Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/0jp3X6t_zmseJeqKrI7Ime_P2SY.roa
File: 0jp3X6t_zmseJeqKrI7Ime_P2SY.roa (raw, json)
Hash identifier: 3rqk5l4pFgFjIUUuxYjLjrqmMCj0kJ1v2zzBpNU3sN8=
Subject key identifier: D2:3A:77:5F:AB:7F:CE:6B:1E:25:EA:8A:AC:8E:C8:99:EF:CF:D9:26
Certificate issuer: /CN=6a016dad273047b18886691485dedd97171c4d68
Certificate serial: 018756813CEECE915B2082751EA793B28E03
Authority key identifier: 6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/0jp3X6t_zmseJeqKrI7Ime_P2SY.roa
Signing time: Thu 06 Apr 2023 12:18:42 +0000
ROA not before: Thu 06 Apr 2023 12:18:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 194.1.166.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:56:81:3c:ee:ce:91:5b:20:82:75:1e:a7:93:b2:8e:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a016dad273047b18886691485dedd97171c4d68
Validity
Not Before: Apr 6 12:18:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d23a775fab7fce6b1e25ea8aac8ec899efcfd926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:48:c6:9e:c2:bf:82:be:01:d2:fa:bb:cc:ff:
8b:aa:6c:63:39:09:2f:c4:6a:82:8a:29:97:17:b8:
fb:b7:30:98:da:12:ec:0f:30:3f:be:b9:af:21:87:
1d:4f:7f:14:dd:ca:fe:fa:c1:56:8d:a1:68:f4:f2:
4f:a6:50:a2:e2:87:34:7a:f0:b5:a3:80:34:48:e3:
b6:a1:03:a6:5a:b0:d7:76:cf:4e:ed:53:e3:f2:b5:
4d:05:f4:ab:3b:15:8c:f3:2b:ad:d6:00:fe:4e:ef:
b3:20:8f:08:40:f4:39:cb:d8:b3:23:7c:a9:63:26:
33:85:46:8a:12:55:73:1c:2b:83:bc:92:2a:04:67:
e5:af:16:f8:9e:56:af:5c:c4:84:bd:65:7d:f5:92:
f9:7c:ff:c7:dd:79:ba:a2:39:bf:33:e2:b7:77:dc:
31:42:76:a4:a3:5d:86:a5:19:84:2c:97:bc:23:3d:
4d:7d:9f:e6:30:a5:6a:65:a4:d6:26:fb:93:81:5c:
1d:3c:13:06:da:24:be:2d:b2:26:a8:19:86:7f:eb:
63:c1:69:e2:35:4a:ca:92:6d:65:ca:1f:44:4a:29:
e6:bf:d5:55:fe:1c:36:2b:02:6f:be:1b:49:bd:43:
d3:4b:8d:3b:9b:d2:7c:45:83:94:1d:52:33:6a:9d:
04:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:3A:77:5F:AB:7F:CE:6B:1E:25:EA:8A:AC:8E:C8:99:EF:CF:D9:26
X509v3 Authority Key Identifier:
keyid:6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/0jp3X6t_zmseJeqKrI7Ime_P2SY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.166.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:8c:5c:a5:5c:d4:b9:03:26:6e:ab:3c:88:9d:69:2e:9d:7d:
3b:71:93:52:40:a9:47:13:82:9c:a7:b4:62:ae:3f:3a:bf:f3:
14:c1:24:31:22:f5:ed:77:58:f3:82:d5:18:7f:b3:51:b2:90:
d1:5b:73:aa:a5:07:26:e5:15:8e:50:31:34:e1:30:f5:b3:4e:
d0:79:ed:99:25:99:9b:a9:89:2b:b8:b9:00:81:60:2c:19:c2:
61:76:a1:4b:64:2e:f0:d8:89:61:3a:e1:f1:1b:49:02:ef:84:
ad:3e:56:f0:3c:c7:fc:96:e1:9a:49:cf:b6:8a:b3:2f:ac:ac:
7b:a5:d7:be:6a:c1:88:fa:73:ab:e8:2d:a2:2b:46:6a:bc:5d:
74:46:3e:6b:ef:49:16:f6:3a:6a:50:2a:cd:0a:02:e7:e5:8d:
54:2e:d1:e3:e9:c3:93:33:9f:6e:b6:e5:b3:3b:38:cf:99:d4:
47:f6:56:91:52:cf:8a:02:5a:d5:10:a4:4e:97:99:93:0a:70:
23:d5:9d:00:6c:d8:6e:61:00:b3:d3:55:76:ee:b5:38:23:c2:
19:7b:01:c5:2e:5b:e7:e5:49:af:b7:cd:21:f5:65:1b:e6:8e:
c0:f7:d5:6b:ee:a4:ab:7b:9e:2e:1b:13:c7:16:b0:2b:13:64:
22:d3:00:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:21:51 2025 by rpki-client