Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/1OGIdx5B5nWvSBuFuBC-NYipALk.roa
File: 1OGIdx5B5nWvSBuFuBC-NYipALk.roa (raw, json)
Hash identifier: 9APLN0frQfSkdA7tstkiSCaKDnE8Yvd7bPAki32dL20=
Subject key identifier: D4:E1:88:77:1E:41:E6:75:AF:48:1B:85:B8:10:BE:35:88:A9:00:B9
Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial: 01857315FDBA0DD1B6E78CE86C3C37C099FA
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/1OGIdx5B5nWvSBuFuBC-NYipALk.roa
Signing time: Mon 02 Jan 2023 15:24:59 +0000
ROA not before: Mon 02 Jan 2023 15:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198388
IP address blocks: 85.14.29.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:15:fd:ba:0d:d1:b6:e7:8c:e8:6c:3c:37:c0:99:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Validity
Not Before: Jan 2 15:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d4e188771e41e675af481b85b810be3588a900b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:df:f9:4a:eb:7f:a9:12:96:f2:ae:4d:5f:48:
5e:5c:a7:e5:39:ac:4c:fc:cb:65:63:0a:f7:4b:df:
04:8f:2a:4f:43:5d:22:f0:e1:16:b6:8f:ba:59:43:
70:a3:e1:4c:75:c6:85:cd:18:81:a1:b0:f0:fd:93:
c9:d7:bb:a2:49:1b:04:cf:91:b1:ff:dd:00:d9:c8:
1b:58:a3:e3:7e:ac:fc:46:b1:66:1d:f3:76:11:38:
84:39:3b:64:32:da:08:01:69:82:17:fc:70:fe:f3:
c7:2e:78:7a:49:8e:1b:bb:e7:1b:a2:53:00:b0:a0:
a9:35:dc:39:58:8c:01:f6:99:41:7a:9c:23:0a:2f:
71:9a:41:a0:98:4c:f0:47:19:43:cc:54:b4:92:cd:
ca:97:9d:98:36:b8:af:56:85:5d:ca:a5:8a:2b:41:
ee:51:e3:c5:f8:d3:6c:55:1a:6b:eb:4a:8a:67:a1:
88:e4:e3:b0:4e:46:6a:69:94:e7:67:14:d1:69:1f:
22:59:4f:20:a9:07:bc:53:cc:6e:b2:5d:e4:a0:67:
86:b9:61:e1:31:6b:c9:2b:69:e9:c5:15:03:36:da:
4a:50:25:00:37:b2:4f:2f:77:09:b7:bb:b4:fd:be:
7f:12:f1:60:c7:f4:16:c7:88:8e:52:5d:8d:eb:6f:
37:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E1:88:77:1E:41:E6:75:AF:48:1B:85:B8:10:BE:35:88:A9:00:B9
X509v3 Authority Key Identifier:
keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/1OGIdx5B5nWvSBuFuBC-NYipALk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.14.29.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:7f:36:20:72:73:98:dd:b6:b0:41:f6:cf:bf:b1:22:0a:bb:
e7:b8:66:e7:d5:ff:8d:96:b2:ee:d7:ec:37:5e:27:4c:0e:5a:
6a:de:5a:65:b8:e7:23:19:f9:76:2d:39:2b:d7:f7:9c:44:15:
7e:72:6e:ef:cd:71:45:b7:83:0f:88:a0:16:31:98:e8:cb:fe:
64:29:7a:89:3b:4c:75:e0:6b:c0:44:75:56:00:09:d0:39:02:
06:07:46:20:0a:ea:00:24:ee:7a:15:97:8a:17:7c:e1:d4:96:
37:65:ee:19:d6:82:6c:58:e5:10:98:41:f4:b1:17:36:d2:6e:
d3:b7:bf:03:bb:5b:c4:5d:0f:e4:80:ce:f8:80:8c:6f:a1:9b:
25:8b:36:96:41:8c:ac:9e:19:ed:c8:12:0f:05:d6:a3:64:3e:
d3:a8:09:88:b0:d1:c8:bc:a5:a0:44:85:84:e5:80:43:83:a2:
1b:e2:f6:ef:22:78:cb:31:b3:aa:c3:ec:3f:11:01:61:cc:b5:
8a:32:5c:a3:69:91:ae:7a:a8:8f:cc:4b:00:bb:8c:84:9c:29:
e6:4e:9d:eb:24:81:91:7f:36:26:91:d7:6a:0f:50:27:19:10:
d8:d0:3a:48:a5:0f:11:2f:ff:8d:96:59:5e:9a:27:f8:76:f1:
9d:37:a0:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:02 2025 by rpki-client