Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/1ed06Kn7V3-uVObec-xssdEYIf8.roa
File: 1ed06Kn7V3-uVObec-xssdEYIf8.roa (raw, json)
Hash identifier: CZHaY49BzNQMp2nWnOfSyHYLmMMdJpycKklSo5UvVd8=
Subject key identifier: D5:E7:74:E8:A9:FB:57:7F:AE:54:E6:DE:73:EC:6C:B1:D1:18:21:FF
Certificate issuer: /CN=4e7461477b59b7bc0906f6ce60650bb3ad2dee57
Certificate serial: 018C122FA63D7F86A50E513A305C9C85BBA9
Authority key identifier: 4E:74:61:47:7B:59:B7:BC:09:06:F6:CE:60:65:0B:B3:AD:2D:EE:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/1ed06Kn7V3-uVObec-xssdEYIf8.roa
Signing time: Mon 27 Nov 2023 19:09:21 +0000
ROA not before: Mon 27 Nov 2023 19:09:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29075
IP address blocks: 194.147.152.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:12:2f:a6:3d:7f:86:a5:0e:51:3a:30:5c:9c:85:bb:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e7461477b59b7bc0906f6ce60650bb3ad2dee57
Validity
Not Before: Nov 27 19:09:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d5e774e8a9fb577fae54e6de73ec6cb1d11821ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5d:1f:83:20:82:69:e6:3a:fe:59:fa:de:15:
c9:3a:9c:3b:31:c6:5f:15:b5:72:ee:d6:f5:7b:6d:
b4:1d:b5:c1:05:33:f9:16:40:46:92:f0:ea:dd:aa:
e1:55:d8:b8:2b:eb:01:06:cf:6f:14:5b:a5:eb:ae:
c9:56:58:a3:5c:0f:a5:c9:4c:b7:18:b6:46:e8:4c:
d7:9e:ec:a0:4c:e0:6c:18:eb:54:79:3a:fe:70:6f:
fb:e9:eb:b6:52:11:0c:bf:3e:cc:0b:73:47:91:8d:
f6:1a:c6:b3:53:54:ef:34:f2:7c:e8:6e:75:04:fc:
2d:b3:93:57:78:af:16:60:1e:a0:2a:12:a4:71:9b:
8e:3b:64:af:29:11:df:e4:fc:3b:b1:53:7a:d8:7f:
93:9e:98:26:34:45:f7:2b:25:cc:22:91:91:a1:8f:
49:37:5e:21:21:ac:ab:b1:ef:7c:ad:a4:55:78:32:
d7:63:65:6c:27:50:eb:80:9e:97:f8:3a:2b:d1:ec:
9a:e2:5a:aa:85:5b:6c:01:56:33:56:83:cf:8d:04:
e4:c4:54:b0:1e:52:04:0a:65:86:d7:f9:37:f1:f3:
cd:3e:3d:12:ad:be:72:2b:c4:48:40:a7:24:d9:f3:
4a:75:5a:ae:05:26:c5:cc:3c:ab:33:e6:7f:d5:1d:
55:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E7:74:E8:A9:FB:57:7F:AE:54:E6:DE:73:EC:6C:B1:D1:18:21:FF
X509v3 Authority Key Identifier:
keyid:4E:74:61:47:7B:59:B7:BC:09:06:F6:CE:60:65:0B:B3:AD:2D:EE:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/1ed06Kn7V3-uVObec-xssdEYIf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.152.0/24
Signature Algorithm: sha256WithRSAEncryption
25:a4:36:c0:ea:8a:87:00:21:a0:c4:10:7e:29:bb:03:02:00:
43:50:c5:32:70:70:e8:cb:bc:cd:dd:84:49:81:68:56:60:69:
91:d4:53:ee:74:ed:65:de:fa:db:7a:0b:38:26:59:54:d1:4c:
2b:48:04:3e:5d:38:d7:a4:a7:21:d4:23:c0:54:16:26:f9:02:
47:db:ab:b2:5e:a7:50:f9:fe:c6:87:03:3f:6d:41:d8:88:51:
9d:81:d4:07:5f:b9:a3:d4:d0:83:85:02:a1:94:35:71:a3:29:
2e:1c:3a:3d:56:03:7f:70:81:ed:a0:36:9d:62:ad:40:6c:60:
64:05:4f:e6:01:80:07:bd:d7:b5:c4:7c:ae:16:51:27:fc:c3:
e8:dc:cc:d2:5e:7b:d5:65:d2:01:8f:fa:2f:c0:dd:03:7b:e1:
7a:a1:a1:ac:11:0f:35:d2:b1:f9:c2:59:8d:d8:47:d9:b8:40:
67:80:88:d6:1f:bc:89:e4:8f:1b:92:d1:fb:7f:f7:bd:ef:d3:
8c:4f:4a:ae:7c:5f:fa:3e:a1:30:c9:07:32:f3:8d:5a:90:80:
b4:24:05:75:77:cd:19:fb:ca:73:9e:a9:08:27:16:2b:6a:26:
b3:04:ef:8e:c1:0d:62:46:72:da:b4:35:ff:94:72:93:33:6c:
4b:92:c8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:11:58 2025 by rpki-client