Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/keSI97vFY-6Z1LYGBK50sW5MREM.roa
File: keSI97vFY-6Z1LYGBK50sW5MREM.roa (raw, json)
Hash identifier: Owzme60S7ZMyzfK6DJiyQ5MBxWvGs/Jljf1I5ERRjIw=
Subject key identifier: 91:E4:88:F7:BB:C5:63:EE:99:D4:B6:06:04:AE:74:B1:6E:4C:44:43
Certificate issuer: /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial: 018631E099209A642DA4D68848DE407F39E0
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/keSI97vFY-6Z1LYGBK50sW5MREM.roa
Signing time: Wed 08 Feb 2023 16:34:08 +0000
ROA not before: Wed 08 Feb 2023 16:34:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2914
IP address blocks: 193.30.101.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:31:e0:99:20:9a:64:2d:a4:d6:88:48:de:40:7f:39:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Validity
Not Before: Feb 8 16:34:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=91e488f7bbc563ee99d4b60604ae74b16e4c4443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:37:8e:bf:d0:19:2b:2f:79:a1:92:54:b3:bb:
78:cb:fe:86:a4:40:5a:04:a9:c6:44:42:f4:9f:16:
29:35:bf:1d:ff:4b:f5:eb:9a:55:ff:36:1a:f8:51:
22:b2:ec:d9:8a:8d:af:06:e6:94:23:59:d3:db:67:
0c:de:64:81:fe:62:64:47:9a:7f:24:93:3d:f9:62:
87:f9:67:db:64:5b:f3:0f:7e:b2:03:ca:2a:0e:0b:
0a:63:5e:bb:47:00:b2:2f:a2:e5:eb:b3:8b:6f:3b:
0d:2d:58:13:70:2c:83:7c:c9:c5:f6:2d:ed:3c:31:
a5:1c:de:ef:e8:fa:70:8f:23:8b:e3:f2:0f:ea:9a:
73:99:c1:dd:1a:50:91:8d:e9:a0:01:4b:a4:53:64:
8a:8e:2d:75:cf:40:1b:f6:3d:1b:73:35:b9:a2:25:
8d:15:2a:d6:f9:02:da:5b:cb:8d:12:8f:63:56:e9:
a6:43:f6:fa:cb:ff:ac:97:5d:95:84:54:5b:02:2a:
8a:a1:71:e3:46:98:e4:54:34:6f:4c:2b:aa:8b:3a:
97:86:7e:7b:82:86:6e:d5:18:89:8b:3e:2e:84:1f:
b0:1a:a8:b0:92:ed:3d:44:fd:49:8f:0f:ec:6a:fb:
38:84:97:d5:c5:b4:76:ff:0b:05:2d:4e:2c:f8:5e:
07:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E4:88:F7:BB:C5:63:EE:99:D4:B6:06:04:AE:74:B1:6E:4C:44:43
X509v3 Authority Key Identifier:
keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/keSI97vFY-6Z1LYGBK50sW5MREM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.101.0/24
Signature Algorithm: sha256WithRSAEncryption
36:47:c7:f8:c0:9e:a6:bf:44:7a:b3:18:4c:91:53:b6:59:f1:
bf:e7:93:2c:02:da:3a:dd:d0:54:ba:a9:b6:87:52:dd:60:01:
8f:4a:9c:ea:a7:ca:68:5b:5d:7e:6b:a5:2b:23:2c:0f:dd:5d:
50:a9:cb:a2:84:1f:52:dd:6a:e6:91:20:fc:68:00:30:5b:3c:
ac:5c:47:91:8b:2c:a2:b4:88:05:cc:10:20:ec:0c:a4:d9:dd:
e2:8b:90:fe:e3:dc:c6:4a:4e:5e:7e:5d:00:41:9d:6d:b6:0b:
63:88:ca:72:1e:c6:82:a2:0e:3a:06:cb:4b:f4:91:6e:a2:e8:
20:d6:02:70:54:4c:aa:04:cd:2f:3f:d2:ef:60:e0:40:cc:bb:
f0:7b:2d:09:4a:37:f4:ca:a6:4a:6d:38:c2:38:08:5f:14:1d:
e6:b9:cb:54:bf:dc:fa:b0:8e:aa:d7:ed:df:d9:b0:97:dd:bd:
c4:4e:3b:f9:a4:a0:95:9c:22:22:47:14:a2:be:15:11:1d:24:
cc:ef:6d:73:7c:71:39:56:3b:47:4c:b8:d1:aa:1f:4b:74:f0:
4a:17:75:28:16:94:e9:b0:25:2f:8a:98:3c:2e:b9:c8:e9:0d:
e6:83:ad:58:9d:f8:4c:97:25:33:3d:35:e4:50:99:ba:96:fe:
7b:a9:32:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:19:37 2025 by rpki-client