Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/taa82VXQpfTnJEZRUYjmoRpkMgY.roa
File: taa82VXQpfTnJEZRUYjmoRpkMgY.roa (raw, json)
Hash identifier: iEBlM7BRe51p560ilF7b8VSXOwPU1KbrxLQXbxZ7O1A=
Subject key identifier: B5:A6:BC:D9:55:D0:A5:F4:E7:24:46:51:51:88:E6:A1:1A:64:32:06
Certificate issuer: /CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45
Certificate serial: 01866061572E3A0AFA15AC1589786EF6AD59
Authority key identifier: AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/taa82VXQpfTnJEZRUYjmoRpkMgY.roa
Signing time: Fri 17 Feb 2023 17:17:17 +0000
ROA not before: Fri 17 Feb 2023 17:17:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15924
IP address blocks: 193.31.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:60:61:57:2e:3a:0a:fa:15:ac:15:89:78:6e:f6:ad:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45
Validity
Not Before: Feb 17 17:17:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5a6bcd955d0a5f4e72446515188e6a11a643206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:74:16:37:47:4a:de:3c:3f:74:7e:28:4f:92:
da:ef:4b:70:91:82:85:a2:03:8a:55:6d:ab:ef:d7:
a7:b5:50:70:0e:d8:d9:a9:e1:e8:2b:a8:42:d2:75:
e0:b8:d3:a2:2d:7c:0c:26:07:8f:e2:4e:86:f4:83:
ab:6e:a8:c7:fb:f4:eb:3c:74:6c:53:09:3a:24:9a:
42:20:94:3d:9c:75:72:29:5f:91:53:7f:1c:ed:f8:
3d:0e:65:cc:8d:18:c8:6d:bd:36:e5:de:50:56:4d:
c2:ed:0a:be:b4:47:2f:5c:de:e0:0d:2c:12:12:89:
c5:8f:5b:01:5e:ef:26:c7:51:b8:43:37:a8:2f:b2:
da:82:c2:6b:35:51:46:1c:d7:18:35:ef:67:c2:a1:
06:d7:86:ab:d1:e3:7e:89:70:58:e1:bf:58:65:90:
e4:fc:ae:f0:af:ca:e9:01:93:41:91:2a:dd:2b:cb:
2f:d0:cd:9e:41:64:e5:17:d7:c3:96:f4:68:da:2d:
04:55:da:f6:01:70:9e:d1:a4:7d:e1:1c:5b:9a:1d:
ac:45:8d:1f:34:29:e7:98:18:5d:bd:50:16:0a:58:
77:4f:67:88:3f:b9:55:25:98:ce:f5:28:9e:ad:a0:
7e:b2:11:e9:15:66:dd:40:9c:5f:8e:e3:b7:2f:56:
e5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A6:BC:D9:55:D0:A5:F4:E7:24:46:51:51:88:E6:A1:1A:64:32:06
X509v3 Authority Key Identifier:
keyid:AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/taa82VXQpfTnJEZRUYjmoRpkMgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.31.7.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:b1:f3:4b:2d:8f:5a:02:1b:76:c9:9a:e6:a4:61:b2:2f:5f:
f1:21:7a:06:d6:9e:7c:0e:f8:b5:23:04:3a:5d:fa:1b:86:8b:
51:3e:1b:0d:45:9f:93:52:26:c5:57:a0:e2:c7:82:74:46:b5:
0b:c0:7f:33:f3:53:7e:f3:71:b6:48:9e:99:4f:73:83:79:3d:
1a:60:c0:87:75:87:2c:25:46:e4:e2:90:fe:3b:37:36:3a:4d:
9b:e6:39:e3:d2:71:39:35:4b:71:61:6c:f3:5a:79:b8:f0:2c:
57:a2:7c:83:d5:73:c0:6c:b3:b1:e8:b8:32:bd:f4:a6:5a:e1:
7e:1d:58:59:58:8c:3b:4a:29:3c:b4:75:04:c9:c8:3c:d9:9e:
2f:07:47:88:75:d3:6c:86:b0:58:4c:f2:a1:78:c1:c8:ec:d9:
d5:73:d3:d7:7f:6f:96:00:bf:fe:f6:b0:ca:f6:34:9a:64:22:
f3:80:ba:5e:04:b1:47:2e:66:cc:b0:ae:fd:b1:03:d6:9f:8a:
38:3a:0a:e2:c5:df:6f:8e:64:32:06:88:e3:27:3f:0f:2e:c1:
06:b2:2c:d5:87:ea:f7:fe:45:fe:64:56:89:7a:4c:06:ef:f5:
3f:75:da:cc:08:72:6f:e0:f1:53:8f:70:3c:2a:7e:67:bd:e0:
5d:4b:a2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:34:17 2025 by rpki-client