Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/IwpS1d9wujGNqIfRsFl4HivCkNo.roa
File: IwpS1d9wujGNqIfRsFl4HivCkNo.roa (raw, json)
Hash identifier: 2G9j+pTGdqRTzJJCaFYXOZH5M1iGcDtwa8/DgX+25IA=
Subject key identifier: 23:0A:52:D5:DF:70:BA:31:8D:A8:87:D1:B0:59:78:1E:2B:C2:90:DA
Certificate issuer: /CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
Certificate serial: 018BED00E9DFFCC8D0FC986194CFE95E720E
Authority key identifier: 0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/IwpS1d9wujGNqIfRsFl4HivCkNo.roa
Signing time: Mon 20 Nov 2023 13:52:21 +0000
ROA not before: Mon 20 Nov 2023 13:52:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204163
IP address blocks: 194.152.213.0/24 maxlen: 24
194.152.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ed:00:e9:df:fc:c8:d0:fc:98:61:94:cf:e9:5e:72:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
Validity
Not Before: Nov 20 13:52:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=230a52d5df70ba318da887d1b059781e2bc290da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:48:c8:ba:68:2d:c1:66:0d:05:c2:9e:d3:12:
d3:e5:d0:07:06:97:4f:5a:2d:32:00:0e:a1:d3:b1:
37:2e:45:90:ab:f9:d5:ac:e8:16:ef:a9:9f:e0:8b:
e8:3d:0c:d9:aa:65:3c:d7:43:f2:50:52:06:ac:50:
af:54:7e:4f:cb:0b:5c:f2:da:4e:09:76:3d:a3:0c:
d2:43:1a:c0:d8:0c:25:a7:22:50:9e:b1:03:47:03:
62:df:98:29:50:78:39:4c:ba:e5:ed:2a:ee:34:f5:
bc:bc:e4:78:c1:4b:41:ca:39:bc:ca:b9:a4:3c:6e:
d1:49:87:e5:cb:16:a1:31:d9:d3:c1:ca:d0:f1:cc:
25:21:8b:71:e8:21:0e:4d:05:93:f3:6f:2e:ad:de:
0f:0b:6f:4e:83:08:c4:cd:4d:36:80:0d:03:9d:03:
f3:c9:04:eb:39:4c:0e:af:3b:2c:b4:4f:06:49:51:
19:8d:9f:e7:49:90:6f:a3:78:46:38:47:38:e0:65:
e7:f0:75:5c:73:b2:fb:ff:88:61:9f:bc:f8:48:d2:
6a:81:ef:4f:08:be:93:08:07:f0:1a:9d:48:21:7b:
65:31:10:7b:df:9b:d2:7d:60:37:b1:ed:c3:8e:b6:
4e:87:82:a4:ac:f9:60:0e:1c:e8:60:24:de:e3:a0:
c0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:0A:52:D5:DF:70:BA:31:8D:A8:87:D1:B0:59:78:1E:2B:C2:90:DA
X509v3 Authority Key Identifier:
keyid:0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/IwpS1d9wujGNqIfRsFl4HivCkNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.152.213.0/24
194.152.238.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:f1:9b:4a:af:fb:23:cf:31:d9:75:bc:2a:69:ed:b1:17:7b:
5d:9d:d9:52:bf:45:d9:9f:9c:35:f0:6a:51:81:6f:a3:c9:2a:
44:5b:dd:66:4a:ee:d9:20:eb:c6:56:a0:f6:36:9c:de:1f:20:
ce:e1:d4:5c:c9:4d:43:77:ee:eb:bb:48:ba:d7:cd:ac:b0:04:
2e:a2:6b:51:97:fe:7a:b9:fe:b5:c9:82:d0:dd:23:2a:a0:97:
d0:0d:61:59:78:f9:8c:97:0a:2d:d7:31:f3:54:e5:29:5b:92:
c4:43:93:f9:89:bc:c1:8b:46:35:a4:1d:36:f9:79:8a:de:7d:
8d:12:46:5c:16:87:80:ae:64:e3:9b:8d:31:ec:b4:16:0f:8c:
f7:b0:fc:ff:8b:54:4a:99:b0:b3:46:77:ee:9f:4b:05:cf:06:
5f:95:65:e4:cf:c9:84:c7:d7:c4:b7:55:23:c8:16:75:f1:1d:
02:26:6a:e8:71:01:aa:1a:83:d0:ce:9d:e4:84:bf:3a:2a:d2:
fd:45:06:64:04:27:6f:a0:db:6c:75:83:d3:6e:fd:ae:b0:d6:
91:7d:e3:6f:f3:5a:8e:19:ea:c2:aa:eb:9a:4f:e4:d9:c2:43:
fa:9f:ee:36:83:40:e4:4c:f0:a7:3b:e6:4a:6e:f0:da:0f:b3:
9e:a8:59:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:19:56 2025 by rpki-client