Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/fm0xoQCgTA7Zgp_sViYdkjufP6E.roa
File: fm0xoQCgTA7Zgp_sViYdkjufP6E.roa (raw, json)
Hash identifier: k3DHzuYPuC/wsZ4ftZ0ZTsccu8aEKMF0fA2ayNW0EBo=
Subject key identifier: 7E:6D:31:A1:00:A0:4C:0E:D9:82:9F:EC:56:26:1D:92:3B:9F:3F:A1
Certificate issuer: /CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d
Certificate serial: 01856C6EEB9B7B32CF6BF2B2F0A189BEC83C
Authority key identifier: 24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/fm0xoQCgTA7Zgp_sViYdkjufP6E.roa
Signing time: Sun 01 Jan 2023 08:24:46 +0000
ROA not before: Sun 01 Jan 2023 08:24:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197889
IP address blocks: 193.188.192.0/24 maxlen: 24
193.188.193.0/24 maxlen: 24
193.188.194.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6e:eb:9b:7b:32:cf:6b:f2:b2:f0:a1:89:be:c8:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d
Validity
Not Before: Jan 1 08:24:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e6d31a100a04c0ed9829fec56261d923b9f3fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f1:00:6f:e6:7d:b7:00:5c:35:50:4d:32:c5:
a5:64:e0:d9:bd:98:59:83:5b:ac:91:6b:49:8b:e9:
b5:88:4b:9b:ef:6e:33:84:61:47:48:8c:02:1d:5d:
d9:c5:07:16:07:f5:ae:fd:9d:0f:6f:0c:80:4b:15:
5e:9a:d8:85:08:8e:70:00:4f:11:59:ce:60:9c:ff:
11:6c:e5:f4:93:2a:35:8e:48:c7:eb:af:36:bd:20:
65:c7:eb:87:12:91:de:29:c9:05:6b:a2:e3:3a:37:
a9:3c:54:8d:f7:1d:c8:0b:c4:e0:a6:08:16:21:85:
37:c0:6b:ce:9d:5a:51:54:73:fe:f4:12:fa:12:4d:
94:b6:5c:16:4e:82:98:96:ac:ae:f7:8b:d5:6f:ca:
99:58:0c:80:91:34:ed:67:ad:f2:e9:47:91:1a:c5:
19:29:c8:36:81:89:7c:50:f4:9b:a1:f8:78:c6:dd:
1b:cc:76:73:28:bf:9f:2f:25:0e:aa:d5:42:f3:2d:
84:0c:10:ff:1b:01:09:e3:b8:18:3c:09:bf:37:59:
71:b2:d0:97:0a:3f:2e:18:3b:75:fe:ef:1f:bb:65:
ca:d6:c6:77:30:77:de:61:00:01:aa:da:87:ca:c3:
3f:71:b1:80:00:7c:9d:72:d8:5c:a6:cf:37:64:85:
14:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:6D:31:A1:00:A0:4C:0E:D9:82:9F:EC:56:26:1D:92:3B:9F:3F:A1
X509v3 Authority Key Identifier:
keyid:24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/fm0xoQCgTA7Zgp_sViYdkjufP6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.188.192.0-193.188.194.255
Signature Algorithm: sha256WithRSAEncryption
67:1b:a2:94:2d:be:f7:d8:9d:36:c0:32:58:20:18:0c:85:16:
9b:8f:f3:9f:fe:60:08:41:78:d7:75:37:88:cb:8d:b1:1c:a2:
7e:49:a1:fc:cc:1d:c1:de:fc:d1:6c:15:fd:0f:ba:0b:62:b6:
5d:ce:c0:94:27:1f:c8:25:8a:54:bb:f1:63:01:46:c7:bc:3a:
6c:fe:d9:61:2d:e3:e3:99:2c:16:2e:78:dd:06:df:5c:20:61:
ac:cf:1e:3a:11:7a:99:d2:6b:38:13:43:12:84:5a:ca:dd:e4:
bc:df:94:4b:5a:7b:b4:c5:aa:0b:11:85:c8:33:35:d0:78:05:
3b:34:b8:1c:cd:29:5b:7a:71:f2:8f:b4:92:57:6d:fd:61:d4:
ba:8b:c0:74:c5:c8:22:46:bc:9b:68:1e:58:5e:e2:1a:08:1c:
cc:8c:f1:79:ff:ef:5b:ff:34:59:b7:b0:60:34:1e:45:b0:20:
8b:6c:d1:fa:be:ab:cd:fd:57:17:83:f2:5f:53:85:5d:47:0b:
84:19:be:80:5b:d4:e3:c4:76:e7:f8:d1:ad:b8:03:bb:4d:df:
d3:61:b5:8a:0e:c7:4f:66:6a:67:60:4d:0b:7e:07:89:ef:59:
6e:03:34:93:8f:e9:a3:a2:68:8d:8d:19:c7:c4:3c:1d:cd:21:
fc:56:bf:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:05 2025 by rpki-client