Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/D7dotRuoDwL3C-zN0a1EdjnnTS8.roa
File: D7dotRuoDwL3C-zN0a1EdjnnTS8.roa (raw, json)
Hash identifier: QnoULwRY8ByCxrLG4xFU/cuWR2Sx591CBQq2RdV4PF0=
Subject key identifier: 0F:B7:68:B5:1B:A8:0F:02:F7:0B:EC:CD:D1:AD:44:76:39:E7:4D:2F
Certificate issuer: /CN=a98eebed9753f580bea75b352e706325a18d1447
Certificate serial: 01856E667A0F7C556D125889F33BA3BE947C
Authority key identifier: A9:8E:EB:ED:97:53:F5:80:BE:A7:5B:35:2E:70:63:25:A1:8D:14:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/D7dotRuoDwL3C-zN0a1EdjnnTS8.roa
Signing time: Sun 01 Jan 2023 17:34:47 +0000
ROA not before: Sun 01 Jan 2023 17:34:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12552
IP address blocks: 185.57.136.0/22 maxlen: 24
2a04:ddc0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:66:7a:0f:7c:55:6d:12:58:89:f3:3b:a3:be:94:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a98eebed9753f580bea75b352e706325a18d1447
Validity
Not Before: Jan 1 17:34:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0fb768b51ba80f02f70beccdd1ad447639e74d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e8:9c:4b:bd:b8:f4:44:4f:84:09:ab:fe:ea:
f4:33:c7:20:22:18:c8:28:3f:1b:43:17:4a:81:7c:
b9:c8:c9:fb:58:cb:82:b2:00:ac:7b:cb:f1:91:d1:
9f:fb:55:9c:a0:bb:83:62:6b:52:62:1b:94:30:29:
29:75:7f:53:2a:9f:14:0d:ec:4c:d9:b7:90:76:78:
be:dd:d9:5a:e0:56:67:d7:79:1e:ad:f0:78:ef:09:
3c:4b:46:61:98:b9:54:74:79:79:ba:fa:a8:b8:de:
39:d1:29:a3:be:8e:0d:5a:10:d8:f6:8d:38:cd:8d:
6d:fb:bf:74:c8:d3:bf:b5:0b:58:38:13:7c:b8:3e:
f6:3a:af:27:9f:eb:ef:4f:84:cf:4c:9f:25:96:61:
f2:21:b8:c8:a1:42:a3:62:8f:54:6d:11:fb:62:1c:
65:3a:f4:2f:27:51:95:21:ab:1e:4c:46:d1:a8:b1:
39:ed:c0:96:ca:9e:1c:6a:07:c0:7f:45:b4:25:db:
95:95:fd:a4:91:43:1f:3f:07:24:63:2d:86:f1:36:
1c:58:6b:90:49:39:be:2e:e2:e2:ab:f0:bb:96:60:
c8:1e:ed:cf:44:99:44:c9:a0:df:c4:99:55:64:c4:
77:82:76:d2:e8:d3:94:47:f9:82:f2:e7:9f:71:67:
f0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B7:68:B5:1B:A8:0F:02:F7:0B:EC:CD:D1:AD:44:76:39:E7:4D:2F
X509v3 Authority Key Identifier:
keyid:A9:8E:EB:ED:97:53:F5:80:BE:A7:5B:35:2E:70:63:25:A1:8D:14:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/D7dotRuoDwL3C-zN0a1EdjnnTS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.57.136.0/22
IPv6:
2a04:ddc0::/29
Signature Algorithm: sha256WithRSAEncryption
4d:e1:e7:f3:63:ed:8c:45:ca:d5:2a:43:cd:63:a8:97:6f:15:
f4:79:d8:e6:45:a9:f5:8e:65:1f:d2:d7:69:cb:7f:d2:f9:34:
1e:49:ba:72:6f:e5:72:f3:ad:7d:25:d6:fc:99:ce:5d:c7:23:
88:2e:1d:63:72:9a:5f:f9:1c:71:be:97:a6:a9:dd:69:53:6e:
12:8d:48:16:62:76:92:81:d3:f9:be:e1:51:8f:66:35:a1:b8:
a1:8e:89:5f:97:34:b5:af:82:8b:10:e2:af:b9:9e:6c:13:95:
c3:3b:9f:30:13:47:1c:d5:5c:54:b6:37:ce:1f:27:fa:81:32:
a7:61:90:94:b6:c4:91:04:04:5b:3b:67:83:0b:ab:ae:93:cb:
05:ff:ac:a1:85:46:e8:6d:61:f4:74:b0:a4:04:42:e7:57:41:
cf:51:7a:3e:20:78:b0:a1:34:20:cb:1e:9b:08:2d:a5:5d:00:
dc:46:0c:b6:68:a4:17:52:1e:68:7b:97:35:5a:39:c1:63:58:
3b:76:68:0e:00:4c:a6:45:c9:50:bb:38:75:fc:19:ae:35:cd:
c8:8d:c7:ad:c9:d7:64:f1:c8:48:80:2d:55:a9:28:62:20:6b:
d4:26:97:27:a5:0f:3d:ee:c8:6a:1e:1d:6c:62:9e:d3:9b:ae:
8a:89:02:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:04 2025 by rpki-client