Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/K6ci0bmaYtAyWj_TfEpVSxEQMHo.roa
File: K6ci0bmaYtAyWj_TfEpVSxEQMHo.roa (raw, json)
Hash identifier: tjoFl7XhwhedJPX9ziY5AM9oBQLzxvs+S6gUHIQjoh8=
Subject key identifier: 2B:A7:22:D1:B9:9A:62:D0:32:5A:3F:D3:7C:4A:55:4B:11:10:30:7A
Certificate issuer: /CN=ec2e821d88de7a011341704202346f7c2bb9ebcf
Certificate serial: 01856D94151D2A5A4A502F989EB49B03F877
Authority key identifier: EC:2E:82:1D:88:DE:7A:01:13:41:70:42:02:34:6F:7C:2B:B9:EB:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/K6ci0bmaYtAyWj_TfEpVSxEQMHo.roa
Signing time: Sun 01 Jan 2023 13:44:59 +0000
ROA not before: Sun 01 Jan 2023 13:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35720
IP address blocks: 194.79.24.0/22 maxlen: 22
194.79.24.0/23 maxlen: 23
194.79.26.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:94:15:1d:2a:5a:4a:50:2f:98:9e:b4:9b:03:f8:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec2e821d88de7a011341704202346f7c2bb9ebcf
Validity
Not Before: Jan 1 13:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ba722d1b99a62d0325a3fd37c4a554b1110307a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ee:9e:b2:68:56:7c:ad:72:cf:98:bd:eb:ca:
e2:02:5a:7d:f3:a1:d9:90:34:81:ff:12:f1:f9:0b:
46:17:fc:37:9e:5e:29:50:be:e8:ac:2d:15:f9:9a:
ae:e0:ab:28:bc:62:d0:0d:4e:8f:69:47:8d:aa:a5:
5c:18:c2:17:ad:1f:aa:52:07:9a:eb:71:52:c9:71:
ee:57:c1:20:38:6e:95:1a:ed:7b:91:f1:d8:85:42:
d1:0d:4d:c6:76:7e:f9:c6:d8:5c:ef:91:e0:0c:50:
cc:4c:da:ab:73:2b:e3:72:a4:02:e6:00:37:6d:74:
6b:59:b8:88:38:0f:99:55:88:80:18:ed:76:91:97:
dc:2e:39:d4:5e:48:45:ad:c3:ae:93:9f:6d:03:16:
c5:ae:bb:30:3f:da:12:04:44:dc:18:e5:68:c7:86:
44:03:af:ec:b4:f7:f9:8e:e9:0f:72:cf:cf:a8:32:
0d:1a:96:f2:91:dd:b9:3b:24:40:30:3c:e4:60:47:
19:df:2c:e0:1a:0a:e9:13:32:75:34:fb:1d:38:de:
01:63:4d:a9:6c:98:a6:fe:e1:2c:c1:dc:8f:dc:9c:
b2:7d:65:02:61:db:3d:8c:9d:d2:e1:e1:b1:37:1c:
c9:27:cd:cb:3f:94:71:e7:17:e2:8f:4b:11:dd:8f:
87:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A7:22:D1:B9:9A:62:D0:32:5A:3F:D3:7C:4A:55:4B:11:10:30:7A
X509v3 Authority Key Identifier:
keyid:EC:2E:82:1D:88:DE:7A:01:13:41:70:42:02:34:6F:7C:2B:B9:EB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/K6ci0bmaYtAyWj_TfEpVSxEQMHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.79.24.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:70:c4:58:73:36:3f:86:e0:c2:a4:ac:21:03:20:60:33:86:
8d:a3:9b:ea:32:ff:1f:d8:99:4e:9e:ad:07:30:dc:ed:4f:db:
c4:dc:93:d3:69:95:b7:10:b5:01:38:38:55:d6:f8:6b:1b:23:
27:30:59:61:71:b4:25:6b:ef:17:77:9f:d7:e8:6f:4d:dc:f6:
56:c7:bf:29:ad:ea:be:f0:42:7d:75:e3:0b:11:09:d0:7a:d3:
11:b3:31:8d:24:b2:db:45:cb:63:8b:ba:bc:db:0c:70:a2:08:
91:9f:bf:8e:62:9d:21:1f:ed:4a:a2:81:d6:04:62:d3:8b:55:
b2:a8:9a:c0:b4:0b:64:f1:b4:f0:fc:66:27:bc:db:bb:47:e1:
04:01:69:f0:09:8f:9d:11:bb:c9:4b:78:24:88:e6:cf:e2:4a:
33:b1:7c:13:b9:33:30:67:63:1b:c7:8c:6e:2f:f4:35:3e:04:
ee:60:d7:b2:63:01:e0:d8:75:71:28:fc:70:c1:97:d5:3d:e5:
07:5c:9f:11:c2:8c:67:08:e3:de:7e:68:20:f3:77:fd:0c:50:
7e:e0:fa:01:17:a4:4a:8c:74:bb:b7:a8:a5:24:0f:9a:b0:6c:
2c:64:e9:4d:2d:b0:52:00:5a:8b:3f:ef:c7:f3:04:8c:00:3e:
55:86:13:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:05 2025 by rpki-client