Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/gAxkbCbSD2Bth7QIi51Lo1iFX_w.roa
File: gAxkbCbSD2Bth7QIi51Lo1iFX_w.roa (raw, json)
Hash identifier: oqgVtae8WqEoW+OTG7b0yyTgZvkueOZOXjJh9uJQBIE=
Subject key identifier: 80:0C:64:6C:26:D2:0F:60:6D:87:B4:08:8B:9D:4B:A3:58:85:5F:FC
Certificate issuer: /CN=55b9cdf8b7e53efcd9799b11e740f555fd53f4c6
Certificate serial: 0400EC0D
Authority key identifier: 55:B9:CD:F8:B7:E5:3E:FC:D9:79:9B:11:E7:40:F5:55:FD:53:F4:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbnN-LflPvzZeZsR50D1Vf1T9MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/gAxkbCbSD2Bth7QIi51Lo1iFX_w.roa
Signing time: Sat 01 Jan 2022 10:57:15 +0000
ROA not before: Sat 01 Jan 2022 10:57:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209106
IP address blocks: 194.246.74.0/24 maxlen: 24
5.182.96.0/22 maxlen: 22
2a0e:1400::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67169293 (0x400ec0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55b9cdf8b7e53efcd9799b11e740f555fd53f4c6
Validity
Not Before: Jan 1 10:57:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=800c646c26d20f606d87b4088b9d4ba358855ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c0:e6:23:a1:d3:4e:66:80:c0:63:b9:d1:14:
f3:96:8c:14:69:27:d4:79:0c:fc:f5:18:f7:a1:0e:
62:ba:41:4e:5b:ab:48:05:b0:a8:f9:bf:2b:7b:51:
fa:6b:c6:cc:69:39:ee:da:a7:9d:2c:03:f5:2a:22:
fb:df:8c:67:dd:4a:55:c8:0f:98:f3:6a:76:82:33:
12:0b:be:c5:47:7f:14:f1:6b:0a:a4:e2:35:b7:8e:
69:a2:e4:8e:a3:9e:0c:70:e1:41:24:b1:0f:8c:e6:
5f:6f:99:44:44:a6:c0:3c:7b:87:b7:a8:11:72:50:
06:12:73:47:ce:9e:d5:2b:7c:74:e2:b7:6b:a2:4f:
b7:b6:d9:b0:06:a9:35:3b:55:b8:13:5c:86:7a:c0:
f4:c1:06:65:32:21:e3:94:df:ec:ac:19:19:ed:2f:
97:f9:20:e5:1a:93:21:e2:21:8d:9f:e5:ff:cb:cd:
da:75:e5:05:12:54:5e:ff:2f:77:e1:65:8d:1f:a7:
74:b1:55:c1:74:30:a6:c3:86:d9:a7:8e:a1:b1:c5:
56:58:51:8e:85:db:e8:2c:01:2e:db:65:9e:31:99:
d2:13:b7:d7:3d:4e:eb:e3:02:a1:a9:64:7a:5d:5c:
11:33:55:c2:d9:b2:56:2d:46:8e:f4:84:27:e8:13:
f0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:0C:64:6C:26:D2:0F:60:6D:87:B4:08:8B:9D:4B:A3:58:85:5F:FC
X509v3 Authority Key Identifier:
keyid:55:B9:CD:F8:B7:E5:3E:FC:D9:79:9B:11:E7:40:F5:55:FD:53:F4:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbnN-LflPvzZeZsR50D1Vf1T9MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/gAxkbCbSD2Bth7QIi51Lo1iFX_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.96.0/22
194.246.74.0/24
IPv6:
2a0e:1400::/29
Signature Algorithm: sha256WithRSAEncryption
93:9b:c7:d4:66:a2:70:45:46:c9:eb:c0:f8:6b:9b:31:d4:60:
76:96:92:f4:87:94:23:6e:6a:f8:78:ec:9a:b3:bd:59:7d:92:
c9:87:76:c1:08:e4:8e:be:25:49:51:73:40:db:f8:b6:4a:43:
e7:67:ca:9b:a0:42:38:8f:f8:3b:99:cf:e4:a8:59:48:df:16:
87:88:8b:17:3b:c1:72:15:2e:d2:16:72:51:60:2c:61:13:10:
5a:39:8b:29:09:ff:f1:b5:57:ed:2b:93:9d:13:bd:b5:e1:b3:
d4:20:b7:77:6a:5d:fa:11:6b:f1:62:04:b4:af:58:0a:58:dd:
b0:6e:4e:81:84:f3:8c:dc:48:a1:f0:fb:21:5b:11:fa:d7:69:
c1:8b:21:a1:4e:ff:e5:66:35:ea:d1:4e:da:c4:22:a3:b3:f5:
93:de:c4:fd:ae:7f:95:2a:22:37:ff:3a:32:4f:75:77:18:01:
34:f4:b1:e2:45:bd:35:03:ec:93:2b:f0:47:3a:c8:81:5c:3d:
4c:99:e0:80:0d:38:b7:b8:dc:83:40:6f:01:3f:2a:df:ca:b0:
76:c6:be:50:47:7e:79:54:99:6f:c4:b0:1d:bb:a9:64:39:ae:
57:ed:04:06:3d:af:f9:92:27:43:55:87:00:0c:14:2a:0c:34:
3f:f2:29:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:45 2025 by rpki-client