Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/d9Sxlzqu8sTjw_Ho2Uj2OvN-9gY.roa
File: d9Sxlzqu8sTjw_Ho2Uj2OvN-9gY.roa (raw, json)
Hash identifier: X4dVcRjmA+lZQYud+Gtis8rZjkyJn5GFh+hwXsjairk=
Subject key identifier: 77:D4:B1:97:3A:AE:F2:C4:E3:C3:F1:E8:D9:48:F6:3A:F3:7E:F6:06
Certificate issuer: /CN=5dc67c6be367ab9e941d1427d050449447b8865c
Certificate serial: 06D07194
Authority key identifier: 5D:C6:7C:6B:E3:67:AB:9E:94:1D:14:27:D0:50:44:94:47:B8:86:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/d9Sxlzqu8sTjw_Ho2Uj2OvN-9gY.roa
Signing time: Sat 01 Jan 2022 04:53:38 +0000
ROA not before: Sat 01 Jan 2022 04:53:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 193.218.204.0/24 maxlen: 24
193.218.222.0/24 maxlen: 24
193.219.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114323860 (0x6d07194)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc67c6be367ab9e941d1427d050449447b8865c
Validity
Not Before: Jan 1 04:53:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=77d4b1973aaef2c4e3c3f1e8d948f63af37ef606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a1:8f:54:1d:76:cd:29:c7:af:f6:94:87:46:
0c:4d:2a:ac:b3:9f:b6:d9:bc:2f:df:35:8f:97:ff:
8e:3b:cf:d5:cf:41:d9:79:a8:03:d0:8a:3b:e2:39:
1a:ff:c3:af:75:3a:9d:33:45:91:33:02:9d:da:45:
44:ff:29:88:bc:e3:0a:70:e7:32:af:89:f7:2c:7a:
ca:5f:81:ec:98:27:78:cc:3c:88:5c:0a:9c:52:66:
f8:d6:f1:e1:71:85:6c:c3:8a:7e:f6:d8:e2:d3:de:
95:a0:bc:46:2f:84:fa:2d:b8:38:bd:ff:1b:11:68:
e6:32:97:b4:53:57:3a:08:c6:f2:e5:8e:8e:74:3f:
51:15:c9:6f:11:46:68:7e:b9:af:86:41:ff:20:2b:
fa:a3:1c:d3:b7:58:fe:3c:41:64:80:fe:04:9e:dd:
b3:87:71:2b:8d:d6:11:5f:d1:a4:c2:2a:87:a2:da:
45:ee:f7:a4:4f:b8:58:07:e0:a0:2b:28:ab:72:3e:
a1:64:d3:3c:42:71:7c:52:29:1a:15:8b:d6:1f:0d:
36:0f:ac:27:01:8d:df:2f:cd:a8:39:78:c6:5a:97:
81:0e:2b:c4:af:52:0b:9e:3f:7e:a8:5f:6c:6d:1f:
30:1b:1d:94:37:86:96:7f:1d:64:55:29:08:95:56:
df:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D4:B1:97:3A:AE:F2:C4:E3:C3:F1:E8:D9:48:F6:3A:F3:7E:F6:06
X509v3 Authority Key Identifier:
keyid:5D:C6:7C:6B:E3:67:AB:9E:94:1D:14:27:D0:50:44:94:47:B8:86:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/d9Sxlzqu8sTjw_Ho2Uj2OvN-9gY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.218.204.0/24
193.218.222.0/24
193.219.0.0/24
Signature Algorithm: sha256WithRSAEncryption
45:b0:45:45:e0:c2:09:a0:d0:1d:50:97:03:87:f4:ba:ce:00:
8f:c9:60:40:67:94:d6:0e:cd:2e:f1:de:80:3b:26:35:34:be:
81:18:1a:82:18:3e:52:43:2a:f5:44:eb:11:75:58:26:52:30:
ca:a8:fd:5c:ef:80:fc:1b:35:54:26:bc:78:9f:d9:5e:57:52:
41:2a:9b:46:4b:44:98:36:87:80:32:ba:1d:e9:21:87:df:8a:
c4:35:20:65:b8:22:84:99:58:9a:04:5d:d0:45:25:60:b1:23:
03:3d:b7:cb:c1:20:02:74:c1:0e:34:51:17:ee:06:10:c2:10:
05:af:a7:eb:e4:62:7e:ef:da:06:c8:59:bb:86:49:39:2a:04:
29:66:fc:eb:b3:e6:0d:8c:f7:d0:fd:16:a2:47:c7:37:9c:23:
a2:33:49:1b:a4:23:40:ac:c1:84:70:f2:d3:44:a3:93:b2:95:
bd:7c:48:3a:90:b7:e1:24:a3:15:d3:cc:f9:a4:e3:65:87:46:
e5:3f:a2:ba:c9:28:17:34:c1:4b:79:fe:82:c9:3d:e3:c0:13:
0d:ad:2f:68:7c:86:a3:0c:d1:e2:01:88:d2:ab:4b:43:b2:52:
60:92:e4:82:1d:d1:e1:59:ff:43:19:fe:7c:8d:4b:ea:18:3b:
6d:3f:91:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:41:27 2025 by rpki-client