Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/1j7wt7lyx1oWhfX7HWsJIfhbDtY.roa
File: 1j7wt7lyx1oWhfX7HWsJIfhbDtY.roa (raw, json)
Hash identifier: Lh1K8HVaZWjXajdRt5lc2+Wgac9z7Wexvh0z1FiVNPc=
Subject key identifier: D6:3E:F0:B7:B9:72:C7:5A:16:85:F5:FB:1D:6B:09:21:F8:5B:0E:D6
Certificate issuer: /CN=25bbed0bff7ffeab67f302b411a00701854a6c30
Certificate serial: 0189D9CE86C5D7914B3401673B254712A62E
Authority key identifier: 25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/1j7wt7lyx1oWhfX7HWsJIfhbDtY.roa
Signing time: Wed 09 Aug 2023 10:18:58 +0000
ROA not before: Wed 09 Aug 2023 10:18:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208935
IP address blocks: 194.104.138.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d9:ce:86:c5:d7:91:4b:34:01:67:3b:25:47:12:a6:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25bbed0bff7ffeab67f302b411a00701854a6c30
Validity
Not Before: Aug 9 10:18:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d63ef0b7b972c75a1685f5fb1d6b0921f85b0ed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:13:d4:6d:ff:63:5b:f3:31:8f:44:f8:f7:0f:
26:fe:e4:d3:23:c6:36:4d:14:f9:d0:96:39:1f:a4:
33:8f:bc:9b:d6:04:25:ae:71:73:74:0b:ce:3c:b2:
50:bc:75:01:13:43:e4:a5:ad:ff:57:5d:0a:b9:80:
ff:5e:c4:bd:7f:53:8f:77:64:5d:78:0d:36:05:8f:
dc:82:ba:47:51:18:7a:b8:79:cc:82:a5:25:65:92:
4f:c3:b6:2a:a3:82:fc:f1:1c:96:c9:0d:6d:af:05:
c6:a1:7d:f4:c8:a9:29:2c:a6:91:0b:c1:55:2f:65:
1b:d2:3a:ef:8e:71:73:33:de:d7:9e:97:e3:52:9f:
95:fb:63:28:12:10:98:da:96:3d:b4:88:1d:24:12:
d2:98:12:71:f3:ba:1d:e0:24:a6:5b:3e:68:59:5b:
a0:29:cd:60:6a:4f:f1:f8:1c:02:a3:be:ec:fb:12:
ba:3f:0a:36:cd:34:28:e7:86:fb:33:09:2b:c2:5d:
9a:b9:67:60:68:31:03:77:5a:02:cd:79:c7:5c:35:
70:35:39:05:d6:ee:bb:6b:55:6d:96:9a:7e:eb:f4:
03:75:e7:cf:f2:8a:a2:a4:be:92:b7:b9:f8:6c:a4:
c6:c6:3e:9e:6d:dd:72:cc:5a:dd:6c:bc:d6:1d:30:
a5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:3E:F0:B7:B9:72:C7:5A:16:85:F5:FB:1D:6B:09:21:F8:5B:0E:D6
X509v3 Authority Key Identifier:
keyid:25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/1j7wt7lyx1oWhfX7HWsJIfhbDtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.138.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:ff:e7:91:4b:6a:72:1a:b3:9b:aa:24:53:9a:71:78:29:78:
7b:ec:7c:5f:35:b0:25:12:c8:d0:17:81:0c:e1:d9:e9:f7:1b:
99:a5:17:fe:0a:3a:07:2b:6f:c1:57:16:d1:4c:c4:56:9c:9e:
e7:d5:ed:a9:38:86:cf:f0:b7:a1:8c:00:e2:af:9a:0d:1d:ac:
99:f4:61:e1:bd:90:8b:0a:a5:24:8d:ad:6c:fd:c9:83:34:91:
f2:30:ec:65:36:b6:8d:8c:7a:5e:c1:f1:f0:e6:8a:54:4a:fd:
cb:ed:b3:bf:31:5e:2c:10:f5:75:c7:7b:15:b7:85:88:3d:8a:
ff:c5:15:97:aa:57:c3:f6:3e:73:08:97:7b:fa:f0:58:a5:34:
80:80:cd:51:79:b2:a1:40:e0:e9:c6:14:cd:1e:46:2f:e3:d4:
c1:00:c6:4c:06:6c:4f:90:5d:17:66:2e:84:21:d1:4a:50:74:
bc:29:9d:5a:b1:5e:3e:cd:a0:2e:c0:27:24:2b:0c:cd:d8:2c:
d0:dc:c0:83:c9:44:11:f0:35:d7:8e:ad:6e:17:d0:c0:66:81:
bd:af:61:3c:68:ac:4d:89:00:76:d1:f6:ac:b5:26:f8:f3:75:
6f:1b:b9:74:fa:97:85:77:af:ec:e3:58:43:16:61:b9:72:d5:
0b:30:31:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 10:27:49 2025 by rpki-client