 11:33:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198572
IP address blocks: 195.200.200.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ee:87:06:5d:5f:1a:26:e6:42:71:cd:67:01:3a:c5:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f09ad8aad3b3354875bbeaed05b61a54a03704
Validity
Not Before: Aug 30 11:33:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7feccb4306e9eff1558696176da98343c4ece319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8d:a4:7c:22:a8:fb:eb:05:49:c3:e7:f0:a6:
00:d5:8d:c5:da:2e:e8:ae:e8:8e:d7:c6:62:8d:55:
d8:d5:92:d2:4f:3a:25:72:93:20:c9:d9:97:07:1a:
3b:fa:36:41:1b:d4:42:72:26:d4:cf:e4:57:9c:09:
98:4d:6c:bc:d2:f2:92:68:67:05:1e:9d:a2:a4:54:
62:31:0e:0c:7a:0a:4e:4f:70:40:8d:47:a9:b2:00:
72:ed:33:4f:e4:53:20:c0:1c:e7:f4:d5:2f:6f:6f:
9c:f1:77:85:92:bd:0d:1a:05:c1:5c:fe:70:d1:3f:
31:af:3c:27:44:d2:02:fe:8a:23:1d:23:14:5e:22:
e9:38:f0:fa:03:04:86:dc:5a:8f:cb:a1:7c:69:1d:
22:6c:27:b1:16:76:f9:cb:5a:4b:e5:1f:0c:19:12:
f6:a5:46:7d:50:6d:f1:d3:68:51:51:3d:a7:dd:05:
6d:fc:2d:03:1d:dc:88:e4:8f:08:5b:33:4d:b5:20:
17:8d:88:99:14:a2:39:70:32:4c:da:6a:17:1a:72:
13:eb:43:5d:c4:ed:cc:ea:45:6b:af:95:bc:8a:d8:
09:9d:2e:75:08:ba:56:57:35:bb:c3:74:9d:86:3a:
f9:5d:97:d7:30:c8:d6:ca:67:0c:aa:97:cc:b8:f9:
16:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:EC:CB:43:06:E9:EF:F1:55:86:96:17:6D:A9:83:43:C4:EC:E3:19
X509v3 Authority Key Identifier:
keyid:A7:F0:9A:D8:AA:D3:B3:35:48:75:BB:EA:ED:05:B6:1A:54:A0:37:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/f-zLQwbp7_FVhpYXbamDQ8Ts4xk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.200.200.0/24
Signature Algorithm: sha256WithRSAEncryption
46:07:d9:88:4d:e4:ea:de:6d:b5:d4:a8:12:c3:5c:72:84:92:
00:7a:a3:4d:a9:14:55:a8:a3:54:fc:ef:34:41:51:f7:0f:bd:
cf:4c:05:00:1e:c8:11:59:28:ab:c7:8e:72:46:0b:f4:5e:83:
29:6e:d0:64:74:d9:d3:72:62:a3:0d:a8:fc:cd:04:0a:bb:1b:
f9:eb:62:49:bc:7e:0c:9b:34:5b:51:22:b0:aa:d9:b9:09:8f:
2d:50:8e:03:a6:43:2e:d5:24:b2:10:f4:f7:78:b9:77:0e:ab:
8e:86:ff:86:ee:5c:47:b8:34:63:b8:7d:2a:ab:01:80:28:b9:
6a:af:67:18:5a:9f:1e:39:14:26:25:d7:00:3e:b9:d3:bb:d1:
f8:de:35:23:e3:45:61:64:b1:8a:c3:8e:a8:21:6d:a7:97:6f:
25:b0:5f:3a:0c:b2:95:e9:ac:ad:9a:48:c7:97:18:62:cd:c8:
7d:9f:38:be:18:e9:93:04:c4:97:7b:6f:81:85:f8:7e:4f:23:
27:c1:ef:48:a6:bc:9a:d5:e7:e5:16:8b:4f:bd:4f:7c:9b:7e:
4c:74:fc:ad:42:05:60:69:33:75:3f:c7:6b:1d:f0:a9:9e:38:
0f:df:c4:3b:ea:7b:06:26:1c:cc:53:c4:47:0a:89:5e:e1:f5:
25:04:d3:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:34:07 2025 by rpki-client