Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/7JJ-Yc4nLHp_RgJS54H88wtXWxo.roa
File: 7JJ-Yc4nLHp_RgJS54H88wtXWxo.roa (raw, json)
Hash identifier: Qi1YXrhfstJ2ElIyRJmcyb471lPkK0YaxSV2eLq/7Ew=
Subject key identifier: EC:92:7E:61:CE:27:2C:7A:7F:46:02:52:E7:81:FC:F3:0B:57:5B:1A
Certificate issuer: /CN=2ef957aba2ef00352850e202464c71d33ca81448
Certificate serial: 35BC9A22
Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/7JJ-Yc4nLHp_RgJS54H88wtXWxo.roa
Signing time: Sat 01 Jan 2022 12:06:29 +0000
ROA not before: Sat 01 Jan 2022 12:06:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2089
IP address blocks: 193.48.92.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 901552674 (0x35bc9a22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448
Validity
Not Before: Jan 1 12:06:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ec927e61ce272c7a7f460252e781fcf30b575b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:94:ba:85:cf:d4:a0:77:88:1d:0a:0a:7f:cf:
57:38:20:b2:f0:1a:52:0b:5b:55:b8:53:9c:d2:c5:
81:5a:31:82:f0:b5:4e:40:7c:bb:22:00:c1:7d:05:
f2:66:a2:1a:b2:11:cd:a0:bd:c8:67:07:fe:d5:fe:
8c:ec:fc:3c:11:49:72:db:d1:e6:2c:85:70:fc:a9:
0f:77:10:a4:e1:20:82:bd:da:f5:de:e8:78:5b:0c:
06:55:c4:70:6f:45:d1:67:5a:b3:39:58:e1:3e:f6:
8c:26:9b:86:23:42:16:ae:7c:48:55:fc:99:71:d9:
e0:8d:50:aa:40:cc:38:fb:50:f5:64:b0:68:ba:26:
6d:d2:5e:56:37:89:2e:0c:5d:c8:01:a0:af:a8:28:
46:d0:7b:d1:fb:92:c7:a3:c1:42:d3:e6:24:8c:d7:
b7:29:f1:a3:18:33:52:dc:b6:18:6f:52:86:e3:e5:
08:a8:fe:cb:1b:90:eb:3c:11:71:4e:2f:f1:b3:9b:
c9:8b:a1:8b:04:12:99:b4:d0:32:9b:9e:91:c0:a7:
19:68:66:6e:0d:8f:49:c2:f8:47:4e:8c:ff:cc:b6:
96:aa:87:b2:66:b5:7e:88:f0:31:33:48:21:2b:c1:
b7:af:a9:eb:34:fc:20:5d:9f:31:cb:48:cf:d0:27:
f1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:92:7E:61:CE:27:2C:7A:7F:46:02:52:E7:81:FC:F3:0B:57:5B:1A
X509v3 Authority Key Identifier:
keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/7JJ-Yc4nLHp_RgJS54H88wtXWxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.48.92.0/24
Signature Algorithm: sha256WithRSAEncryption
63:f2:7b:ae:17:1f:e4:56:d0:0e:04:7b:12:d8:c7:f9:c0:16:
a7:46:ce:80:4b:5e:5a:98:61:18:9d:6e:9a:af:11:7e:23:ba:
65:08:5a:7c:f9:f8:72:87:2b:e8:38:40:f0:9f:c8:28:0a:b4:
73:ea:bc:85:ef:ac:5b:7e:46:b4:9c:33:65:90:fd:8b:a1:54:
9a:2e:a2:e0:77:c8:f7:27:c6:18:8d:0d:91:76:18:05:a8:0c:
30:35:b1:1f:fc:c7:7f:6f:6a:9f:06:c5:0d:9b:4e:a7:c5:db:
f7:f6:49:1e:bd:c7:40:c8:4f:44:e7:71:3f:c9:5e:f6:17:b0:
eb:a9:55:8f:f7:5e:bc:69:b1:0c:79:7b:8b:39:e1:39:d7:aa:
d1:27:b3:10:22:95:c9:6f:99:d7:96:d3:28:bb:7e:81:b9:54:
c9:8f:78:10:33:63:76:0e:92:28:35:26:82:8b:55:2e:41:ac:
32:ca:40:c2:26:5b:b0:8a:c3:35:17:d4:af:65:1a:ae:98:1c:
2f:6e:09:62:7f:a0:57:86:37:2a:17:d1:c8:bf:fd:a9:8b:7c:
45:10:4e:6d:38:c6:26:31:da:4c:2d:fe:7a:e0:d4:43:5e:78:
4f:2e:a7:e6:a7:e1:99:89:d5:3c:71:f2:c5:d8:a0:2c:36:a0:
59:21:d6:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:07 2025 by rpki-client