Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1d44f2-1706-4bf1-b71d-74ca36402a85/1/oqfSoU-W-dAvFHTJpbeeVE139mE.roa
File: oqfSoU-W-dAvFHTJpbeeVE139mE.roa (raw, json)
Hash identifier: Epk6X2KX4I452gyH4dkZxKsgV6RnUSFlPh3I+QFvWjA=
Subject key identifier: A2:A7:D2:A1:4F:96:F9:D0:2F:14:74:C9:A5:B7:9E:54:4D:77:F6:61
Certificate issuer: /CN=44131ee936a6fa42ff3af0a6ae86c2c6653dd573
Certificate serial: 074B5EE0
Authority key identifier: 44:13:1E:E9:36:A6:FA:42:FF:3A:F0:A6:AE:86:C2:C6:65:3D:D5:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBMe6Tam-kL_OvCmrobCxmU91XM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/1d44f2-1706-4bf1-b71d-74ca36402a85/1/oqfSoU-W-dAvFHTJpbeeVE139mE.roa
Signing time: Sat 01 Jan 2022 14:06:10 +0000
ROA not before: Sat 01 Jan 2022 14:06:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60906
IP address blocks: 193.23.16.0/23 maxlen: 23
193.23.16.0/22 maxlen: 22
193.23.18.0/23 maxlen: 23
2a0f:5680:3::/48 maxlen: 48
2a0f:5680:1::/48 maxlen: 48
2a0f:5680::/32 maxlen: 32
2a0f:5680::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122380000 (0x74b5ee0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44131ee936a6fa42ff3af0a6ae86c2c6653dd573
Validity
Not Before: Jan 1 14:06:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a2a7d2a14f96f9d02f1474c9a5b79e544d77f661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b8:ca:d1:4d:bf:69:7f:77:cb:24:48:b6:01:
06:80:a8:1c:f0:e8:b0:ec:d5:a2:f1:8e:7b:33:80:
c7:8e:4b:d7:20:f7:cb:10:b8:f1:5e:43:f8:b1:d2:
69:a8:f1:3c:e8:fb:33:76:3b:bd:3b:8b:08:98:70:
bb:e0:fd:0c:13:a3:d9:33:43:0c:48:68:06:3b:6c:
30:08:cf:e7:23:d4:78:db:1d:3b:df:03:4f:25:0e:
89:20:85:06:64:77:a6:66:6d:f1:9b:27:23:ad:e7:
4d:9e:b7:77:49:4a:57:11:84:ec:59:76:b7:8d:c1:
d1:f2:64:a7:5a:32:1b:be:64:f7:96:1d:f8:72:0d:
73:6d:00:e7:9b:22:74:ce:47:29:36:6e:72:8b:4f:
f4:7c:71:00:4a:76:e9:b4:c8:b9:d5:25:9a:26:8e:
b8:e0:76:86:07:64:e0:ea:cc:47:a8:43:39:79:13:
bd:26:fa:76:31:2c:12:65:67:ad:67:18:e0:2f:30:
de:d2:40:46:cc:a7:42:00:4a:e8:3f:8d:78:76:e5:
a3:c7:74:c4:99:95:b0:8c:7d:fd:75:2e:bb:d6:d8:
30:ef:f2:78:8c:07:4b:c2:9c:07:91:f6:36:30:39:
7a:14:5c:71:ca:49:4b:3f:06:b3:ed:e8:c7:69:5d:
91:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A7:D2:A1:4F:96:F9:D0:2F:14:74:C9:A5:B7:9E:54:4D:77:F6:61
X509v3 Authority Key Identifier:
keyid:44:13:1E:E9:36:A6:FA:42:FF:3A:F0:A6:AE:86:C2:C6:65:3D:D5:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBMe6Tam-kL_OvCmrobCxmU91XM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1d44f2-1706-4bf1-b71d-74ca36402a85/1/oqfSoU-W-dAvFHTJpbeeVE139mE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1d44f2-1706-4bf1-b71d-74ca36402a85/1/RBMe6Tam-kL_OvCmrobCxmU91XM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.23.16.0/22
IPv6:
2a0f:5680::/32
Signature Algorithm: sha256WithRSAEncryption
ae:ac:d4:5e:dc:63:b9:c2:62:a4:b8:a0:6c:f2:fa:e0:8a:2f:
b0:f6:db:40:35:a5:c8:a9:1b:ef:cc:43:30:0a:a1:3a:b8:0d:
a0:88:e1:b6:8a:95:cc:1b:a5:e0:23:2b:a1:db:02:2e:3b:8a:
70:bc:ae:af:35:f4:39:38:14:ba:22:74:5b:0a:a1:ff:b3:73:
52:a7:c2:68:d1:3b:cd:66:d3:42:3a:2a:73:4a:93:72:64:78:
52:73:ec:9e:cb:6f:cb:ad:fb:bd:68:2a:31:3b:93:43:c1:fc:
95:8c:26:3c:9e:d9:0a:2a:a4:f8:25:12:fb:e3:ad:cc:3b:bd:
2b:d9:d7:c4:9d:58:30:18:2d:f2:4d:22:ee:05:78:bd:28:13:
e9:25:f8:5e:b7:b5:73:c8:e3:52:20:4d:10:10:62:04:e7:e9:
a5:39:20:98:e6:8c:78:ba:7e:0b:a0:6f:72:08:0d:61:b5:ba:
d5:1a:ad:4f:40:dc:55:ed:d9:85:e5:4c:3a:b7:6a:8c:3e:76:
21:c9:69:38:14:e6:33:55:c5:f6:ed:c4:96:de:61:7d:1e:26:
fb:a3:16:99:1f:2d:17:f1:e2:66:8a:71:e0:72:e0:ef:ff:bc:
fe:24:ff:23:10:38:cc:a8:e9:d0:81:96:cc:2d:3f:6c:05:24:
4f:c1:d6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:35 2025 by rpki-client