Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/TrvZkiWsaaIv0hRoyOLiXj5Sako.roa
File: TrvZkiWsaaIv0hRoyOLiXj5Sako.roa (raw, json)
Hash identifier: SkZ317gxm2x1ZFmoerq0RI5QGbT+w7qPPXPvPXyH1rk=
Subject key identifier: 4E:BB:D9:92:25:AC:69:A2:2F:D2:14:68:C8:E2:E2:5E:3E:52:6A:4A
Certificate issuer: /CN=becec531e5c37756b828663f9cc20ad6217713ac
Certificate serial: 01EFDE26
Authority key identifier: BE:CE:C5:31:E5:C3:77:56:B8:28:66:3F:9C:C2:0A:D6:21:77:13:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/TrvZkiWsaaIv0hRoyOLiXj5Sako.roa
Signing time: Fri 20 May 2022 06:25:29 +0000
ROA not before: Fri 20 May 2022 06:25:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33846
IP address blocks: 164.133.230.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32497190 (0x1efde26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=becec531e5c37756b828663f9cc20ad6217713ac
Validity
Not Before: May 20 06:25:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4ebbd99225ac69a22fd21468c8e2e25e3e526a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:91:b9:e0:8c:4e:98:e5:4a:19:ac:45:a4:68:
1a:bb:55:07:ef:04:b8:e3:cf:67:13:8c:28:c3:13:
38:7c:c2:f0:b9:5d:ad:9d:26:32:61:17:5b:68:38:
9d:db:d0:17:f7:c2:8f:d1:6e:f8:59:e3:0f:a4:0e:
52:da:95:7e:3c:0e:00:5b:b8:bd:99:c0:06:cd:67:
56:ec:86:42:0a:9d:c2:6a:d1:03:c3:e6:22:74:3b:
5d:91:d4:da:f0:88:9f:ed:52:5f:be:62:68:32:08:
7c:cb:78:6d:cf:78:a7:d0:df:1c:bf:81:11:b7:5e:
8a:b7:03:dc:07:e8:84:89:0d:6d:f5:ba:1d:8a:df:
b1:38:c0:38:fd:17:a2:18:e8:f5:7b:98:b8:39:74:
ed:50:26:81:a9:77:f0:55:75:ee:d2:6c:47:67:a2:
1c:36:eb:80:17:67:f3:e2:df:64:19:54:39:61:64:
66:a4:26:16:da:7d:b9:8a:a1:ec:e0:d3:a0:9c:02:
b1:90:69:1a:da:6d:92:39:8b:bb:a4:2b:eb:c9:56:
dd:0f:1e:32:1c:34:7b:57:bd:0e:e8:d6:4b:b3:80:
da:07:ca:98:f8:2d:fa:15:3b:34:f9:13:f0:8c:26:
c3:d4:ea:10:83:75:0e:66:56:05:dc:03:d8:d5:41:
72:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:BB:D9:92:25:AC:69:A2:2F:D2:14:68:C8:E2:E2:5E:3E:52:6A:4A
X509v3 Authority Key Identifier:
keyid:BE:CE:C5:31:E5:C3:77:56:B8:28:66:3F:9C:C2:0A:D6:21:77:13:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/TrvZkiWsaaIv0hRoyOLiXj5Sako.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.133.230.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:26:19:31:f8:8b:c7:5b:a8:a6:bf:99:d9:65:99:cb:a6:43:
8e:99:fb:bc:b5:d4:de:d4:94:b5:e2:31:0a:9f:05:cd:28:3d:
07:64:ff:e3:4d:2b:b7:03:76:fb:18:4e:cf:c5:2e:71:0e:5b:
be:62:bd:42:05:15:4c:9c:50:c6:ad:c4:be:2b:f4:48:ab:2e:
09:d8:7f:aa:17:a8:ac:d6:06:52:97:dd:4f:e9:5c:3a:e8:cb:
fa:8e:1c:f5:63:ec:af:ea:c4:1f:2e:0d:3c:1c:6b:2e:b9:12:
1d:89:3c:2e:20:45:5a:a3:47:27:7b:89:a9:b8:8b:47:61:06:
4b:bf:d6:01:1c:d7:54:39:56:0f:8e:d5:38:fe:2e:4d:a4:87:
f3:8b:87:09:ab:56:cc:a6:0e:81:31:42:6a:48:c9:4d:46:af:
0f:bd:af:16:08:bd:25:3b:0b:68:c9:b5:b9:27:20:dd:97:35:
88:17:e1:8d:b4:65:28:a5:33:fa:35:36:47:1d:04:19:39:e6:
9e:4b:64:18:58:af:da:55:f0:b7:52:8a:80:2b:95:93:b2:92:
7f:e0:20:25:94:0d:f8:74:a2:97:be:bc:21:68:6f:ce:06:c9:
50:d5:b8:1e:95:6a:42:67:56:fc:bc:c4:98:ad:2f:60:d9:fa:
1c:3e:c0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:02 2025 by rpki-client