Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/92b4d6-b924-4b31-94d7-23616c79ae02/1/7SNuR3qGLQ7QMqm3ge76bEsGj8I.roa
File: 7SNuR3qGLQ7QMqm3ge76bEsGj8I.roa (raw, json)
Hash identifier: SubhXcrgcp1ThLEAFGWwldWTowatkXW8fM2HUtxTmkw=
Subject key identifier: ED:23:6E:47:7A:86:2D:0E:D0:32:A9:B7:81:EE:FA:6C:4B:06:8F:C2
Certificate issuer: /CN=82e472a2b87ff1682d362f0dde418e9311ac0464
Certificate serial: 01856EAFCC143BBF0CDD62A9AED3F3084440
Authority key identifier: 82:E4:72:A2:B8:7F:F1:68:2D:36:2F:0D:DE:41:8E:93:11:AC:04:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guRyorh_8WgtNi8N3kGOkxGsBGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/92b4d6-b924-4b31-94d7-23616c79ae02/1/7SNuR3qGLQ7QMqm3ge76bEsGj8I.roa
Signing time: Sun 01 Jan 2023 18:54:52 +0000
ROA not before: Sun 01 Jan 2023 18:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35588
IP address blocks: 193.169.146.0/23 maxlen: 23
194.213.23.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:cc:14:3b:bf:0c:dd:62:a9:ae:d3:f3:08:44:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e472a2b87ff1682d362f0dde418e9311ac0464
Validity
Not Before: Jan 1 18:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed236e477a862d0ed032a9b781eefa6c4b068fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c7:45:75:ee:bc:ec:67:8e:ba:2e:f7:e7:73:
f3:42:5f:46:e6:e9:fb:0b:58:94:e2:7d:5b:f5:4a:
79:77:d7:8e:a8:74:8e:2a:28:6e:7c:c6:e8:7f:dd:
ca:08:dd:1d:38:64:2f:04:56:42:42:f3:e4:53:77:
63:d1:8e:80:df:61:68:92:62:ea:66:c1:09:f2:80:
70:61:e3:30:12:ea:20:5a:83:71:13:7e:6a:26:84:
dc:6d:4a:ee:a9:c6:39:04:3a:4f:f3:7b:01:d7:b9:
f5:b9:33:0d:e0:0c:4e:4f:a1:b0:66:0f:79:5d:68:
0a:2d:ab:b5:03:e8:e3:21:6d:3f:05:24:b0:f6:25:
b6:62:52:41:42:ff:c0:cf:29:b0:86:0c:c2:d3:a0:
08:66:56:98:ef:4c:5e:93:e1:18:e2:d4:73:99:2f:
81:8d:f6:cc:50:dc:c8:0b:0a:0b:01:1e:0c:16:53:
8a:c0:12:71:4c:3b:0b:a7:1d:4e:e8:85:ec:3f:f4:
5d:d4:1b:26:0d:66:a2:07:ec:c3:4f:1d:d0:7b:e4:
64:5d:e2:9d:25:c7:ee:8a:a0:f2:8b:7a:7c:f5:cb:
51:a5:c7:2c:ed:49:c7:88:13:a1:ea:0f:33:e6:8a:
dc:24:8e:ca:78:6e:36:98:65:e7:04:02:ac:79:28:
64:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:23:6E:47:7A:86:2D:0E:D0:32:A9:B7:81:EE:FA:6C:4B:06:8F:C2
X509v3 Authority Key Identifier:
keyid:82:E4:72:A2:B8:7F:F1:68:2D:36:2F:0D:DE:41:8E:93:11:AC:04:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guRyorh_8WgtNi8N3kGOkxGsBGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/92b4d6-b924-4b31-94d7-23616c79ae02/1/7SNuR3qGLQ7QMqm3ge76bEsGj8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/92b4d6-b924-4b31-94d7-23616c79ae02/1/guRyorh_8WgtNi8N3kGOkxGsBGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.146.0/23
194.213.23.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:31:81:15:8f:3f:ed:a3:3e:32:c0:e1:b7:c1:ee:9f:e1:49:
e0:04:31:2b:ca:77:73:89:09:04:54:3b:0b:ee:da:df:27:5c:
b4:64:e2:2f:8a:f2:b1:e5:f0:6e:97:cc:34:59:9b:a8:14:ad:
2b:da:29:b2:66:32:6e:2b:ab:67:48:b2:18:f4:61:01:5c:e7:
08:f3:f1:80:09:f8:f7:d5:5c:05:5b:d2:af:32:c7:f8:d5:5b:
b3:52:af:48:c4:bd:9d:ac:7f:a6:4f:37:3d:4a:70:81:ad:40:
b2:55:c9:ca:3a:b9:a3:46:7f:68:90:61:4a:3e:d9:01:d7:de:
a5:89:d7:72:0c:82:25:e5:4a:21:48:7a:aa:7d:0d:e8:47:5e:
8f:65:39:1f:ad:d6:14:0a:92:44:8f:b6:45:4b:3c:f5:58:a6:
1c:ca:e7:56:c7:51:74:ff:af:9e:e6:4d:5d:5a:ff:06:26:6b:
75:c7:14:c4:5c:96:ae:f6:63:48:cf:5d:bd:3a:09:eb:5d:8a:
0e:55:0a:58:42:86:65:78:b4:f9:c9:73:a6:1c:72:82:ff:07:
f8:af:ba:1f:65:1a:30:d0:4b:b5:b2:a4:25:e2:d1:48:6d:1d:
2b:d6:14:06:4e:a2:39:27:6c:61:b3:bd:a3:d6:da:0a:59:74:
c1:b9:2d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:59 2025 by rpki-client