Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/G7szeEb6AsN03U_vcfLHXbQgzsk.roa
File: G7szeEb6AsN03U_vcfLHXbQgzsk.roa (raw, json)
Hash identifier: 500dLCFivt8vNNMgA3MH38iiQNBwh+VoX6VQT75Rwbw=
Subject key identifier: 1B:BB:33:78:46:FA:02:C3:74:DD:4F:EF:71:F2:C7:5D:B4:20:CE:C9
Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial: 0A17A181
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/G7szeEb6AsN03U_vcfLHXbQgzsk.roa
Signing time: Thu 28 Apr 2022 07:53:01 +0000
ROA not before: Thu 28 Apr 2022 07:53:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35014
IP address blocks: 89.252.197.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169320833 (0xa17a181)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Validity
Not Before: Apr 28 07:53:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1bbb337846fa02c374dd4fef71f2c75db420cec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c7:92:88:f7:75:da:a6:37:32:14:0b:c9:80:
80:21:89:c6:22:60:19:c4:ec:f0:bd:b3:f1:e3:7a:
0b:2e:90:72:06:a6:80:98:a6:6a:36:46:47:23:14:
f6:f7:e7:54:18:27:5a:d5:be:73:8d:ff:5e:cb:22:
d0:e7:ca:0e:a8:f2:bd:48:bf:55:09:c4:60:68:61:
a8:97:e0:86:7a:44:e3:e6:8b:6d:e4:20:fd:82:c9:
b2:ee:83:a8:2f:0e:76:2d:de:36:d4:a6:e2:7c:a0:
7c:d0:b4:34:ea:b5:af:1d:d6:74:b9:24:6b:bc:a0:
c5:97:ae:b5:9e:29:8c:33:f3:81:5c:65:ac:22:ff:
be:3a:4d:b6:a5:3d:06:f3:3e:10:b1:f9:3a:87:e5:
b9:2c:36:4c:b3:9d:91:ca:0a:63:c3:42:89:62:f6:
2e:79:c9:5d:cf:6f:db:53:8a:64:13:65:11:c0:bf:
65:1a:3a:e4:57:2b:2a:b1:93:f1:30:42:c4:b7:20:
4d:50:9c:06:59:50:7b:d4:8e:0b:9e:ba:6c:a8:eb:
98:1a:0f:19:21:11:00:d9:3c:91:51:9e:67:46:06:
93:ed:26:d3:ee:3e:79:4b:33:28:2d:d4:d9:fb:c3:
10:22:f4:df:36:3c:2c:0c:cb:1f:01:05:db:2e:d7:
4c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:BB:33:78:46:FA:02:C3:74:DD:4F:EF:71:F2:C7:5D:B4:20:CE:C9
X509v3 Authority Key Identifier:
keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/G7szeEb6AsN03U_vcfLHXbQgzsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.252.197.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:85:e2:5d:d5:ba:84:ec:9d:d2:77:df:10:5d:7d:60:c1:bf:
42:b6:d4:8c:30:d8:96:53:5e:dd:91:75:43:86:b4:1f:18:36:
fb:44:82:fe:26:cb:6e:c6:8c:b1:c8:c2:78:e0:b4:ed:11:5f:
af:ca:b9:b4:84:1a:f2:62:7b:32:22:42:43:91:e1:1c:20:8c:
72:74:de:6a:de:73:30:b8:35:95:94:53:10:5d:3b:aa:fe:7a:
5a:5c:33:58:fd:a5:04:01:e1:e2:b8:fd:68:dd:b9:18:dc:38:
8c:a1:45:98:fa:08:7d:ed:75:ca:16:28:f9:3b:b0:96:fc:06:
3d:e1:55:52:2e:cd:5c:23:3b:9d:34:51:4e:96:18:cb:22:4c:
6e:b8:b6:82:98:6b:08:a4:87:d2:51:44:f9:23:62:ff:67:42:
30:eb:fe:b3:01:27:5a:19:f9:8a:4c:ba:81:26:fd:97:fb:84:
7e:81:01:4b:45:cf:1b:ff:d6:88:82:dc:ce:94:9b:b3:df:cd:
38:09:84:b5:2f:4d:97:cf:2c:b8:6f:ef:82:f4:dc:6e:2d:cf:
38:e9:a1:11:d4:15:24:00:c8:b9:da:6c:e4:de:ae:2e:18:7f:
9e:c5:a6:71:b6:18:6c:37:00:92:fe:85:3c:e6:05:fb:ac:b9:
3a:1f:dc:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:44 2025 by rpki-client