Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/yOu5rM3fzyfJc3AzeFY6a1aG7O4.roa
File: yOu5rM3fzyfJc3AzeFY6a1aG7O4.roa (raw, json)
Hash identifier: ik8RypSNKM2EnMaROMFKxGQFNJNPn1d21CWLQzZdNhs=
Subject key identifier: C8:EB:B9:AC:CD:DF:CF:27:C9:73:70:33:78:56:3A:6B:56:86:EC:EE
Certificate issuer: /CN=d2c1d5fd4e20ade5f11b66afb10a54c8ffe4b040
Certificate serial: 04FC902F
Authority key identifier: D2:C1:D5:FD:4E:20:AD:E5:F1:1B:66:AF:B1:0A:54:C8:FF:E4:B0:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/yOu5rM3fzyfJc3AzeFY6a1aG7O4.roa
Signing time: Sat 01 Jan 2022 14:07:19 +0000
ROA not before: Sat 01 Jan 2022 14:07:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13074
IP address blocks: 192.118.70.0/24 maxlen: 24
192.118.71.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83660847 (0x4fc902f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c1d5fd4e20ade5f11b66afb10a54c8ffe4b040
Validity
Not Before: Jan 1 14:07:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c8ebb9accddfcf27c973703378563a6b5686ecee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:88:23:b4:cd:7d:ee:17:19:64:9e:5c:dd:51:
7c:55:89:e9:e5:91:7d:50:6f:03:17:03:d8:92:e6:
58:93:97:03:45:72:93:6a:b1:9c:a2:79:e3:0a:f2:
8a:7f:0f:5d:2b:83:60:ac:53:b4:65:27:e5:d6:9b:
01:fc:78:d1:d3:b0:96:d4:78:6b:74:5a:80:8d:63:
54:5b:7a:c8:0f:a7:cf:17:94:fa:86:09:90:d0:3a:
d8:ac:b5:77:11:c9:01:fb:46:e2:b4:f0:ce:cb:a7:
a8:8f:f1:2f:7c:76:bf:62:c4:d7:8b:a7:88:67:9d:
9c:87:f2:44:5f:1d:11:4d:4d:18:5e:3e:c9:9b:97:
f6:45:0e:b0:6a:59:f8:48:74:eb:f5:46:d3:36:ba:
19:ad:38:76:31:15:7c:22:14:d4:3b:e8:67:4d:9a:
2e:8d:4e:96:97:f4:ce:9f:79:d6:33:f7:b8:66:2f:
84:97:1b:4f:e1:53:12:3e:a7:bf:34:72:a3:01:95:
a6:bd:8d:05:49:2b:27:26:cb:6a:a5:9d:db:da:7b:
bf:1a:7a:62:15:8f:df:63:88:b7:80:6d:b0:2f:8a:
ef:24:18:23:15:5a:8b:92:3e:e4:20:6b:78:ac:59:
f0:20:7c:31:71:d7:6f:39:f3:15:8f:bf:be:d7:39:
21:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:EB:B9:AC:CD:DF:CF:27:C9:73:70:33:78:56:3A:6B:56:86:EC:EE
X509v3 Authority Key Identifier:
keyid:D2:C1:D5:FD:4E:20:AD:E5:F1:1B:66:AF:B1:0A:54:C8:FF:E4:B0:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/yOu5rM3fzyfJc3AzeFY6a1aG7O4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.118.70.0/23
Signature Algorithm: sha256WithRSAEncryption
13:fe:bc:81:7c:33:33:d1:f4:f8:77:66:76:5a:f3:1e:9f:e3:
c8:a1:63:d0:5c:59:bc:0b:5f:e1:2c:00:c8:54:1c:f0:4d:88:
18:b7:50:eb:3d:ee:e1:48:4b:e2:e1:13:b1:ba:7f:74:1a:19:
cb:40:16:af:ce:fd:57:4e:40:4a:10:8d:56:57:3a:0a:b7:f5:
53:5d:7f:ce:5e:e3:a5:c4:38:78:9d:e4:61:f2:f3:3e:bb:6a:
fd:f3:1f:45:f6:75:ac:6d:34:5b:52:04:92:b7:61:9e:6e:88:
23:fb:c6:b5:ea:6a:f3:67:46:b1:05:52:c3:46:f4:1c:8b:d4:
42:68:3e:0d:fc:71:46:b2:a3:06:3b:aa:0a:cb:19:31:22:09:
cd:ab:f9:5c:88:a2:27:b3:b3:16:6b:12:88:0c:0a:53:79:20:
2a:2b:86:b1:95:ef:0f:ed:f0:a0:b4:e8:54:45:3b:1f:a1:bc:
c6:56:9c:c7:17:cf:8f:14:e2:f2:22:ab:e1:ea:d3:6d:ec:95:
76:3a:d5:d0:c9:a9:b4:23:48:2d:cc:0f:0d:8e:a0:4f:be:27:
3a:21:ab:3a:d3:75:65:51:fd:f4:b7:e8:f0:4b:09:59:a0:92:
3a:b1:e9:f9:d3:18:d4:25:bf:9d:d3:90:19:bc:c7:c8:90:57:
e5:10:32:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:35 2025 by rpki-client