Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/owjKIsebxIqhaGAh904ewGdXuTg.roa
File: owjKIsebxIqhaGAh904ewGdXuTg.roa (raw, json)
Hash identifier: dG6aeFHGxvGBbsJdI0e0p0JQIxbqdqzoLU70OYO+VAY=
Subject key identifier: A3:08:CA:22:C7:9B:C4:8A:A1:68:60:21:F7:4E:1E:C0:67:57:B9:38
Certificate issuer: /CN=07d3c0c115328c3d28c0f5721b00982b2cd4215e
Certificate serial: 01856ED4A853465D967AC938393B8B56D89B
Authority key identifier: 07:D3:C0:C1:15:32:8C:3D:28:C0:F5:72:1B:00:98:2B:2C:D4:21:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/owjKIsebxIqhaGAh904ewGdXuTg.roa
Signing time: Sun 01 Jan 2023 19:35:08 +0000
ROA not before: Sun 01 Jan 2023 19:35:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197763
IP address blocks: 195.22.120.0/24 maxlen: 24
2001:67c:2f00::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:a8:53:46:5d:96:7a:c9:38:39:3b:8b:56:d8:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d3c0c115328c3d28c0f5721b00982b2cd4215e
Validity
Not Before: Jan 1 19:35:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a308ca22c79bc48aa1686021f74e1ec06757b938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:fa:3a:54:66:3b:12:fc:4f:f6:ca:71:af:aa:
ce:b7:bc:f0:e8:53:75:0e:f7:22:5f:ec:1c:35:1f:
5a:88:3d:f0:cc:ca:9f:b9:77:a2:0c:32:bf:bc:e4:
bf:39:32:ac:b7:d9:13:5a:80:48:58:cc:47:ad:bf:
43:16:77:47:14:29:08:00:ea:14:b4:f4:cc:d4:ec:
18:ed:eb:6b:d7:35:75:2e:b4:84:63:d1:5f:9f:d3:
b3:47:24:0f:9c:4c:60:80:93:d7:fb:00:19:cd:5d:
09:36:b7:44:63:b4:d9:b2:27:28:12:31:d5:ae:04:
18:de:e2:25:07:6e:ce:66:07:aa:68:5c:19:24:12:
cb:d3:8d:32:89:e7:bf:71:23:36:cf:5c:20:75:db:
af:f2:34:18:28:53:04:23:6d:7d:b7:df:c5:00:0c:
14:0e:0d:05:6f:bc:32:13:23:57:9f:06:b4:bb:6b:
b2:71:6b:77:6a:e1:3e:79:70:a0:47:c2:b6:b0:f4:
c3:f3:81:c5:68:0e:e7:12:b6:6d:c0:2c:4e:d5:8f:
ea:96:98:2e:ca:5a:24:27:18:e1:7c:b8:f4:c9:3e:
e1:35:5d:e9:71:97:9b:e9:a8:02:e2:9d:18:8f:14:
19:8e:db:08:c0:bd:a5:e8:fb:ce:08:a7:64:ad:2b:
2a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:08:CA:22:C7:9B:C4:8A:A1:68:60:21:F7:4E:1E:C0:67:57:B9:38
X509v3 Authority Key Identifier:
keyid:07:D3:C0:C1:15:32:8C:3D:28:C0:F5:72:1B:00:98:2B:2C:D4:21:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/owjKIsebxIqhaGAh904ewGdXuTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.22.120.0/24
IPv6:
2001:67c:2f00::/48
Signature Algorithm: sha256WithRSAEncryption
60:3d:28:71:30:ad:ce:0e:68:9f:89:a0:d5:ae:6d:40:94:f8:
e2:b7:54:dd:ed:06:2d:af:28:e0:02:ce:e0:99:45:56:39:0a:
b9:cd:96:12:de:c2:d5:48:0c:13:37:dc:86:7d:f8:9b:bf:90:
ea:ef:a0:74:b5:15:c6:67:88:9e:6c:fe:e0:d3:c8:10:8c:ff:
a6:e9:37:af:37:95:b6:f7:81:9e:20:e0:69:e7:47:bb:b0:d5:
3a:c4:8c:6c:3d:d1:98:8c:10:5b:bf:4f:81:f9:e5:27:05:d5:
98:15:07:5b:3b:4e:8d:ca:a5:bb:0e:3d:50:53:28:93:de:b2:
80:ec:e4:fa:38:a8:d9:28:51:7f:a6:66:65:06:70:64:eb:9d:
bd:3b:13:ac:0d:db:b8:e4:c8:5a:06:33:30:48:f0:2c:7b:ba:
70:9d:61:28:f5:da:82:65:23:61:34:83:49:8e:61:3e:1b:28:
26:c0:c1:f7:0e:eb:bb:45:4d:81:fc:b4:c0:ef:b5:a8:39:44:
3e:24:f0:d3:f0:3b:d6:26:35:19:28:94:44:d7:84:0e:93:ab:
16:86:21:ba:92:83:81:69:42:b4:89:18:27:b9:2a:51:7c:b6:
f3:87:79:51:f5:06:4e:87:d4:64:8b:0a:f7:c6:77:1a:59:8a:
c4:a2:9d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:00 2025 by rpki-client