Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/PAaIw--4fOt1Xk7F8TjeTFIwyss.roa
File: PAaIw--4fOt1Xk7F8TjeTFIwyss.roa (raw, json)
Hash identifier: 0CR37HmxEIeTtLkenT/IefCRKvvrbaA2Os/0EbqiU3I=
Subject key identifier: 3C:06:88:C3:EF:B8:7C:EB:75:5E:4E:C5:F1:38:DE:4C:52:30:CA:CB
Certificate issuer: /CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1
Certificate serial: 0187FBA15E37A84C479BA3700B56C08556F0
Authority key identifier: C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/PAaIw--4fOt1Xk7F8TjeTFIwyss.roa
Signing time: Mon 08 May 2023 13:51:09 +0000
ROA not before: Mon 08 May 2023 13:51:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2830
IP address blocks: 185.106.226.0/24 maxlen: 24
194.126.130.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:fb:a1:5e:37:a8:4c:47:9b:a3:70:0b:56:c0:85:56:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1
Validity
Not Before: May 8 13:51:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c0688c3efb87ceb755e4ec5f138de4c5230cacb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:bc:fa:56:22:e4:91:90:2e:95:de:73:de:64:
d5:36:82:4a:22:3c:86:43:be:f6:c2:40:ea:92:71:
d6:99:23:b2:b5:e1:5a:b9:0e:90:c3:f2:80:d9:a5:
db:fe:17:d6:67:d4:8f:11:aa:76:88:0a:f1:c5:ac:
98:90:dd:de:21:a2:b0:3f:44:1e:e8:9d:ea:fb:05:
b8:dd:b5:2f:21:f4:6f:89:89:5e:1e:3d:3b:f9:1d:
80:17:40:31:b4:80:a0:91:21:4b:60:27:0e:b0:57:
3a:b1:87:57:53:4a:29:c0:be:0e:62:a3:9a:61:62:
f8:42:38:27:48:e1:d2:52:f5:6c:c7:8e:1a:25:48:
70:55:b5:9a:09:69:ee:6f:90:b7:5c:eb:ff:46:9b:
25:81:c6:a0:30:67:4c:d4:ad:49:0c:d7:02:84:d4:
64:b7:17:23:f9:02:ce:6b:13:ad:0d:de:2f:f9:c7:
14:51:32:36:5d:31:ea:53:8f:82:58:96:ea:d5:f3:
00:7c:54:75:8d:7e:1e:7c:19:cd:99:10:f9:00:02:
fa:42:85:95:cc:4b:54:1c:4d:e8:d1:6b:e8:d8:bf:
d9:bf:9d:92:49:5f:af:ab:6c:5d:ae:47:02:82:b2:
b2:25:2c:54:d0:80:0e:58:39:ef:04:c0:5e:3e:5c:
4d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:06:88:C3:EF:B8:7C:EB:75:5E:4E:C5:F1:38:DE:4C:52:30:CA:CB
X509v3 Authority Key Identifier:
keyid:C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/PAaIw--4fOt1Xk7F8TjeTFIwyss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.106.226.0/24
194.126.130.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:40:61:c7:0c:fa:92:28:0d:e5:ee:4c:b2:b7:da:ca:b9:59:
a3:7a:aa:eb:99:0e:57:8f:ca:ce:f7:64:7d:d9:08:03:35:ca:
c0:63:5f:8d:05:5b:99:72:7e:46:c8:dc:0b:ea:f7:ed:ac:d9:
76:e6:18:59:d4:ad:e2:62:9d:c1:b4:03:b8:29:05:1b:72:5e:
86:f6:3e:eb:60:7b:c9:1c:9f:38:c7:58:aa:09:4f:02:3d:2e:
50:d6:be:c0:b2:c2:52:f4:29:8b:70:f9:47:ea:54:56:90:27:
a3:79:4e:67:88:a4:83:7b:50:cd:1d:40:3f:af:7e:f5:2b:aa:
9d:f6:7f:77:be:cb:bb:1e:3f:bc:63:da:30:a1:9e:4b:fd:71:
55:87:81:da:de:78:f5:52:7c:b0:86:86:d9:5b:68:ba:e5:e4:
3a:b8:36:d8:88:a8:d5:7d:8c:21:97:31:08:95:87:52:29:69:
c2:ac:37:86:ba:74:50:0b:03:a0:8b:ba:c7:84:aa:c5:0e:06:
5a:86:58:d0:df:d2:a8:7d:b8:31:0c:b3:01:3d:21:02:68:14:
20:96:e9:f7:d8:55:3c:1c:26:1f:52:14:c2:fa:00:9d:0d:59:
8f:61:ef:86:f2:fb:d7:6a:d1:63:19:a6:ae:f4:08:8b:d3:34:
77:4d:27:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:37 2025 by rpki-client