Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/dGOtfWaJNwZCMXIgAA26rSKTjI4.roa
File: dGOtfWaJNwZCMXIgAA26rSKTjI4.roa (raw, json)
Hash identifier: EIXX8I9gON/u5IqWwznx78VRtfpin5+1Y6yax25OVjM=
Subject key identifier: 74:63:AD:7D:66:89:37:06:42:31:72:20:00:0D:BA:AD:22:93:8C:8E
Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Certificate serial: 018570CBD172454ACE3DBCCA3DEAB33E5535
Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/dGOtfWaJNwZCMXIgAA26rSKTjI4.roa
Signing time: Mon 02 Jan 2023 04:44:43 +0000
ROA not before: Mon 02 Jan 2023 04:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 2.255.190.0/24 maxlen: 24
2.255.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cb:d1:72:45:4a:ce:3d:bc:ca:3d:ea:b3:3e:55:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Validity
Not Before: Jan 2 04:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7463ad7d6689370642317220000dbaad22938c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:46:c5:85:ba:1b:f6:18:40:53:3d:29:52:e6:
8b:31:ba:93:35:b4:d2:16:18:a6:2d:a1:20:e1:2d:
a4:a8:75:b6:a2:bd:d9:0e:d7:59:8e:5b:2f:a8:a1:
ae:21:66:61:81:c8:13:c8:53:62:ef:b1:64:df:c8:
56:af:0d:e3:23:00:e1:bc:23:f4:cd:b5:62:76:96:
3e:c3:cf:0a:71:8c:36:80:0f:5a:e3:bb:7b:fb:21:
fe:c4:08:56:71:94:12:0b:97:16:b8:37:31:96:5b:
c2:7a:30:7f:4a:c9:8d:d4:02:9e:b0:cc:4c:5e:31:
ee:f2:de:ba:78:db:a0:8b:1c:ec:61:59:79:5c:5a:
2b:03:c6:f7:47:0d:0c:20:93:50:69:5e:dd:37:8e:
26:0f:d4:f0:83:e0:b9:dd:c2:c1:d6:e1:21:7b:33:
a2:4e:5c:9c:a2:99:9a:ae:3e:9f:d4:b4:d2:0f:74:
66:96:4a:fc:71:66:7b:92:34:c0:60:bd:b2:8e:7f:
f2:3a:16:15:6f:bb:60:c7:13:5d:02:4c:c3:a9:d6:
85:53:66:54:ec:64:c4:54:54:ba:a7:5c:44:20:ee:
87:55:5c:8d:b9:bb:56:11:3f:e2:4a:c8:a1:af:7a:
26:24:9f:73:17:b9:33:53:4c:38:0e:06:a9:28:4b:
e8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:63:AD:7D:66:89:37:06:42:31:72:20:00:0D:BA:AD:22:93:8C:8E
X509v3 Authority Key Identifier:
keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/dGOtfWaJNwZCMXIgAA26rSKTjI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.255.190.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:ba:0f:e5:cc:f8:6d:83:77:4e:e9:21:77:54:3a:7e:81:91:
5c:03:50:e8:d0:bd:4e:b3:f0:d6:14:ff:d1:7c:50:d8:ae:b0:
20:1d:59:1e:a4:b9:96:95:ff:7e:d7:f6:6e:1c:ad:a3:6d:59:
a5:1d:64:76:f9:64:ef:95:7f:77:c9:96:f8:e1:5f:ba:1e:65:
b9:31:b0:cd:12:bc:92:78:b5:d4:96:4f:ee:ac:80:c3:61:60:
d4:82:6b:f6:8d:e9:b4:16:21:3a:00:ce:ab:5d:ee:ff:09:22:
09:5f:e9:b1:9e:00:7e:14:25:0c:58:ad:39:39:00:c7:d6:b8:
50:fe:5c:c3:01:15:0f:97:d2:fc:9f:d1:e0:bc:e6:ae:36:8a:
ac:67:a8:67:b9:de:74:cf:d7:6e:ba:c3:e2:26:12:18:e7:c3:
2e:7c:0d:45:fb:82:ee:90:4c:b8:02:fd:8b:d1:d1:d4:95:e2:
62:45:02:1c:8a:f4:ad:5f:0f:2c:ea:cc:38:97:82:20:a1:d9:
76:01:05:48:17:b4:31:23:67:f5:e7:f6:53:ae:27:25:ca:1f:
cf:12:a2:15:45:52:7b:8f:68:c4:bf:12:b9:dd:dd:07:9b:d4:
e8:ec:e4:1a:ae:20:a0:c8:6e:61:e4:59:45:af:54:9d:5e:83:
e2:76:a2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 18:55:27 2025 by rpki-client