Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/tOLd6RJ84N-M1-gvEhCbRv8QrIQ.roa
File: tOLd6RJ84N-M1-gvEhCbRv8QrIQ.roa (raw, json)
Hash identifier: 2/YTDgLpS/0ayZOgxiSlCOtx2OjHI7R0FZQcHtn+O6k=
Subject key identifier: B4:E2:DD:E9:12:7C:E0:DF:8C:D7:E8:2F:12:10:9B:46:FF:10:AC:84
Certificate issuer: /CN=79730b9ea010d832f940efb589c51889132f4c94
Certificate serial: 01856EEFFF637909C3FBB85D1732C1438307
Authority key identifier: 79:73:0B:9E:A0:10:D8:32:F9:40:EF:B5:89:C5:18:89:13:2F:4C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/tOLd6RJ84N-M1-gvEhCbRv8QrIQ.roa
Signing time: Sun 01 Jan 2023 20:05:00 +0000
ROA not before: Sun 01 Jan 2023 20:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41955
IP address blocks: 194.26.188.0/22 maxlen: 24
185.199.216.0/22 maxlen: 24
2a0a:a3c0::/32 maxlen: 32
2a0a:a3c0::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:ef:ff:63:79:09:c3:fb:b8:5d:17:32:c1:43:83:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79730b9ea010d832f940efb589c51889132f4c94
Validity
Not Before: Jan 1 20:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b4e2dde9127ce0df8cd7e82f12109b46ff10ac84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:97:e3:bb:c9:ac:03:fb:0c:eb:9e:01:19:8d:
26:c8:26:3d:f1:a1:ce:45:80:c7:b6:83:8a:98:58:
b8:b6:00:99:6a:8d:dc:6a:e3:e2:a0:0c:96:2d:c0:
a6:96:0f:0a:8e:9f:64:53:ef:61:1e:50:4a:a1:22:
8c:b5:44:7e:f6:e9:f6:0d:8a:6d:59:88:4b:d4:43:
d7:06:13:c3:b7:48:9c:89:86:4d:87:50:a9:f2:cb:
1e:73:01:f2:e4:4c:46:9f:7f:a6:64:25:20:c2:9b:
91:68:3b:be:2b:69:af:da:b2:76:b6:7a:a1:bc:e8:
cf:da:a2:3e:53:32:cf:fb:d4:df:3a:bd:ae:b3:d8:
16:c8:8b:61:65:4a:c1:2c:4b:e1:3e:15:16:2d:b5:
37:8d:c5:47:31:4e:a1:7c:26:83:c9:30:c6:5b:03:
a4:af:ac:dc:8d:cf:f4:2d:1e:1d:ea:d8:14:5a:1e:
df:02:cd:17:e6:b1:7e:0d:dd:f6:a3:55:c1:22:df:
f9:70:1b:d3:94:a1:d4:4a:79:e4:c7:44:ab:e4:88:
f5:f7:47:9e:d3:b1:41:a2:34:3f:1d:cc:ae:d1:0d:
18:12:8b:da:82:51:ad:9f:32:f5:3b:69:48:d0:af:
7e:7a:05:04:d5:25:e3:fd:98:2a:2d:8c:f5:37:50:
df:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E2:DD:E9:12:7C:E0:DF:8C:D7:E8:2F:12:10:9B:46:FF:10:AC:84
X509v3 Authority Key Identifier:
keyid:79:73:0B:9E:A0:10:D8:32:F9:40:EF:B5:89:C5:18:89:13:2F:4C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/tOLd6RJ84N-M1-gvEhCbRv8QrIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.216.0/22
194.26.188.0/22
IPv6:
2a0a:a3c0::/32
Signature Algorithm: sha256WithRSAEncryption
49:ee:1e:89:97:45:97:c7:9c:5b:19:19:1f:af:9a:00:3c:5d:
6e:ef:49:84:77:c0:06:e0:4f:ed:87:c6:f3:b6:0f:27:84:cc:
22:05:dd:9d:a0:24:02:07:74:f0:6b:78:8e:9c:75:38:f4:3b:
6a:ad:e0:92:dd:f7:25:34:34:35:fe:ea:35:d6:c5:e9:41:5a:
45:9f:7d:8f:f5:21:96:de:54:55:ab:f1:af:f9:2b:61:17:5c:
a3:ad:30:57:ad:1a:2c:18:c1:a7:d1:58:e9:72:01:aa:02:5d:
0c:19:30:d6:55:d7:84:72:a0:49:70:25:85:ce:80:63:17:ad:
6d:19:bd:d4:ef:c0:75:a7:55:ea:f6:84:4e:e0:e1:3f:61:49:
07:c1:d4:c1:02:e6:01:b4:52:fa:2a:1d:1d:81:f4:a5:06:94:
8a:dc:1f:e6:e6:39:0d:8d:74:25:3a:78:53:b5:1e:21:89:db:
69:9f:be:6a:3d:f3:ee:39:17:d5:51:1b:36:e9:45:36:08:1a:
6f:1f:ca:20:2e:21:a2:9d:14:1d:0e:f8:c0:09:27:d5:29:da:
77:6e:a2:cc:d2:72:57:0c:c6:96:9c:43:44:52:ec:7b:23:89:
98:2c:72:e1:f6:be:fd:4f:69:ca:82:bd:09:2f:56:95:dd:3b:
a8:32:2f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:45 2025 by rpki-client