Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/lxNAryMjyeKgEHcak5xofSVL0U0.roa
File: lxNAryMjyeKgEHcak5xofSVL0U0.roa (raw, json)
Hash identifier: 06xUIJLePQFAY9k0vKCb0Na552zFr24Qb0lz88cevik=
Subject key identifier: 97:13:40:AF:23:23:C9:E2:A0:10:77:1A:93:9C:68:7D:25:4B:D1:4D
Certificate issuer: /CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d
Certificate serial: 018BF2675C4F0E6C898566E831532F7F8973
Authority key identifier: 24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/lxNAryMjyeKgEHcak5xofSVL0U0.roa
Signing time: Tue 21 Nov 2023 15:02:21 +0000
ROA not before: Tue 21 Nov 2023 15:02:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207349
IP address blocks: 193.188.193.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f2:67:5c:4f:0e:6c:89:85:66:e8:31:53:2f:7f:89:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d
Validity
Not Before: Nov 21 15:02:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=971340af2323c9e2a010771a939c687d254bd14d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1e:63:d8:ee:50:41:b4:64:88:fa:6f:b2:fe:
cd:8f:ff:ca:b8:17:b7:98:e2:18:72:04:e6:aa:1b:
33:cf:93:5e:52:c6:cf:26:64:c1:60:8a:9f:2e:1c:
08:1f:ad:53:ec:ca:10:a5:23:f5:69:87:1c:68:7c:
70:36:4b:3d:87:d0:2f:a3:7e:70:93:8b:54:f3:a1:
6d:15:8c:75:dc:b2:85:6e:e1:cb:b4:db:ac:03:10:
3d:38:3d:6e:4c:1e:4e:01:d6:94:8f:89:95:a8:c5:
6a:35:41:3c:b8:ae:04:53:e7:a4:c3:ca:86:bb:99:
16:06:30:95:e4:18:b4:04:c1:ef:4b:bd:d2:d1:78:
3a:38:60:fe:63:3a:7f:02:b3:9c:31:ed:ef:a5:f8:
d4:90:a8:b6:24:18:13:1d:f4:f1:3e:12:5f:00:09:
0c:39:34:e6:20:a7:d4:f7:b7:f4:3a:20:75:48:e4:
29:88:c8:0b:fa:75:dd:91:3f:41:22:08:e1:db:e4:
e6:41:d5:d5:0f:f9:af:3d:09:28:5c:d7:1c:e9:aa:
ed:63:b6:a2:0d:22:e8:87:d3:e8:27:3e:58:6f:80:
dc:d7:2a:0b:ed:70:8c:64:98:b4:a3:9e:a1:6a:c4:
ec:57:2f:2d:f1:25:21:d5:a6:29:2a:6c:7f:a8:1c:
47:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:13:40:AF:23:23:C9:E2:A0:10:77:1A:93:9C:68:7D:25:4B:D1:4D
X509v3 Authority Key Identifier:
keyid:24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/lxNAryMjyeKgEHcak5xofSVL0U0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.188.193.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:fa:54:4e:f3:92:c3:32:c0:60:45:f2:de:27:78:12:36:5e:
a2:de:19:ec:8e:22:d8:35:39:37:18:ae:12:e6:df:6b:44:68:
b7:00:e4:67:26:7c:78:4e:29:7a:da:16:72:57:fe:3a:29:b6:
4c:aa:38:c9:7b:7c:ba:2a:5c:c5:20:67:55:77:e8:a7:56:1a:
03:7e:78:ce:c6:41:79:5b:ac:cd:61:b4:47:c6:44:ac:c1:ab:
65:e4:af:07:63:06:7e:0e:05:a9:59:b3:f1:69:58:7e:c1:2d:
42:58:c1:77:7d:17:7c:73:66:51:c4:7d:be:6a:f4:fb:4f:a7:
d0:d9:d0:c3:f8:03:b3:f9:78:74:e6:42:b5:bd:65:aa:47:39:
6d:00:34:43:97:68:09:99:52:51:14:9c:cb:f1:dc:23:1f:92:
9b:0b:1b:92:0e:58:a3:ea:0c:f9:27:63:f4:e5:db:78:09:8a:
54:ee:67:d7:27:9e:a4:e2:6f:d0:9e:e0:71:64:e8:27:de:2d:
34:06:2a:b8:60:90:7c:f0:80:ed:64:fc:00:60:80:5e:5c:46:
eb:a5:48:93:b0:df:21:b7:58:64:ad:fc:9a:3e:05:9f:a1:80:
ae:84:95:54:62:37:ea:24:ad:26:a0:ce:a4:3b:f8:31:cb:61:
85:91:e0:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:39 2025 by rpki-client