Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/7nwcLA2DU-MLEzzl6kAVqh9rjuI.roa
File: 7nwcLA2DU-MLEzzl6kAVqh9rjuI.roa (raw, json)
Hash identifier: 3IsdhxbPb8Z8Qt4lfUFOV/AELMgE/PXvkqNKRa0JfBE=
Subject key identifier: EE:7C:1C:2C:0D:83:53:E3:0B:13:3C:E5:EA:40:15:AA:1F:6B:8E:E2
Certificate issuer: /CN=2719412918a6627f99cce55c7aca139057b8574e
Certificate serial: 0186F3440A6876D7BBEDF5DD79AC379AF4C5
Authority key identifier: 27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/7nwcLA2DU-MLEzzl6kAVqh9rjuI.roa
Signing time: Sat 18 Mar 2023 05:49:27 +0000
ROA not before: Sat 18 Mar 2023 05:49:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206995
IP address blocks: 194.50.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f3:44:0a:68:76:d7:bb:ed:f5:dd:79:ac:37:9a:f4:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2719412918a6627f99cce55c7aca139057b8574e
Validity
Not Before: Mar 18 05:49:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee7c1c2c0d8353e30b133ce5ea4015aa1f6b8ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:73:4c:0b:9b:84:fb:d6:1b:16:09:13:7b:69:
e1:1e:87:5d:df:92:79:5c:c4:38:67:53:d5:ae:81:
db:c0:0e:31:0d:85:c6:24:b4:fa:cd:8a:90:22:de:
55:c9:b0:4f:3a:de:07:76:a1:fc:3b:7e:f1:f9:d1:
fc:cf:5a:e2:0d:d5:24:2f:4f:b8:cc:61:b5:79:04:
f5:bf:f9:81:d0:cc:ae:46:0e:e9:f8:96:f4:e5:23:
30:7a:85:f9:6c:06:2c:8e:e3:99:cc:b1:96:13:1b:
ca:e6:b9:57:f0:74:1c:01:3b:70:63:41:51:6c:8a:
d3:09:3e:de:3a:6c:a6:78:fe:d6:a6:cd:3a:2b:3e:
27:0d:65:38:c5:d3:37:d1:5a:17:d4:47:d5:75:99:
5b:82:35:3f:6e:a0:cc:19:a7:93:9f:8e:89:1c:1d:
7c:76:1b:7b:d8:e4:48:29:5d:fa:e8:ef:31:59:23:
31:61:ed:79:d4:62:70:7a:1d:c2:df:a6:ca:b6:4b:
c0:33:31:94:b2:08:b5:73:c8:80:15:ca:22:d9:2e:
6a:49:84:05:f9:79:90:97:53:11:43:bc:a8:f8:7e:
1c:7c:84:ac:5e:4f:b3:12:4d:8a:4a:4c:58:db:be:
5a:09:5f:0d:36:bd:d3:40:e8:0e:3d:00:11:9a:f6:
3c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:7C:1C:2C:0D:83:53:E3:0B:13:3C:E5:EA:40:15:AA:1F:6B:8E:E2
X509v3 Authority Key Identifier:
keyid:27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/7nwcLA2DU-MLEzzl6kAVqh9rjuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.0.0/24
Signature Algorithm: sha256WithRSAEncryption
88:c6:ac:d9:c4:81:da:5d:5e:16:1e:4b:3a:e3:ef:23:f6:a9:
45:90:fb:13:8d:59:df:04:24:c7:d2:da:6c:85:39:13:6f:8f:
db:83:61:4c:04:56:e0:2e:0b:04:4c:30:65:72:0a:a0:6e:3b:
be:23:76:d7:68:68:e7:8d:9f:8e:c8:10:77:8e:97:d2:53:b2:
42:6b:95:21:05:22:a2:04:d2:ea:a5:04:bd:3e:d3:8e:b0:f3:
bd:ba:26:b7:69:0d:ec:4b:12:dc:67:06:9c:9a:42:2a:b4:18:
86:7f:17:4d:5d:12:a6:ea:74:c9:2d:7f:ef:47:d4:cc:de:ca:
40:96:00:50:e7:25:83:66:e0:eb:81:72:84:cb:ae:dc:e0:ca:
3e:c2:fd:bd:35:2d:ae:fb:fc:74:01:8f:64:d3:9f:65:13:06:
5c:bc:65:b1:1c:ef:10:ca:56:8d:d5:c4:b2:35:5a:c1:81:c3:
db:f9:fa:58:9c:23:07:bb:80:85:6f:51:4b:3a:ae:b8:ba:a2:
a2:5f:aa:46:8e:76:67:91:7a:96:c4:d0:23:cc:b4:8b:c6:c3:
34:9f:80:c1:78:8e:e5:c2:b8:28:bd:94:4a:41:1c:81:b0:26:
2e:4c:4e:94:55:45:38:05:81:5a:b2:e1:0e:84:6a:d0:08:11:
d9:4c:ce:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:24 2025 by rpki-client