Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/dYlZR8qfFJMlM3cdf-HwmYjlYCc.roa
File: dYlZR8qfFJMlM3cdf-HwmYjlYCc.roa (raw, json)
Hash identifier: Rr3dHivGSki8TIXX9LvdD0ad+/Y5Uf46ACcNyT4qs7Y=
Subject key identifier: 75:89:59:47:CA:9F:14:93:25:33:77:1D:7F:E1:F0:99:88:E5:60:27
Certificate issuer: /CN=17ffee25052c0aabf6cb371e3f2e076f44fc1c3c
Certificate serial: 0592A5B4
Authority key identifier: 17:FF:EE:25:05:2C:0A:AB:F6:CB:37:1E:3F:2E:07:6F:44:FC:1C:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F__uJQUsCqv2yzcePy4Hb0T8HDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/dYlZR8qfFJMlM3cdf-HwmYjlYCc.roa
Signing time: Sat 01 Jan 2022 11:58:24 +0000
ROA not before: Sat 01 Jan 2022 11:58:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199513
IP address blocks: 194.102.62.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93496756 (0x592a5b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17ffee25052c0aabf6cb371e3f2e076f44fc1c3c
Validity
Not Before: Jan 1 11:58:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=75895947ca9f14932533771d7fe1f09988e56027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:27:d8:79:d3:89:c2:38:a6:8a:db:ab:3f:43:
59:53:86:e1:8f:c6:5e:04:a8:07:b7:0f:b1:3d:61:
10:08:50:54:9a:ac:cf:fd:dc:07:d9:32:53:b2:d0:
e4:08:2f:ea:ae:44:7e:29:e8:26:b6:59:b9:e9:35:
9e:4f:f8:f3:57:17:63:21:7a:8a:0b:28:4e:a9:53:
3e:90:4a:93:62:70:ee:7a:ef:47:c2:55:7c:e1:62:
98:df:61:e9:18:ce:c0:dc:6b:50:de:90:23:fe:28:
a6:4f:0a:f1:3c:56:63:dc:d2:c7:45:32:90:3a:28:
51:7b:7a:a1:69:42:21:e6:a3:c8:a4:d4:8f:55:fe:
e3:59:4e:a1:e5:be:54:87:22:12:27:94:a2:2e:16:
d6:c9:c9:df:2e:67:ce:0d:16:8f:d9:50:eb:8a:f1:
51:77:1e:04:12:d2:c2:52:9c:61:63:29:96:ad:17:
81:0d:23:2a:11:09:b6:00:f8:b0:b5:4c:ab:e2:20:
6c:e7:58:51:6c:c7:ef:07:90:ba:e9:c7:d5:13:72:
b6:3f:b9:d2:2e:4b:67:56:f8:a3:28:a9:41:45:16:
d0:6a:f4:56:56:70:0b:53:02:6e:83:39:5c:a7:15:
05:52:2d:eb:ed:44:d2:62:5e:71:25:62:ba:70:13:
14:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:89:59:47:CA:9F:14:93:25:33:77:1D:7F:E1:F0:99:88:E5:60:27
X509v3 Authority Key Identifier:
keyid:17:FF:EE:25:05:2C:0A:AB:F6:CB:37:1E:3F:2E:07:6F:44:FC:1C:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F__uJQUsCqv2yzcePy4Hb0T8HDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/dYlZR8qfFJMlM3cdf-HwmYjlYCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.62.0/23
Signature Algorithm: sha256WithRSAEncryption
48:6d:dd:0b:d3:4e:30:66:b5:a7:93:ef:42:80:21:f4:95:a2:
06:6f:f0:9c:e3:a5:67:b4:5b:41:b9:41:9d:16:06:0e:56:a3:
d7:18:71:d9:48:50:5f:15:9e:a6:da:8d:0d:21:19:2e:70:52:
00:0f:a5:e5:71:bf:12:be:e7:f9:45:44:29:0c:7d:9a:b1:a4:
f2:a0:60:fc:32:05:ff:62:8d:09:98:a3:d7:e3:92:7e:57:3d:
5d:bb:36:55:52:82:64:31:4a:44:0e:4c:9c:6f:ef:fe:56:e4:
24:72:4f:56:30:ba:33:b3:74:25:14:0f:04:11:f8:a7:28:f7:
37:30:7b:cf:83:84:f0:64:0b:3d:46:28:1e:ad:e2:50:20:96:
91:6f:5b:c9:74:c0:25:2c:b9:a6:4b:90:96:50:c9:9e:24:b6:
d5:5a:5f:b4:53:2f:7a:5f:79:d8:aa:b1:17:19:47:6b:b5:c7:
78:2d:1a:d9:fa:fc:ca:0e:4d:ec:8f:8b:d1:05:eb:fb:3d:58:
d2:5b:54:46:55:40:4e:ff:d9:2e:e5:0d:55:65:df:1b:ba:c6:
d4:f5:6d:18:64:70:1c:fb:db:28:14:36:da:40:25:40:dd:aa:
1d:70:52:02:98:bd:80:9e:5f:e4:cb:ea:4c:76:fd:e5:ea:13:
8a:db:10:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:16 2025 by rpki-client