Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/CNWQIfBb9wj7H9D6C42a8iuVj58.roa
File: CNWQIfBb9wj7H9D6C42a8iuVj58.roa (raw, json)
Hash identifier: kCY+XLQmjOIkCb7QpnypOOTAuo0WyiaO00u5Rizgvzo=
Subject key identifier: 08:D5:90:21:F0:5B:F7:08:FB:1F:D0:FA:0B:8D:9A:F2:2B:95:8F:9F
Certificate issuer: /CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Certificate serial: 0185726B72E684F13A9013854D9145BD2450
Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/CNWQIfBb9wj7H9D6C42a8iuVj58.roa
Signing time: Mon 02 Jan 2023 12:18:42 +0000
ROA not before: Mon 02 Jan 2023 12:18:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201934
IP address blocks: 193.38.252.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:6b:72:e6:84:f1:3a:90:13:85:4d:91:45:bd:24:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Validity
Not Before: Jan 2 12:18:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=08d59021f05bf708fb1fd0fa0b8d9af22b958f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6a:f5:86:c7:22:58:03:21:5a:1b:1b:39:c6:
44:b7:6e:29:76:5a:44:a0:5b:8e:a2:31:52:63:39:
aa:4f:d7:36:fc:0b:84:4a:41:e7:4c:b2:58:d6:e0:
08:50:08:b6:e4:00:48:21:dc:71:9f:76:79:28:05:
9d:7e:f1:e4:f0:f6:82:ec:ee:ba:49:48:3c:f3:f1:
df:e9:b5:f6:75:82:1d:4d:9d:57:d7:e5:55:84:9b:
71:66:7a:9c:d9:28:12:b6:4b:f0:72:9e:a9:21:3f:
f7:3b:4d:bc:00:66:dc:f2:3e:70:ed:38:f9:4f:cc:
31:d4:77:88:39:4b:1a:df:6f:03:c7:5c:0b:29:1f:
ad:8c:04:2d:ce:28:79:28:31:20:53:17:bb:64:66:
ee:3e:e3:ec:44:69:b1:f5:0f:0b:d5:7a:4f:a8:2f:
4c:73:f7:1f:9f:8d:af:f1:98:70:66:4a:f5:f4:9b:
03:3c:4e:43:a4:47:d1:5b:12:dd:92:a9:c1:1d:6b:
af:0c:7b:83:08:03:10:05:0a:95:b5:a4:81:ea:24:
c5:47:da:c5:c5:54:74:2e:24:85:49:30:9a:1f:80:
78:44:8f:9e:72:6c:55:eb:cd:0a:7a:24:96:c1:7b:
be:b7:49:72:ac:cd:38:33:cb:c4:e6:f7:e5:8f:0e:
6e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D5:90:21:F0:5B:F7:08:FB:1F:D0:FA:0B:8D:9A:F2:2B:95:8F:9F
X509v3 Authority Key Identifier:
keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/CNWQIfBb9wj7H9D6C42a8iuVj58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.252.0/24
Signature Algorithm: sha256WithRSAEncryption
72:52:e5:a4:27:d0:39:ce:f3:c7:03:0b:8f:2e:80:66:aa:33:
e9:37:8c:37:73:53:ce:4c:da:f8:d8:75:8d:bc:0a:3a:69:b8:
30:56:1f:cd:35:73:0f:ce:a1:26:d8:d8:ad:31:9e:82:43:c3:
6a:8e:fb:5c:86:96:a4:c9:b4:fe:26:ab:f5:f5:b2:a1:97:b5:
6a:8f:c8:9f:cb:40:ee:23:16:a2:d8:b4:93:e0:3d:54:a1:20:
ab:ec:ae:87:a3:6f:15:a0:de:e1:8f:39:58:64:06:73:f9:be:
b3:c1:72:de:c7:87:16:d4:8a:cc:87:db:5e:25:52:4d:b6:55:
e8:9c:ca:f8:4c:2e:fe:40:17:78:c1:e6:46:48:f3:ec:68:83:
e8:fd:20:38:61:e1:1c:82:8f:a5:51:1e:ef:4d:16:cc:b9:86:
c9:b0:36:e1:00:c5:cf:67:5b:20:66:b4:c5:af:e4:1f:17:f2:
49:4f:6c:02:2e:db:b2:75:0a:9d:ce:5c:a6:e7:50:a7:ec:8f:
b0:74:dc:ef:10:1e:48:28:1c:ce:dd:62:bf:d9:a5:b7:ca:3b:
a6:6d:c4:de:4b:49:2d:cc:7a:a9:8a:72:50:d7:05:f8:da:30:
bf:db:17:d4:7a:1b:2a:a8:39:1f:4c:d5:48:e8:9b:59:05:73:
ff:6d:83:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:57 2025 by rpki-client