Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/LLiB7PYp-QBd40AQF0EkrG1UABo.roa
File: LLiB7PYp-QBd40AQF0EkrG1UABo.roa (raw, json)
Hash identifier: aNKnW53O0QlAh7uDAnJC9MyFugM2KkWIeQJXbeQvBD8=
Subject key identifier: 2C:B8:81:EC:F6:29:F9:00:5D:E3:40:10:17:41:24:AC:6D:54:00:1A
Certificate issuer: /CN=712f9cb3c298b150beb79080376f74bdeac438ac
Certificate serial: 01856B258F874771591584DBB9B37B85AFC9
Authority key identifier: 71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/LLiB7PYp-QBd40AQF0EkrG1UABo.roa
Signing time: Sun 01 Jan 2023 02:25:01 +0000
ROA not before: Sun 01 Jan 2023 02:25:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213110
IP address blocks: 193.169.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:25:8f:87:47:71:59:15:84:db:b9:b3:7b:85:af:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712f9cb3c298b150beb79080376f74bdeac438ac
Validity
Not Before: Jan 1 02:25:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2cb881ecf629f9005de34010174124ac6d54001a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:5f:8d:8f:d7:32:ee:96:c9:bc:68:84:7f:80:
69:a5:27:c4:b0:c5:ef:a9:13:7b:c3:08:36:79:52:
b2:e3:85:ac:ff:6b:c9:ce:52:4b:9b:03:11:81:0b:
76:0a:37:b6:45:0f:d1:bb:04:2a:b5:6c:63:d5:15:
0f:de:8d:28:89:97:ea:af:50:b4:73:a0:78:fe:41:
83:b9:61:6c:26:60:5f:13:70:f9:73:b3:f3:a8:63:
61:56:64:ab:6f:76:21:ee:60:52:37:07:78:3b:41:
ed:33:7d:4a:ef:a5:32:1c:12:4f:10:b3:41:21:41:
05:7e:81:02:b2:e0:1a:f8:c7:13:ae:8d:e4:e9:84:
fe:48:8e:48:22:5f:bc:64:cf:40:65:10:7e:6b:6e:
cc:cc:85:c2:a1:58:48:a1:bc:cd:46:17:6f:f1:cb:
11:cf:c5:ec:e6:8d:e6:ec:59:48:60:4f:e1:f9:d0:
48:0c:27:85:9b:3f:3f:38:b6:2e:45:c7:cc:3c:59:
c9:14:af:1d:30:99:a7:7b:f3:7f:56:7a:fa:2c:ec:
1d:05:5d:80:c1:45:6f:d3:7e:1e:e0:72:1b:34:2b:
cf:4e:6d:75:dc:0e:45:af:39:b0:c7:80:60:37:5b:
93:ab:e1:03:f8:f4:ca:65:2f:71:50:70:93:df:2c:
94:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B8:81:EC:F6:29:F9:00:5D:E3:40:10:17:41:24:AC:6D:54:00:1A
X509v3 Authority Key Identifier:
keyid:71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/LLiB7PYp-QBd40AQF0EkrG1UABo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.46.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:0b:37:d4:92:1f:24:ec:d4:0a:da:3e:f8:c5:4d:0e:2e:9a:
08:b9:86:76:9f:df:e0:8c:7d:26:f1:40:89:76:f0:77:ae:de:
0a:9e:a4:19:85:6f:21:3f:4c:86:fc:de:8c:39:56:91:78:56:
a7:7a:e2:ce:4b:32:49:05:01:2f:5b:a1:6a:ac:7c:06:c5:b4:
3b:c9:5d:b0:4a:1d:99:30:3e:9c:3c:fe:b7:3a:29:bd:6d:93:
ce:b6:8e:7b:84:f6:57:93:6a:6f:52:91:6a:c5:92:fb:ab:99:
9f:96:e5:47:4e:dd:aa:e8:7f:09:c6:f8:40:c7:9d:d5:60:16:
78:94:4f:5e:ee:ec:c0:86:0d:a2:ba:6b:3f:32:fc:74:ac:71:
df:42:64:ed:68:97:98:dc:9e:61:fb:0c:2f:5e:bd:2e:13:3f:
bb:d3:5c:27:fd:ca:ec:3a:01:c4:28:dc:d3:38:0b:27:6b:1c:
b0:c7:46:15:6c:dc:e7:b7:c2:4b:bf:29:82:5b:29:8b:8c:b1:
71:7b:91:6e:7f:cd:de:98:d2:0b:e1:13:40:44:b5:8d:10:83:
79:e0:3d:98:31:45:66:e3:d1:5b:56:73:71:44:cb:c3:95:e9:
d6:76:82:3c:03:1d:a8:99:d9:67:47:af:65:d1:26:58:2e:98:
31:9d:3e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:44 2025 by rpki-client