Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/0zorbBXJEL1gx7vrrDT2fLeJcyk.roa
File: 0zorbBXJEL1gx7vrrDT2fLeJcyk.roa (raw, json)
Hash identifier: WfQVYBcQ6WZ0K/n58b7tQUCx+AQZN4hf0xgMHqiozIE=
Subject key identifier: D3:3A:2B:6C:15:C9:10:BD:60:C7:BB:EB:AC:34:F6:7C:B7:89:73:29
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 173E448D
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/0zorbBXJEL1gx7vrrDT2fLeJcyk.roa
Signing time: Sat 01 Jan 2022 16:03:43 +0000
ROA not before: Sat 01 Jan 2022 16:03:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9050
IP address blocks: 188.214.141.0/24 maxlen: 24
31.14.20.0/24 maxlen: 24
188.241.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 389956749 (0x173e448d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 16:03:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d33a2b6c15c910bd60c7bbebac34f67cb7897329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:28:69:6c:84:7f:a9:c5:c4:a6:45:a6:5b:bb:
fe:5f:14:11:20:ea:6d:4f:87:71:a2:cf:5b:8a:ad:
f4:3c:04:77:f1:bf:c2:09:86:e9:c4:40:c5:25:24:
5a:78:6e:a3:35:9f:6d:97:5d:58:2a:d3:16:03:0e:
7f:f1:05:dc:3d:29:81:c0:fb:9f:4e:2a:7a:33:79:
05:1f:00:73:85:43:8a:c1:4d:d1:49:09:9e:91:92:
7e:09:b9:b8:d3:25:fc:f7:4a:a3:5f:e0:86:0c:59:
7d:4a:d4:0f:9a:68:49:cb:e8:df:47:03:62:86:75:
99:67:94:77:d7:84:d4:6d:1e:06:85:83:3d:42:eb:
5c:3c:1d:6b:f7:d7:47:6f:44:5b:a2:8c:86:b8:4e:
d7:9b:d5:e7:9a:f3:b2:4b:d2:53:40:ec:9e:14:10:
96:80:da:e0:91:9b:eb:e8:ed:8e:28:e0:8f:9f:28:
f6:e6:48:20:3c:c6:39:cb:b0:0d:89:87:5e:7c:38:
33:e3:e8:61:c8:e2:40:a3:68:34:af:4c:46:77:1d:
84:fd:bc:5f:75:70:26:57:52:d0:b3:e5:b3:9e:ec:
96:ce:c6:4a:a9:b2:8d:ba:cd:04:ad:3c:16:aa:d0:
bd:da:7c:85:26:23:95:21:3b:34:ef:e8:1f:05:35:
67:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:3A:2B:6C:15:C9:10:BD:60:C7:BB:EB:AC:34:F6:7C:B7:89:73:29
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/0zorbBXJEL1gx7vrrDT2fLeJcyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.20.0/24
188.214.141.0/24
188.241.7.0/24
Signature Algorithm: sha256WithRSAEncryption
60:ff:cf:30:47:85:39:f9:71:4e:ce:f3:ac:be:4d:67:e6:3b:
7d:7f:b2:59:c0:26:00:41:ac:cf:51:3b:b8:a1:4b:d4:5e:eb:
73:97:91:16:73:42:4c:e9:2c:82:85:30:bd:47:75:29:41:60:
55:72:99:2f:5f:8c:93:8e:c8:5e:62:19:c4:13:ca:d3:54:a4:
8b:f0:77:39:5f:dc:3b:e7:b2:7b:8a:83:16:5a:dc:71:50:ed:
21:5a:08:98:2f:04:b7:17:53:fb:22:9f:9b:31:80:f4:36:91:
97:08:6f:9d:19:3b:62:32:ae:29:db:a6:aa:e4:08:1f:c2:b5:
48:2d:d5:3c:9e:be:95:d3:3d:da:bd:6b:a2:d4:da:c0:f5:14:
64:eb:fa:8e:eb:06:85:8c:6b:fb:d1:7f:bd:b6:f9:bb:3a:de:
f4:f2:21:f7:8d:32:4f:39:dd:19:97:e5:fd:ea:79:01:eb:fc:
2c:7a:30:9b:7c:be:86:c4:87:9b:9e:fa:b7:4f:26:eb:46:10:
85:af:b2:63:2a:3f:eb:5b:0a:f6:52:9b:e4:37:5f:56:03:fd:
89:6b:19:5d:9d:3d:ca:c5:55:b7:84:2c:7d:59:87:5e:59:49:
13:52:0a:1a:20:cd:fd:30:76:af:68:62:ba:5e:e4:0b:9e:81:
18:f3:f4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 14:29:34 2025 by rpki-client