Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/DTXEtGp1Qghfn4hk7-EFMBIIraY.roa
File: DTXEtGp1Qghfn4hk7-EFMBIIraY.roa (raw, json)
Hash identifier: zrvmK3MFVGiCyTUyUOPWq2NCT2LIwdBM7L15LcUf5CY=
Subject key identifier: 0D:35:C4:B4:6A:75:42:08:5F:9F:88:64:EF:E1:05:30:12:08:AD:A6
Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907
Certificate serial: 01856D0AA38EA1424E99E66C195A1B42C56B
Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/DTXEtGp1Qghfn4hk7-EFMBIIraY.roa
Signing time: Sun 01 Jan 2023 11:14:51 +0000
ROA not before: Sun 01 Jan 2023 11:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34478
IP address blocks: 194.27.148.0/24 maxlen: 24
193.140.71.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:a3:8e:a1:42:4e:99:e6:6c:19:5a:1b:42:c5:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907
Validity
Not Before: Jan 1 11:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d35c4b46a7542085f9f8864efe105301208ada6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2a:7b:c7:c7:0c:c6:39:6a:7d:00:79:59:bd:
72:65:ca:98:8f:39:fd:5b:08:07:ba:51:a6:a8:bf:
57:0a:cd:d4:c7:1e:07:5f:af:67:6d:72:03:71:c2:
03:55:c5:6c:b7:cf:66:16:99:dd:a4:55:c4:17:d5:
06:00:e1:f0:c3:ec:17:c5:64:ec:71:a8:27:b6:cc:
83:43:41:33:dd:7b:e5:0b:9d:99:d6:b3:d8:d3:87:
e4:49:fb:62:ff:51:84:41:ee:4d:f0:dc:70:58:bd:
5c:66:01:75:48:d5:88:72:56:ab:9c:6e:0e:67:59:
56:81:fa:1d:7e:f4:ef:07:cc:c7:c3:e6:2c:3b:71:
29:e1:f0:a5:b7:56:67:a2:a6:6a:1f:3a:64:f8:57:
56:fc:07:63:a2:b0:9e:01:84:8e:38:fe:b7:5c:ee:
48:d7:25:fe:e2:d7:db:92:73:7c:0f:d3:1a:0b:76:
1c:79:ec:5a:2c:b8:3a:6c:e4:11:ef:8e:67:27:ff:
82:73:ae:72:2e:f7:a5:b6:c6:22:d6:91:cf:4c:6d:
3a:c4:3e:b2:aa:73:2d:28:cc:4f:82:14:45:e8:d6:
bd:d4:30:f6:2d:f9:95:4d:9c:d8:a5:4e:5d:21:c6:
8c:a6:d3:4e:9e:62:2b:95:b0:59:bf:2d:07:78:5a:
83:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:35:C4:B4:6A:75:42:08:5F:9F:88:64:EF:E1:05:30:12:08:AD:A6
X509v3 Authority Key Identifier:
keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/DTXEtGp1Qghfn4hk7-EFMBIIraY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.140.71.0/24
194.27.148.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:d1:3b:84:ec:2c:26:c3:02:5e:51:82:b5:41:5a:f4:32:34:
99:b5:d1:f3:9c:8c:c9:4a:77:29:96:8f:fb:06:cb:e0:73:13:
7f:e5:c2:32:16:2a:93:d9:1b:46:67:db:c4:33:bc:03:a5:db:
f5:cb:59:81:42:6b:0d:cd:04:6f:a5:7d:c3:c2:ff:86:c6:60:
f7:07:1b:2a:f9:3e:b8:56:c1:7c:c1:dd:53:9a:d9:fb:9b:83:
35:3d:b6:d6:20:e1:9a:42:af:11:ad:86:22:65:52:8d:95:29:
31:9d:15:f8:3c:92:ce:0e:ce:8b:bc:ba:e7:f7:7d:46:aa:75:
5a:f5:05:f5:1e:78:5c:d7:17:c2:ad:08:fa:e8:bc:2e:e9:0f:
f7:64:b6:9e:06:06:98:9c:69:65:93:69:42:2e:34:a5:5f:74:
58:cb:68:ce:e4:b5:1f:9a:78:3b:93:83:8a:b1:30:d1:50:02:
57:71:4b:a5:c3:0e:5f:64:d7:9f:60:2e:e9:72:43:f0:0b:29:
7b:45:5a:fa:00:c4:6d:81:9a:d0:40:1c:b4:c5:ee:b4:81:bf:
6c:4a:18:ce:90:92:3a:68:fd:59:d6:9e:51:4b:5d:0a:0e:4a:
4b:9d:c7:5c:82:b3:f2:7d:2e:ff:5a:f1:b6:ae:89:89:6f:a7:
bf:6d:dc:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 21:35:35 2025 by rpki-client