Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/3X4dqqKKg2rFP13Rgp85hHIgvEo.roa
File: 3X4dqqKKg2rFP13Rgp85hHIgvEo.roa (raw, json)
Hash identifier: lca/9Z4NpRSCFpwNpQkBR29CVPjJJAzBv4zh83gXtOI=
Subject key identifier: DD:7E:1D:AA:A2:8A:83:6A:C5:3F:5D:D1:82:9F:39:84:72:20:BC:4A
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018572CC9A98E1E5C9153977C1BEA77FA66C
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/3X4dqqKKg2rFP13Rgp85hHIgvEo.roa
Signing time: Mon 02 Jan 2023 14:04:49 +0000
ROA not before: Mon 02 Jan 2023 14:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200456
IP address blocks: 194.146.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:cc:9a:98:e1:e5:c9:15:39:77:c1:be:a7:7f:a6:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jan 2 14:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd7e1daaa28a836ac53f5dd1829f39847220bc4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7b:f5:7f:da:6d:7b:89:b8:e4:48:9a:16:43:
2c:0e:bc:52:3b:5f:de:dd:50:9e:71:34:f5:be:68:
94:87:5b:4f:75:54:c4:71:3b:c3:94:ce:db:7a:93:
4b:8e:58:0b:a9:f9:15:87:7d:ba:e7:5f:91:cc:2c:
e7:f5:15:57:2c:f6:a3:e7:15:7f:34:ee:dd:73:16:
35:19:e7:15:92:73:44:e6:cf:99:c5:be:f0:9d:db:
9d:56:88:98:8e:91:b9:4c:0a:48:a5:a9:79:1c:50:
a0:7e:a9:ab:aa:8f:cc:6b:9f:70:17:59:c4:5c:87:
ef:b6:58:af:3a:09:ea:e1:d8:58:7d:00:8e:8e:53:
34:91:ce:63:68:fd:a9:27:72:df:9c:ed:09:50:2c:
1d:fe:5a:c1:68:70:10:41:3e:b3:39:fe:7d:c6:a2:
de:18:aa:de:56:5d:2e:fb:ca:8e:50:24:5d:66:5f:
e1:b7:a3:c6:17:19:05:81:a4:1f:ca:a2:85:e9:3c:
24:d5:50:06:90:29:0a:28:1f:61:e8:66:e0:a5:41:
ca:31:b7:da:3a:13:c9:2b:61:08:98:e5:85:3a:f7:
80:83:5f:2d:2e:3e:74:38:59:62:4f:27:84:09:f7:
c2:a4:3b:c6:27:63:84:8c:46:19:8b:74:a1:3a:05:
4b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:7E:1D:AA:A2:8A:83:6A:C5:3F:5D:D1:82:9F:39:84:72:20:BC:4A
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/3X4dqqKKg2rFP13Rgp85hHIgvEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.50.0/24
Signature Algorithm: sha256WithRSAEncryption
00:98:dc:8a:32:79:1f:a7:41:df:2b:1e:4f:df:52:cb:e6:6b:
5c:43:7c:38:33:5d:68:ce:5f:37:3d:3f:7a:a0:75:76:0e:f2:
30:5a:cd:da:ee:9c:2b:af:cc:9e:ec:4a:11:11:20:c5:cd:66:
f2:05:e4:ad:2f:a5:58:6e:db:2e:6d:80:18:b0:34:49:8e:3a:
fd:f8:28:33:ea:48:55:49:25:52:a8:3a:3b:e4:f3:a7:f8:26:
8c:1c:8f:41:60:2a:2e:ba:2b:a4:24:aa:93:eb:cc:c9:dd:99:
05:b2:25:0c:b6:34:b2:97:1f:b5:bb:b9:f4:e4:72:40:30:8a:
77:e9:b4:0a:8e:dd:ba:92:28:ad:61:94:98:bf:c9:c9:d4:93:
37:8b:e4:a0:5e:45:44:ab:9d:fe:cd:e2:07:f0:8a:82:cc:3c:
3b:82:f5:aa:d4:ef:27:2b:54:e6:da:34:9b:47:81:b2:e0:37:
28:5b:27:a7:03:c9:47:61:fa:ba:30:db:bc:ff:5b:54:06:8c:
91:c1:8e:74:d4:65:66:bd:ea:af:c4:37:6d:30:57:0c:ad:a8:
1a:00:d1:cd:3c:c6:df:a7:d0:63:bd:9e:e9:8d:0e:e3:23:3c:
ec:24:a0:0d:36:82:22:fd:8c:ab:65:78:74:02:e7:4b:60:53:
76:34:33:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:46:22 2025 by rpki-client