Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/pEAdyvroZ0Aj8V_ngE49tnYfjHQ.roa
File: pEAdyvroZ0Aj8V_ngE49tnYfjHQ.roa (raw, json)
Hash identifier: H3BM05aByTEmzt/jPI0r55ROYjpmBguEiuS15SwCwAA=
Subject key identifier: A4:40:1D:CA:FA:E8:67:40:23:F1:5F:E7:80:4E:3D:B6:76:1F:8C:74
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 018B8A2E0E90D22F3FFDCE03EC6B9FDC206D
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/pEAdyvroZ0Aj8V_ngE49tnYfjHQ.roa
Signing time: Wed 01 Nov 2023 09:19:16 +0000
ROA not before: Wed 01 Nov 2023 09:19:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211376
IP address blocks: 188.93.138.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8a:2e:0e:90:d2:2f:3f:fd:ce:03:ec:6b:9f:dc:20:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Nov 1 09:19:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4401dcafae8674023f15fe7804e3db6761f8c74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:fb:09:96:1f:44:b1:30:b8:c3:8a:aa:ee:23:
96:22:e2:6d:7a:4f:4c:86:98:50:f2:fb:6e:b9:a4:
06:99:af:ff:5e:4d:cf:ef:64:0d:bf:57:1b:7a:4f:
af:8b:d1:f0:c4:b7:40:f4:dd:65:ad:b4:33:64:9b:
dd:b7:4d:87:40:94:1d:0f:2d:a8:7d:07:89:51:9f:
a4:d0:c1:d1:ca:c2:3a:f8:4c:32:5c:4e:2b:0d:6c:
81:9f:e6:ec:40:dc:1a:42:df:5d:aa:8b:61:4f:92:
27:fb:e0:05:57:cc:2e:37:6e:e9:10:85:27:50:15:
16:d2:aa:fe:db:dc:d2:25:ee:9a:4f:ff:8e:94:c3:
d5:1a:02:2f:ae:12:cf:7f:dc:56:a8:95:fe:02:aa:
21:2b:0b:c7:94:32:1e:e8:63:6b:61:13:7a:fb:82:
4b:02:9c:38:b8:d6:2d:da:16:83:d5:4f:64:a4:c3:
5d:77:90:46:ff:11:fb:fc:89:bf:33:0b:aa:af:a3:
11:2e:01:cb:46:f6:dd:34:de:df:f2:b1:03:92:5a:
c3:62:00:96:02:14:4d:94:5b:11:f7:a2:bd:38:f9:
c4:89:0c:1b:7a:ca:04:83:ec:ee:c9:71:2c:ec:bf:
d0:44:1a:25:e8:ed:d9:5b:09:db:85:94:99:f7:17:
47:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:40:1D:CA:FA:E8:67:40:23:F1:5F:E7:80:4E:3D:B6:76:1F:8C:74
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/pEAdyvroZ0Aj8V_ngE49tnYfjHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.93.138.0/24
Signature Algorithm: sha256WithRSAEncryption
37:3a:ef:60:dc:c8:eb:0c:e1:d4:b6:ad:eb:68:ee:9d:b1:22:
b9:47:4f:ba:75:e7:c7:9b:4e:e0:e7:1e:77:97:d3:77:90:2c:
c9:b2:61:b2:2b:17:4b:56:39:b6:ca:0e:71:a0:2f:17:62:82:
7b:9f:17:9f:5e:d1:db:c4:95:7d:b6:18:7b:b1:e5:5a:de:c6:
92:d1:ef:0a:12:58:60:5d:5c:a1:96:c4:3b:88:fe:8a:10:7c:
6d:3d:b9:cf:bc:84:52:59:5e:fc:44:ec:63:37:00:f3:72:7e:
2a:b8:35:75:97:cd:cd:c9:24:d5:9a:fa:80:18:38:fc:21:2e:
44:56:5f:88:04:eb:93:4b:0e:5a:48:3c:ff:93:ba:7b:86:43:
da:64:a8:cb:8b:58:84:fa:51:25:0a:dd:83:ea:d5:5c:10:61:
f7:4e:be:3e:fb:5c:ff:e8:eb:db:72:1c:95:71:4c:94:b6:f0:
01:be:a3:bf:94:78:22:c2:22:a3:a8:16:23:63:e5:80:f3:c4:
da:2e:d9:eb:a7:2f:89:e1:a2:95:ce:06:0e:35:28:ea:92:c6:
34:31:bb:13:f0:a6:58:94:c1:c2:8d:95:96:c4:94:aa:4c:4b:
29:61:37:58:45:09:c6:b5:05:be:ab:a3:ee:96:9a:9b:45:58:
8d:08:9d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:57 2025 by rpki-client