Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/miowBSvngdDr8Cjr_u42cCzJ07w.roa
File: miowBSvngdDr8Cjr_u42cCzJ07w.roa (raw, json)
Hash identifier: TsrlJXX9mfugxawF+sST+seed9UoT6zAXlJSWbdMCJ4=
Subject key identifier: 9A:2A:30:05:2B:E7:81:D0:EB:F0:28:EB:FE:EE:36:70:2C:C9:D3:BC
Certificate issuer: /CN=7df0897eab3eed6e24eddd676e8bf9377fb4480c
Certificate serial: 018AF5849DF598BC37541D33556E1469AC8D
Authority key identifier: 7D:F0:89:7E:AB:3E:ED:6E:24:ED:DD:67:6E:8B:F9:37:7F:B4:48:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffCJfqs-7W4k7d1nbov5N3-0SAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/miowBSvngdDr8Cjr_u42cCzJ07w.roa
Signing time: Tue 03 Oct 2023 12:30:23 +0000
ROA not before: Tue 03 Oct 2023 12:30:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35313
IP address blocks: 188.137.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f5:84:9d:f5:98:bc:37:54:1d:33:55:6e:14:69:ac:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df0897eab3eed6e24eddd676e8bf9377fb4480c
Validity
Not Before: Oct 3 12:30:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a2a30052be781d0ebf028ebfeee36702cc9d3bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6f:40:42:67:37:8d:60:dc:59:04:ca:6a:cc:
21:36:ee:2f:65:53:3a:c7:d9:b6:b9:e9:11:b9:e6:
fa:c5:71:94:e6:30:f8:e6:b1:de:44:53:8c:ac:7f:
c2:d7:23:0a:d5:03:0f:d4:ea:8b:f2:4d:05:b5:33:
1d:6f:b4:9f:16:82:b9:f5:9e:36:cb:a2:15:ac:02:
45:98:7b:78:9c:52:ec:88:bf:b5:b1:c3:98:75:4e:
f6:b1:58:ba:6e:d7:83:74:05:94:a8:a6:29:d3:34:
16:e4:62:d1:98:ff:9b:28:64:5e:1b:14:be:85:dc:
59:08:96:3c:d0:28:92:03:aa:0a:1a:ab:9a:64:43:
80:25:75:fb:8c:8d:aa:4d:f1:74:19:cd:1e:80:a7:
ec:15:47:11:fa:cf:21:ae:94:89:4b:3e:0c:a4:13:
5f:03:d4:e8:e9:35:69:a4:0a:bf:fa:45:ce:7d:48:
e5:f6:cd:06:b1:58:e0:e5:32:04:7b:43:01:05:f2:
3a:37:c8:6e:5b:5f:11:bd:7c:09:d1:29:13:08:e2:
69:8a:75:1b:66:7d:1e:cc:86:e3:77:dd:b3:dc:bf:
32:91:89:74:3f:93:8b:04:ac:bb:0f:24:98:e5:d6:
93:55:d6:88:52:f2:21:7d:f0:90:c4:8b:06:cc:17:
95:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:2A:30:05:2B:E7:81:D0:EB:F0:28:EB:FE:EE:36:70:2C:C9:D3:BC
X509v3 Authority Key Identifier:
keyid:7D:F0:89:7E:AB:3E:ED:6E:24:ED:DD:67:6E:8B:F9:37:7F:B4:48:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffCJfqs-7W4k7d1nbov5N3-0SAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/miowBSvngdDr8Cjr_u42cCzJ07w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.137.255.0/24
Signature Algorithm: sha256WithRSAEncryption
27:00:58:21:0b:b7:2a:89:54:3e:b9:34:5a:19:49:aa:e4:bf:
02:bd:6c:6d:90:13:34:4a:71:0b:f5:57:05:a7:d8:b2:6b:cf:
68:8d:e6:d9:49:9e:c6:fb:9b:7f:3e:34:35:51:c1:69:93:9c:
76:ad:9c:86:ec:f8:9a:ed:37:ac:fe:b7:8f:aa:f5:51:2a:5e:
6d:bf:ac:a3:83:59:19:66:14:3c:e9:71:73:d7:b9:bd:99:01:
90:5e:53:4d:24:53:09:9f:d3:ed:b5:3b:8d:45:94:f9:23:da:
c5:12:a0:0f:4f:58:28:82:10:07:b2:97:c0:58:80:00:53:c1:
58:74:fa:7a:c6:30:56:a8:90:bb:38:da:95:8a:b1:18:5c:64:
17:04:aa:d2:08:ba:f1:c8:42:1f:23:47:05:61:40:44:19:11:
67:6c:37:c5:fa:dd:f4:dc:2d:5e:c6:aa:e2:67:3f:21:83:f8:
60:27:17:9f:48:a7:62:48:f4:80:fc:96:b9:d3:05:5f:f1:91:
7a:dc:e3:72:e0:ed:82:d2:71:43:ff:8f:92:dc:9d:ba:ff:eb:
68:96:91:3f:d0:69:88:e4:9a:d3:26:6b:9c:cc:c3:54:0f:b9:
ad:d1:7f:77:75:06:89:39:ac:67:38:0e:6f:30:7e:ad:f1:5d:
87:2a:81:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:18 2025 by rpki-client