Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/SZIyBeFSMPmUfOQkmFen8IPittQ.roa
File: SZIyBeFSMPmUfOQkmFen8IPittQ.roa (raw, json)
Hash identifier: d4//L5H/ifjhRy7Yk2K3qh8iQM4Jcm6eUtIRd3oKUcA=
Subject key identifier: 49:92:32:05:E1:52:30:F9:94:7C:E4:24:98:57:A7:F0:83:E2:B6:D4
Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907
Certificate serial: 01856D0AA09B3C86097E47C32B46CF5E6012
Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/SZIyBeFSMPmUfOQkmFen8IPittQ.roa
Signing time: Sun 01 Jan 2023 11:14:51 +0000
ROA not before: Sun 01 Jan 2023 11:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13102
IP address blocks: 194.27.150.0/24 maxlen: 24
194.27.149.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:a0:9b:3c:86:09:7e:47:c3:2b:46:cf:5e:60:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907
Validity
Not Before: Jan 1 11:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49923205e15230f9947ce4249857a7f083e2b6d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:46:8b:a3:be:ab:50:91:95:6a:36:d0:16:37:
3c:77:af:b9:93:74:62:00:c9:f4:61:61:8c:83:5a:
fa:93:80:7e:46:bd:1a:6a:26:dc:23:3d:0d:99:25:
47:43:78:7f:9f:d2:0d:3d:d6:92:39:e6:ce:9f:2b:
50:18:b2:a9:a2:f7:01:10:fc:ac:7d:43:b0:cd:ad:
bf:c8:f1:ae:ab:9f:b0:b2:48:ed:09:d1:a9:35:cf:
0a:1d:eb:8c:d1:4d:cd:b6:e5:e1:14:ed:8c:33:9d:
10:7f:9f:18:c0:5a:e0:0f:a0:a7:07:b4:e4:35:03:
5c:05:13:5f:78:93:e6:19:18:3b:10:90:15:a5:9f:
6e:56:c3:4c:69:1e:4f:e2:8e:b1:a4:0e:19:5e:fd:
93:1e:9c:28:90:0f:81:3a:21:78:71:59:f4:14:02:
a0:0a:fd:dd:ad:b9:e3:39:4e:3d:14:17:e2:4e:99:
e0:b3:fe:d6:77:48:9a:96:6f:fd:b0:82:68:7c:f3:
6a:47:46:c6:2c:f1:4f:80:ec:c2:4a:be:b3:73:de:
ee:56:cb:90:49:38:20:12:99:cd:31:f6:7e:6e:78:
ef:9c:22:e5:8f:d3:01:e0:ef:f6:7a:c4:80:9e:b0:
18:79:65:c8:15:52:82:03:a7:4f:50:c6:0d:6e:82:
9d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:92:32:05:E1:52:30:F9:94:7C:E4:24:98:57:A7:F0:83:E2:B6:D4
X509v3 Authority Key Identifier:
keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/SZIyBeFSMPmUfOQkmFen8IPittQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.27.149.0-194.27.150.255
Signature Algorithm: sha256WithRSAEncryption
7f:9f:09:8f:7d:3d:47:41:16:38:bc:e9:5c:0e:4f:2b:c7:9b:
57:47:63:05:9f:59:a4:f1:77:ab:b6:a9:af:44:df:f6:d0:27:
b7:01:b2:cf:57:44:36:75:82:44:2f:0c:af:3e:54:d1:42:69:
e9:a5:0b:8a:76:11:ba:ac:4b:18:a0:52:0d:13:60:9e:f7:e1:
a5:82:9e:68:42:85:b5:21:14:dd:a0:8b:1a:ba:b5:94:dd:12:
38:a7:cf:d0:ce:a6:ca:c0:97:74:b7:85:7b:07:98:07:4a:73:
7e:f5:f8:c0:6c:84:01:3f:72:0b:e2:ef:bc:c1:6c:a6:1e:75:
c0:78:82:4d:bb:61:76:5f:d4:1a:9c:46:77:3c:90:eb:69:f2:
ef:be:fb:2a:4e:29:8d:da:a0:3d:8c:81:5b:f0:33:21:04:fe:
4f:2f:6c:aa:07:8d:33:c9:05:0a:18:35:c5:e1:6b:95:46:72:
46:17:ae:14:e3:7b:70:46:91:57:18:b6:fc:9d:c1:02:c2:51:
0b:a0:18:94:41:4c:f8:c1:64:ea:c6:5d:c6:3b:60:3b:27:9d:
c1:64:f4:d9:4e:1e:fd:f9:56:ae:c5:30:63:d2:9f:de:2c:86:
4a:31:c1:12:44:b0:36:62:af:d6:73:da:f4:95:9f:ef:e0:7b:
41:fd:9d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 21:01:22 2025 by rpki-client