Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/0vRV_e7hZE4dGpsjYDqcPEqBbJw.roa
File: 0vRV_e7hZE4dGpsjYDqcPEqBbJw.roa (raw, json)
Hash identifier: rEp0cRvjDKtk7wbM8LBnGGqpPly8grIQN33cZriJaPA=
Subject key identifier: D2:F4:55:FD:EE:E1:64:4E:1D:1A:9B:23:60:3A:9C:3C:4A:81:6C:9C
Certificate issuer: /CN=33c342c06aacc359d39439ff58defa8ea1875748
Certificate serial: 01856F0B6668FE9ADC7DCBEF14B264107648
Authority key identifier: 33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/0vRV_e7hZE4dGpsjYDqcPEqBbJw.roa
Signing time: Sun 01 Jan 2023 20:34:56 +0000
ROA not before: Sun 01 Jan 2023 20:34:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198350
IP address blocks: 109.236.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:66:68:fe:9a:dc:7d:cb:ef:14:b2:64:10:76:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33c342c06aacc359d39439ff58defa8ea1875748
Validity
Not Before: Jan 1 20:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d2f455fdeee1644e1d1a9b23603a9c3c4a816c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7b:8a:9f:f6:10:34:3a:3e:4f:9b:58:a6:72:
0a:51:5a:b2:2a:c3:43:af:5f:9b:36:5a:d8:03:5c:
c5:a8:8d:22:18:89:eb:29:33:e5:f0:8e:9e:1d:3c:
c0:a0:59:01:5f:37:1f:59:44:af:19:4a:91:81:53:
7b:e9:71:6e:04:eb:d3:ba:1b:ea:a7:3d:c6:5f:be:
ef:d3:f0:b2:09:ea:11:f4:f8:ab:38:6a:5f:29:27:
24:c4:0b:9a:67:34:27:0a:b0:ed:b4:fc:b3:0e:3f:
45:7c:d1:c5:a2:f2:00:a1:3e:e8:0e:e7:8b:44:6a:
72:27:b0:b6:b3:5a:a8:63:1b:2d:6e:46:e3:8e:41:
4e:55:35:81:6d:19:10:d5:93:03:1c:61:d5:b0:50:
34:48:8c:0a:f9:b2:6f:63:87:52:c8:97:36:b7:06:
34:0e:06:d5:a2:05:eb:3f:a8:0a:03:69:80:96:23:
47:9a:02:52:b6:8b:b0:f3:78:1e:e5:2d:31:9a:9b:
e0:7d:3c:b3:49:a5:46:6c:fc:33:07:b9:be:b4:18:
d3:f8:f7:92:35:e0:b3:90:79:10:49:69:ae:9a:ea:
15:99:60:6d:a9:ea:39:78:69:e1:d0:3a:3b:fa:82:
3a:b5:b0:96:ff:42:a1:f4:ca:ab:4e:e9:c3:4c:e4:
7b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F4:55:FD:EE:E1:64:4E:1D:1A:9B:23:60:3A:9C:3C:4A:81:6C:9C
X509v3 Authority Key Identifier:
keyid:33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/0vRV_e7hZE4dGpsjYDqcPEqBbJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.236.247.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:29:e8:67:19:06:76:b3:8b:46:25:d5:94:4f:30:4e:7d:e1:
23:51:bb:48:17:b6:44:6f:b1:e5:a4:f4:0a:5f:d3:3d:e7:c7:
ce:d6:69:e8:7c:6f:24:8d:06:e2:60:8c:4c:4d:08:94:f7:d2:
b5:f7:c4:71:b5:e9:c2:50:6a:fa:82:f7:4e:e7:25:2f:2f:e7:
f6:68:bc:71:20:aa:0e:01:f0:77:51:1e:bf:ab:90:2e:46:f3:
b3:3f:e3:66:0c:ff:83:4a:66:33:16:8d:16:ad:6a:00:03:84:
e3:f1:99:7b:69:09:27:1c:a4:dc:00:41:bf:32:68:37:46:50:
4f:56:4d:bd:cd:26:ed:48:50:a5:bd:6a:60:d0:fe:7c:65:e8:
9c:66:a6:0d:dd:74:7d:65:5b:d2:ae:ce:70:1f:6b:d3:60:61:
6f:92:d1:0a:ac:eb:f7:fc:2a:e2:34:9e:de:7a:21:59:51:14:
9b:42:e2:52:ff:17:8e:32:cf:3b:72:c3:08:bb:2b:67:3b:83:
5c:ce:63:87:df:ab:5d:7f:05:35:06:c3:ff:3b:91:44:31:54:
29:02:f7:c6:8e:cd:df:aa:35:3d:ed:11:2f:98:da:8f:2c:de:
a9:f1:af:c9:0b:17:42:35:4b:08:dd:f8:aa:d7:82:ca:bc:16:
42:8d:4b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:52:01 2025 by rpki-client