Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/90BB22KhcOSCulm4sn8FTZ2uQCE.roa
File: 90BB22KhcOSCulm4sn8FTZ2uQCE.roa (raw, json)
Hash identifier: L5Oa6W/XUmYuW1IxrcWLD0rKXvb520jymClvyzhZ7KU=
Subject key identifier: F7:40:41:DB:62:A1:70:E4:82:BA:59:B8:B2:7F:05:4D:9D:AE:40:21
Certificate issuer: /CN=f12109487af400a63e3cb011a3d549e751fd2c18
Certificate serial: 01856E265C2A3E3ABC6B1EB82BAE1E60379A
Authority key identifier: F1:21:09:48:7A:F4:00:A6:3E:3C:B0:11:A3:D5:49:E7:51:FD:2C:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/90BB22KhcOSCulm4sn8FTZ2uQCE.roa
Signing time: Sun 01 Jan 2023 16:24:45 +0000
ROA not before: Sun 01 Jan 2023 16:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8414
IP address blocks: 156.106.0.0/16 maxlen: 24
193.5.62.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:26:5c:2a:3e:3a:bc:6b:1e:b8:2b:ae:1e:60:37:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f12109487af400a63e3cb011a3d549e751fd2c18
Validity
Not Before: Jan 1 16:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f74041db62a170e482ba59b8b27f054d9dae4021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:10:07:d0:53:64:3e:71:52:0e:11:11:a5:1c:
d0:28:0f:68:92:70:c1:d3:18:f9:3e:7c:47:79:22:
33:d6:ba:50:58:66:e7:77:d1:ac:49:e1:88:8f:18:
7d:9b:ad:60:c3:7c:ea:4c:62:7f:62:e8:9c:36:47:
5b:9d:93:a6:80:80:69:e2:eb:7c:b7:08:92:3b:e3:
f3:29:c0:8e:ee:8e:78:7d:21:35:e4:c5:db:96:f2:
c6:ce:8b:f3:0c:71:ce:ec:a9:20:9e:d1:43:1a:a0:
c6:07:a2:68:eb:72:3e:ed:1b:ea:4e:78:80:12:65:
da:f9:13:b7:73:01:32:8d:38:b9:43:33:24:7b:11:
0e:e4:8d:4d:85:96:92:c8:9a:52:b2:71:ff:db:53:
11:00:95:bf:7c:ed:1a:85:c7:4d:ef:67:4b:5e:48:
29:e2:28:89:43:99:ad:a9:e0:30:73:d4:26:4f:1a:
b2:7c:53:61:3b:ae:95:37:8b:44:a7:43:e7:5c:63:
8e:ee:da:d2:39:41:45:f3:74:2c:f2:16:f8:93:0e:
9d:20:1a:26:6b:89:f2:93:b1:ce:09:d5:22:09:94:
47:7c:56:9e:1d:c9:57:ff:d4:db:c2:1f:ed:cb:0d:
8b:1f:06:aa:56:b5:1e:af:35:8f:42:19:82:ff:b2:
ff:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:40:41:DB:62:A1:70:E4:82:BA:59:B8:B2:7F:05:4D:9D:AE:40:21
X509v3 Authority Key Identifier:
keyid:F1:21:09:48:7A:F4:00:A6:3E:3C:B0:11:A3:D5:49:E7:51:FD:2C:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/90BB22KhcOSCulm4sn8FTZ2uQCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.106.0.0/16
193.5.62.0/24
Signature Algorithm: sha256WithRSAEncryption
21:cf:70:ef:63:01:85:f4:c0:b6:cc:39:87:da:32:11:74:88:
4b:f6:0d:6b:b5:e3:bf:4d:53:72:cd:cd:2e:3e:1b:f0:9f:68:
d9:a6:05:d0:cd:49:95:d7:78:37:87:89:d8:bd:09:21:2d:dc:
c1:88:97:ac:0d:07:b2:ff:eb:40:f2:32:19:75:84:35:90:72:
63:38:06:15:0e:01:f3:e7:22:fc:1f:e0:c8:a5:1a:09:e0:08:
8d:4f:73:71:8c:06:03:e7:73:a4:eb:7d:c5:a7:f4:22:3d:5f:
04:da:ba:23:7e:d8:90:31:fc:df:6c:b2:24:96:a3:d4:63:d6:
00:59:e7:65:36:5c:c1:0b:ff:77:3b:b9:83:7a:b4:7c:12:57:
73:e0:d7:d5:d4:07:18:8a:6e:1d:c5:9c:37:b4:73:2c:d6:81:
e4:99:2a:fc:ce:11:96:1b:0e:aa:c6:bc:33:0a:8e:0f:07:10:
80:c1:16:33:92:21:ef:28:b7:b8:ca:aa:b9:7e:20:04:48:de:
7d:41:ef:54:f9:57:70:04:92:4b:73:d4:d2:53:e2:f8:4f:5c:
c6:67:2b:29:de:5f:04:be:b4:b8:7e:ad:af:65:98:25:1b:2e:
60:85:cd:9e:ee:45:17:a3:02:d9:6e:eb:cf:22:1d:f9:c8:de:
03:cf:1d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:11 2025 by rpki-client