Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/3eq7uyLbmMAxYNWTo84tymk21qA.roa
File: 3eq7uyLbmMAxYNWTo84tymk21qA.roa (raw, json)
Hash identifier: hVaEQoWr+vN/HNlL4u1SmzFMwgmCWip9mqppkD8zyUo=
Subject key identifier: DD:EA:BB:BB:22:DB:98:C0:31:60:D5:93:A3:CE:2D:CA:69:36:D6:A0
Certificate issuer: /CN=08af091858bb99651764399c6565df7a0834dbad
Certificate serial: 01879A77041885B4E5F5BD638E933E55E8C6
Authority key identifier: 08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/3eq7uyLbmMAxYNWTo84tymk21qA.roa
Signing time: Wed 19 Apr 2023 17:01:43 +0000
ROA not before: Wed 19 Apr 2023 17:01:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210896
IP address blocks: 185.239.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9a:77:04:18:85:b4:e5:f5:bd:63:8e:93:3e:55:e8:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08af091858bb99651764399c6565df7a0834dbad
Validity
Not Before: Apr 19 17:01:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ddeabbbb22db98c03160d593a3ce2dca6936d6a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:46:dd:7f:c8:be:2c:40:fe:72:ca:f7:8b:b5:
cf:ea:7f:9f:93:8c:83:07:7c:20:c1:e2:a1:b4:51:
71:27:76:70:11:da:4a:76:d5:b5:c3:11:fa:9a:03:
9e:41:89:83:60:bd:20:98:89:42:1b:7f:78:43:a7:
4f:a9:97:4e:1d:df:71:a1:da:4d:43:aa:91:3b:42:
57:32:8f:8e:6b:88:a1:26:b6:04:ee:92:c2:ab:1d:
f3:23:eb:e4:e1:62:99:34:c1:a1:98:e7:74:51:ce:
6d:9d:45:2d:c9:5d:14:89:73:25:5d:a3:ea:79:41:
05:25:f2:c4:86:04:4a:86:1c:ea:8e:3e:6f:7c:19:
cf:df:84:41:56:7b:94:e2:43:6a:20:d3:0d:64:62:
12:3a:de:15:4f:5f:5e:a7:19:6b:f5:42:2b:85:b8:
f6:2b:bf:0d:cb:a3:a1:b0:6c:12:ce:50:aa:cd:7c:
c5:c8:2d:fe:91:a2:f6:bf:b1:44:1d:2c:e2:02:34:
51:ff:61:42:5a:9b:77:ab:87:c1:7a:77:e5:33:b8:
b7:39:f3:68:bf:ef:de:ea:86:ba:66:82:d9:73:b3:
8a:ac:53:4d:24:83:84:39:8e:58:0b:c2:dd:c3:a3:
a8:ce:ed:53:8e:4a:4b:de:f4:0b:69:5d:74:2c:5d:
f2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:EA:BB:BB:22:DB:98:C0:31:60:D5:93:A3:CE:2D:CA:69:36:D6:A0
X509v3 Authority Key Identifier:
keyid:08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/3eq7uyLbmMAxYNWTo84tymk21qA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.24.0/24
Signature Algorithm: sha256WithRSAEncryption
23:38:78:47:14:74:90:b4:c1:99:a8:60:a6:5b:c4:e3:ea:26:
3d:d0:56:09:f6:58:e6:0d:6f:86:78:ec:b3:3f:fd:b3:ed:0d:
db:d9:78:19:00:12:30:de:bc:2f:82:e3:44:12:39:75:ae:46:
a2:5f:10:f8:e4:24:33:d0:61:97:17:f5:30:fa:bc:e3:de:fa:
a6:6d:f2:59:3c:d4:49:54:fa:df:29:61:05:d9:85:b9:a2:43:
52:bb:1b:04:bc:59:5c:c4:21:12:9b:62:d6:0f:8b:be:4c:96:
d9:3e:e0:2c:16:7d:c5:62:a8:c9:cd:c6:d4:7d:e0:ed:d6:9f:
a6:95:06:f7:bd:77:f7:2c:0f:13:c0:68:e2:88:2b:02:2e:ce:
59:25:6d:46:06:22:4b:2d:54:32:b4:9c:53:02:4d:d8:45:8f:
21:df:6c:5f:74:e6:7b:1e:c5:61:a3:c8:48:fc:34:b3:30:5a:
3b:e2:88:67:b7:c7:6b:1d:42:8b:84:18:98:91:15:1d:45:32:
7a:74:b2:7a:28:93:ee:46:cb:13:8e:78:d2:86:15:94:53:49:
8c:f4:1d:a8:43:91:34:59:db:9d:9d:c4:78:2f:d1:94:b7:cf:
46:9d:46:31:b8:f4:4f:01:24:ed:a1:b6:3b:20:c0:7d:83:12:
b9:da:78:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:08:42 2025 by rpki-client