Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/H-90pT7aNFMlY5nLjdfjIGGgAeI.roa
File: H-90pT7aNFMlY5nLjdfjIGGgAeI.roa (raw, json)
Hash identifier: uJWJ+hTMhfE3h1QoNzTaPKzurdji8va+oRXEKQjMJE0=
Subject key identifier: 1F:EF:74:A5:3E:DA:34:53:25:63:99:CB:8D:D7:E3:20:61:A0:01:E2
Certificate issuer: /CN=34e83f41e5d24254c90a86e3b2bb7a80af039721
Certificate serial: 018571D7DF97504D43760331B7B856F70381
Authority key identifier: 34:E8:3F:41:E5:D2:42:54:C9:0A:86:E3:B2:BB:7A:80:AF:03:97:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOg_QeXSQlTJCobjsrt6gK8DlyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/H-90pT7aNFMlY5nLjdfjIGGgAeI.roa
Signing time: Mon 02 Jan 2023 09:37:30 +0000
ROA not before: Mon 02 Jan 2023 09:37:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21257
IP address blocks: 194.106.216.0/23 maxlen: 23
193.109.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:df:97:50:4d:43:76:03:31:b7:b8:56:f7:03:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e83f41e5d24254c90a86e3b2bb7a80af039721
Validity
Not Before: Jan 2 09:37:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1fef74a53eda3453256399cb8dd7e32061a001e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f7:93:ba:34:b2:5f:44:9c:cf:5c:3c:4d:7a:
a5:41:6f:5e:d5:58:14:58:5e:5b:0f:a9:c4:af:ef:
fa:d2:77:c4:84:be:56:ad:13:88:95:7c:b0:e9:9e:
8a:e7:6f:f0:a8:09:8f:b8:15:7f:d3:aa:5b:a8:54:
1d:14:af:88:a7:22:5a:64:a1:31:e8:59:a9:24:fb:
46:e9:56:71:c4:a8:2f:6c:b2:9d:88:d4:b3:7b:fa:
6d:ae:f0:ad:0f:70:c2:67:92:b4:04:10:2d:42:7b:
e7:16:f5:73:28:aa:51:06:20:bb:45:30:f7:38:07:
08:63:85:6a:a7:82:66:8d:f3:21:df:cc:5f:5c:04:
64:30:f8:0f:75:5c:bc:48:26:4b:4d:76:3c:50:2c:
c3:e8:b2:d7:93:44:a8:19:45:9c:9b:a4:49:9a:19:
27:f7:48:9f:f6:f2:f1:d3:4e:b0:fd:37:01:49:3e:
b1:8e:f6:37:83:8e:ca:88:71:d0:30:de:26:1e:37:
4f:5c:2f:1b:83:d0:f0:02:41:59:7c:f8:8a:48:ca:
71:7d:cf:c5:21:55:0a:a3:8d:8b:ae:ae:7a:b6:8b:
fd:0b:dc:9f:5e:67:9c:f7:c8:cf:37:21:7a:7b:a6:
a2:83:16:af:36:02:dc:31:ab:74:51:83:3d:ac:b5:
a8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:EF:74:A5:3E:DA:34:53:25:63:99:CB:8D:D7:E3:20:61:A0:01:E2
X509v3 Authority Key Identifier:
keyid:34:E8:3F:41:E5:D2:42:54:C9:0A:86:E3:B2:BB:7A:80:AF:03:97:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOg_QeXSQlTJCobjsrt6gK8DlyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/H-90pT7aNFMlY5nLjdfjIGGgAeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.240.0/24
194.106.216.0/23
Signature Algorithm: sha256WithRSAEncryption
76:0c:4c:17:7f:80:cc:e8:be:a8:16:96:14:7c:a8:8e:b1:c4:
7a:d5:5b:ed:ca:17:9e:7d:0f:af:28:52:84:e0:dd:c8:bb:2e:
d6:d0:fa:53:c4:a1:69:f9:62:15:a6:91:ee:df:52:33:29:43:
67:ac:76:8d:f0:30:30:81:07:b1:b9:8a:3f:0b:c7:ea:c2:19:
56:9d:cc:2d:8a:f2:06:33:85:88:0b:29:c8:f9:3a:37:0a:cc:
43:be:26:a6:5d:3a:c3:2d:5c:e2:8c:5f:42:03:de:1c:f7:88:
f8:55:9a:c8:86:e4:e1:d6:e3:5a:88:77:97:46:2c:54:8e:20:
54:45:86:fb:d0:6e:52:f2:f9:f2:6e:de:aa:9c:40:77:d7:4d:
fe:17:00:17:30:8a:13:76:70:de:89:75:1f:58:e3:e3:1b:ee:
f2:fb:fc:26:5d:fb:8d:06:f0:54:0f:64:9a:60:9e:42:45:4f:
aa:23:b5:6d:2e:15:7d:18:0d:c0:fd:6e:54:25:1d:32:2f:6a:
e1:9b:6b:74:5f:f9:83:66:4f:81:66:b9:d1:4a:2f:13:01:78:
53:2e:3b:09:30:80:49:1a:c8:67:dc:90:50:c3:74:6d:32:91:
a8:99:e1:04:53:a3:52:21:52:27:56:09:1f:25:2a:e5:c9:a3:
d8:2a:9b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:23:04 2025 by rpki-client