Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/56A-zDp4Doy3I0XGNIG27s5UBJI.roa
File: 56A-zDp4Doy3I0XGNIG27s5UBJI.roa (raw, json)
Hash identifier: zKnb5jCKZiJ6SX3e/KuauniMv3IdQT3buZ3KM1MOVnQ=
Subject key identifier: E7:A0:3E:CC:3A:78:0E:8C:B7:23:45:C6:34:81:B6:EE:CE:54:04:92
Certificate issuer: /CN=344718d135a09bb524706b4259cabcc626e514ef
Certificate serial: 01856F5DA92C3E3F73FAD09C39DF28A0273C
Authority key identifier: 34:47:18:D1:35:A0:9B:B5:24:70:6B:42:59:CA:BC:C6:26:E5:14:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/56A-zDp4Doy3I0XGNIG27s5UBJI.roa
Signing time: Sun 01 Jan 2023 22:04:47 +0000
ROA not before: Sun 01 Jan 2023 22:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 38915
IP address blocks: 194.104.157.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:a9:2c:3e:3f:73:fa:d0:9c:39:df:28:a0:27:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=344718d135a09bb524706b4259cabcc626e514ef
Validity
Not Before: Jan 1 22:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7a03ecc3a780e8cb72345c63481b6eece540492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a6:5c:c5:01:33:13:23:59:ff:d5:ae:8b:a2:
c1:d4:69:94:d9:0e:bc:cb:36:6a:de:7c:70:5f:28:
9b:1f:70:ef:5e:44:c6:2a:8c:c0:39:9e:51:da:5a:
36:57:d8:cc:66:df:16:32:d2:19:53:fb:b1:6b:3f:
24:0e:4e:f3:69:c6:62:70:cb:8a:15:68:98:3b:88:
6c:0e:32:69:78:8b:5c:22:c1:9f:c2:ff:f3:82:fe:
ac:26:2a:bd:7a:be:17:03:fe:02:a0:e6:e2:bf:b8:
0d:5f:d1:15:30:46:85:6e:ef:5d:f8:5d:b7:8b:59:
2a:69:0a:8e:d3:05:43:a9:ec:a5:fc:a0:c4:98:21:
6b:fa:79:f6:42:01:bc:b5:c2:10:75:7e:9b:0e:e7:
bd:4d:c3:fe:55:14:28:0b:a9:f5:7a:b5:d3:07:0e:
54:f5:5d:4e:21:d4:7d:dd:66:28:27:7b:44:54:75:
d4:c2:28:f0:d7:65:2b:70:7a:c3:6e:9a:0f:65:cb:
1b:bd:b6:52:4c:73:17:3c:5e:b8:b8:e9:71:31:86:
78:60:81:95:7b:e7:60:37:1c:db:bc:65:6b:a1:b2:
58:df:ba:51:e9:ec:2d:c3:6d:2c:8f:6d:6b:15:10:
26:92:6d:cf:00:0a:40:5b:85:a4:78:1a:32:f8:39:
99:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A0:3E:CC:3A:78:0E:8C:B7:23:45:C6:34:81:B6:EE:CE:54:04:92
X509v3 Authority Key Identifier:
keyid:34:47:18:D1:35:A0:9B:B5:24:70:6B:42:59:CA:BC:C6:26:E5:14:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/56A-zDp4Doy3I0XGNIG27s5UBJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.157.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:2c:a9:85:92:26:f4:42:01:42:cc:d2:85:d7:7d:a9:99:8c:
c7:68:ca:61:9f:be:e8:b8:d2:27:62:38:46:49:92:d6:f8:be:
07:f5:56:02:8a:e5:c7:5b:d7:a0:dd:1c:aa:66:3e:78:2f:2a:
83:6f:09:99:db:90:1a:70:c1:38:5d:fa:ba:4b:89:2b:1d:94:
86:77:52:10:95:c6:38:38:dc:85:7e:e9:b9:a3:fc:4e:c9:b2:
32:f5:15:c0:00:41:19:ca:00:a7:c9:a5:19:32:17:2a:ad:47:
f5:ce:05:87:7f:11:e8:5f:40:b3:bb:17:43:c8:a2:6a:e6:d0:
10:7b:e9:52:46:fd:4d:a1:0d:ba:5b:f4:a1:82:a2:7e:6d:6a:
9c:66:ec:f9:86:74:cb:52:8a:08:bc:f4:1e:0c:fd:c7:13:67:
b3:4c:5c:a3:08:90:af:75:d7:b2:6b:35:01:e3:89:e1:7b:bb:
9f:7f:43:e8:02:15:19:22:9f:1c:16:d5:03:0f:87:1d:ab:75:
d1:77:9b:1d:67:04:b1:cc:f9:a1:a8:dd:54:36:4f:cb:7e:b8:
eb:e1:24:f2:1d:34:df:d6:8f:eb:51:e7:17:a8:3c:28:c6:0f:
26:d3:67:02:57:5e:71:5f:f6:f3:cd:99:d2:0c:64:cc:e1:33:
ad:d0:61:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:32:51 2025 by rpki-client