Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/7ceJL1nzkR5vdE-nIvNUxn6vB-Y.roa
File: 7ceJL1nzkR5vdE-nIvNUxn6vB-Y.roa (raw, json)
Hash identifier: CPZbDtVVbjpXo9aqRbdhsXrKb3Rao48JqL2woJcfMX0=
Subject key identifier: ED:C7:89:2F:59:F3:91:1E:6F:74:4F:A7:22:F3:54:C6:7E:AF:07:E6
Certificate issuer: /CN=3a0429b5aecac8364544bf623f94f163afdce561
Certificate serial: 0188B9FCF7291C07816E65BB21B87FFA1DEA
Authority key identifier: 3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/7ceJL1nzkR5vdE-nIvNUxn6vB-Y.roa
Signing time: Wed 14 Jun 2023 12:59:03 +0000
ROA not before: Wed 14 Jun 2023 12:59:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 146.0.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b9:fc:f7:29:1c:07:81:6e:65:bb:21:b8:7f:fa:1d:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0429b5aecac8364544bf623f94f163afdce561
Validity
Not Before: Jun 14 12:59:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=edc7892f59f3911e6f744fa722f354c67eaf07e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:73:4a:7f:b7:07:49:95:4f:ff:d5:63:0c:ab:
83:73:5f:4f:69:60:5f:dd:00:35:51:f4:a5:d8:68:
f9:1b:ed:ea:8d:57:08:e9:fc:de:12:b3:1d:d9:70:
ba:87:ef:76:39:4d:0a:dc:95:0d:5f:fa:67:3e:75:
ea:88:a0:03:8d:3c:7e:ed:48:90:53:46:12:63:fd:
6d:8e:a3:f2:5d:e5:3f:c1:1d:be:0d:a5:68:25:f3:
16:71:6f:4e:57:a5:22:85:f0:29:98:73:fe:67:e8:
13:a4:f7:e3:2e:18:1a:8d:bd:51:55:2b:4a:28:60:
74:1d:3d:5e:f3:d1:d1:18:9b:34:2c:4a:a1:5a:b9:
13:35:c1:5e:f4:a0:16:a2:5e:ef:ca:eb:98:77:95:
68:e4:12:72:be:fc:bc:f3:b4:5d:58:9f:f2:6c:b6:
8d:2b:7d:54:b6:ad:ab:ca:54:0a:91:f1:bd:13:13:
fd:68:b7:78:bf:1f:55:d8:6b:18:cb:dd:e9:cb:10:
f6:f5:1b:89:81:7f:be:96:55:8b:40:b8:b3:38:30:
e2:9b:8e:57:d5:c4:7a:52:e5:e0:8a:36:34:91:6e:
09:08:a2:b9:c7:76:31:1b:33:ee:17:dc:66:3b:4c:
03:35:72:4b:c8:81:48:78:f7:fa:48:16:d3:ef:44:
0a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C7:89:2F:59:F3:91:1E:6F:74:4F:A7:22:F3:54:C6:7E:AF:07:E6
X509v3 Authority Key Identifier:
keyid:3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/7ceJL1nzkR5vdE-nIvNUxn6vB-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.0.15.0/24
Signature Algorithm: sha256WithRSAEncryption
47:1b:f2:e7:79:26:7e:29:17:a5:54:5c:4e:ca:4c:47:96:93:
d6:6c:0d:50:7c:ac:1d:21:55:a5:13:be:7f:08:ae:19:c3:21:
24:cc:10:ef:f9:fd:76:4a:c1:3b:63:e7:44:09:6e:58:30:12:
6b:54:e3:f3:72:d1:d9:eb:90:dd:e4:fd:a4:de:f9:1c:11:2b:
e3:bb:d9:59:c8:62:ed:3f:e6:c7:3d:b7:9f:5d:ab:b1:37:88:
4e:20:3c:84:14:e0:88:23:cc:8a:5e:89:03:50:9d:df:16:c9:
7e:54:87:32:71:e1:d6:ad:15:53:7d:ad:b7:53:05:c3:77:38:
0a:a3:98:c3:32:ad:a1:62:6e:fb:73:11:dc:bb:b3:54:18:3a:
7c:03:4f:44:11:09:af:66:73:5e:0f:42:e7:aa:33:ed:02:84:
43:31:bc:49:fc:79:c1:82:de:9a:d4:30:72:a4:8c:b9:c7:dc:
e8:28:bd:eb:78:eb:14:14:ae:4a:5e:66:39:a7:1c:3e:3a:53:
6f:4e:60:08:30:6e:87:b6:f7:e0:cd:6b:f9:46:77:7e:8e:d3:
4b:3c:be:16:a9:16:69:a3:7e:2c:ac:bc:37:77:27:f7:60:06:
06:3b:e3:7f:54:d4:64:d0:e8:25:5d:71:f5:90:f8:e4:04:43:
fa:c4:aa:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:18 2025 by rpki-client