Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/an4iW-7QtysoeSxlSpmNFy_jSeM.roa
File: an4iW-7QtysoeSxlSpmNFy_jSeM.roa (raw, json)
Hash identifier: o12f+vjo2yzu7s946kKhDLg9OKa/Xp9yNleBemTpK48=
Subject key identifier: 6A:7E:22:5B:EE:D0:B7:2B:28:79:2C:65:4A:99:8D:17:2F:E3:49:E3
Certificate issuer: /CN=70e2b3417c39c0fe3bbbbc4d523ed437b29c5a1c
Certificate serial: 05A08159
Authority key identifier: 70:E2:B3:41:7C:39:C0:FE:3B:BB:BC:4D:52:3E:D4:37:B2:9C:5A:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOKzQXw5wP47u7xNUj7UN7KcWhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/an4iW-7QtysoeSxlSpmNFy_jSeM.roa
Signing time: Sat 01 Jan 2022 14:05:25 +0000
ROA not before: Sat 01 Jan 2022 14:05:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1930
IP address blocks: 192.68.216.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94404953 (0x5a08159)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e2b3417c39c0fe3bbbbc4d523ed437b29c5a1c
Validity
Not Before: Jan 1 14:05:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6a7e225beed0b72b28792c654a998d172fe349e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a8:3a:a2:7a:3b:b0:b8:80:7e:ca:f9:db:36:
4c:a8:0f:43:b1:af:80:f8:f3:7a:6c:19:44:7b:0d:
92:ce:ee:ae:2c:53:a0:76:14:a1:48:1b:dc:26:40:
3c:18:a0:07:be:af:d3:28:03:f8:75:f8:f9:0c:6f:
c5:96:42:88:43:25:06:d3:05:90:4d:be:a2:8b:e7:
f1:8f:f1:f0:c6:d7:b7:00:bd:2d:bd:2e:cc:28:f6:
1b:41:74:df:68:5b:ee:92:1b:75:47:f7:e8:fd:be:
3b:03:84:80:cf:20:8e:e9:9a:1e:58:1a:46:15:75:
05:75:18:6a:8a:fb:f1:c7:44:f2:f2:d8:16:6c:84:
38:c5:18:1c:c7:c0:be:5d:ec:84:65:c3:fa:71:75:
c0:a1:88:75:1f:4a:3a:f3:52:8f:68:9a:82:16:2b:
e6:4b:0a:75:0d:e3:df:2b:c0:df:bc:40:21:d9:fa:
f0:b3:69:3b:f4:a7:61:fe:eb:ff:8a:fd:9a:ae:5d:
70:0e:c1:33:51:ef:06:2a:11:0c:c8:57:5a:e9:cd:
7f:61:78:29:48:ac:3e:c2:6d:04:84:88:d1:2a:60:
9b:15:0b:e0:84:0b:49:c3:96:5d:cc:0a:4b:d4:34:
87:bc:8a:cf:3b:15:b8:a2:61:58:f1:32:27:a6:93:
cd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:7E:22:5B:EE:D0:B7:2B:28:79:2C:65:4A:99:8D:17:2F:E3:49:E3
X509v3 Authority Key Identifier:
keyid:70:E2:B3:41:7C:39:C0:FE:3B:BB:BC:4D:52:3E:D4:37:B2:9C:5A:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOKzQXw5wP47u7xNUj7UN7KcWhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/an4iW-7QtysoeSxlSpmNFy_jSeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.68.216.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:ba:9a:fc:4d:10:bf:54:14:cd:bc:52:69:4c:1f:b4:cb:af:
38:de:3b:8b:47:0a:1b:1d:23:74:dd:89:c2:ff:9d:90:af:95:
a8:e0:a6:0f:28:ed:6d:0d:76:14:b8:c8:f7:4d:c2:26:e0:4b:
6e:bc:9f:4a:1f:f2:0a:be:99:f5:93:19:ca:51:28:2f:20:1f:
c1:5f:27:9c:c1:5b:81:81:8f:c5:16:5c:8c:47:9e:25:75:f3:
46:71:da:7e:ec:f0:6d:af:10:f7:c7:06:29:ba:cc:58:b4:a3:
dd:32:0e:5e:10:2b:8a:a2:2c:bf:7a:0b:ea:f3:f2:46:fe:ac:
e0:09:ec:90:ff:bc:c7:49:76:2e:79:6e:f3:43:92:51:d6:1f:
1f:3e:20:e1:b0:af:38:de:e2:d8:35:0a:d0:ed:b1:65:1a:78:
81:8a:cd:79:9d:b3:69:5a:4d:7d:96:6f:da:85:ff:67:5b:bd:
6b:e8:c0:13:8f:ad:5f:89:80:3c:df:b9:54:39:71:6e:7a:23:
8e:08:8f:50:fa:24:d1:0b:1d:ae:c7:5c:38:00:4a:d4:81:da:
a6:f5:6c:97:4d:8f:a2:19:c6:93:78:aa:aa:dd:ef:d0:9b:ec:
ec:cb:e0:cd:dd:5e:f6:f1:9c:96:f4:53:59:87:ea:42:28:a1:
c5:17:63:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:37 2025 by rpki-client