Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/liKcCLiSHweR-WwuvBxrxanxIzI.roa
File: liKcCLiSHweR-WwuvBxrxanxIzI.roa (raw, json)
Hash identifier: yE7VciE+VUnC4+ipcazEotIQYdXT9E/o4H1UpPlpn8E=
Subject key identifier: 96:22:9C:08:B8:92:1F:07:91:F9:6C:2E:BC:1C:6B:C5:A9:F1:23:32
Certificate issuer: /CN=2bed62935fb48af6e44cba19426efab51f1c5410
Certificate serial: 01856C1C9B06D170B7C7DA3884B208504E11
Authority key identifier: 2B:ED:62:93:5F:B4:8A:F6:E4:4C:BA:19:42:6E:FA:B5:1F:1C:54:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/liKcCLiSHweR-WwuvBxrxanxIzI.roa
Signing time: Sun 01 Jan 2023 06:54:52 +0000
ROA not before: Sun 01 Jan 2023 06:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35010
IP address blocks: 193.202.22.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:9b:06:d1:70:b7:c7:da:38:84:b2:08:50:4e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bed62935fb48af6e44cba19426efab51f1c5410
Validity
Not Before: Jan 1 06:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=96229c08b8921f0791f96c2ebc1c6bc5a9f12332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:33:25:ab:11:10:9d:15:e3:61:8a:77:ed:1c:
0f:c0:4c:52:2a:56:fb:11:aa:8e:c9:29:b2:ef:0e:
70:32:ff:8d:62:10:fc:7b:9d:ca:7f:da:0d:a3:d7:
64:a3:89:02:4f:38:fa:20:05:a5:4c:50:96:78:d0:
8b:bc:5e:8d:d8:20:d0:71:92:81:d6:8c:55:4e:ca:
e7:93:84:9a:35:16:f2:b5:ba:8c:cc:56:bc:bf:e1:
ef:92:3f:6d:89:11:5d:45:34:60:7a:47:49:aa:73:
0f:56:f2:75:ab:5a:cf:b9:be:09:bc:eb:1f:f6:a2:
72:6c:ce:fb:fb:39:87:a4:6c:a3:c7:9e:d3:59:fa:
a4:c8:04:96:fc:10:d7:de:2e:17:fc:8f:f2:68:ad:
e1:25:d3:bf:69:41:67:43:1c:f2:26:f6:a3:51:c4:
b6:d0:46:42:37:85:d6:fc:2a:0f:67:f6:70:c0:b2:
6b:b1:7b:3c:6b:07:96:dc:c7:5e:e7:77:46:51:1f:
bb:e5:63:24:87:6a:41:5a:9e:33:64:a8:97:4e:89:
a4:78:50:e8:8e:50:c7:a6:db:07:eb:c6:46:21:db:
9c:e8:8e:ff:60:09:89:b1:2f:93:74:d9:aa:d1:85:
c4:2c:2a:23:46:04:b2:56:8b:4d:8e:d9:fd:fd:68:
5c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:22:9C:08:B8:92:1F:07:91:F9:6C:2E:BC:1C:6B:C5:A9:F1:23:32
X509v3 Authority Key Identifier:
keyid:2B:ED:62:93:5F:B4:8A:F6:E4:4C:BA:19:42:6E:FA:B5:1F:1C:54:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/liKcCLiSHweR-WwuvBxrxanxIzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.202.22.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:bb:c7:af:c6:ad:36:9f:58:70:c6:22:c0:5c:0b:de:7a:ec:
d0:b0:b7:18:90:d0:8b:6c:22:70:80:8e:98:6d:10:45:25:58:
20:fc:99:cd:15:f5:d5:66:2e:6c:b7:59:71:bf:46:bf:17:b7:
2f:8b:04:c7:8e:0e:19:14:e1:12:15:13:da:0b:23:41:a6:b9:
4c:40:04:dc:75:2f:90:11:6d:33:e3:b3:72:62:a4:9a:5e:a2:
52:90:9c:fd:11:b1:48:ef:8c:42:52:07:88:bf:9e:99:07:85:
4d:a5:4f:d6:c2:2a:1f:21:4c:ac:3e:6d:c8:ed:23:57:6e:59:
88:bf:de:52:2d:da:3d:67:59:cd:41:71:76:02:e2:f8:a9:81:
f3:f1:6b:b1:0c:ac:6d:2e:25:f6:a4:a5:bd:2e:ef:0e:f2:de:
3e:d8:e0:39:67:fd:24:63:75:51:76:29:c0:9f:7d:25:5b:3d:
a4:9b:69:e6:77:af:e2:46:88:6a:11:47:35:ef:0a:a4:56:b4:
04:8a:c3:83:c4:22:36:8c:92:ce:86:33:07:a7:29:50:45:09:
9e:d7:a5:f4:53:22:ba:73:42:8b:eb:64:52:7e:9a:69:03:c0:
13:50:4a:f2:22:db:ae:31:fb:f7:af:34:63:95:00:eb:8f:72:
27:e9:bd:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:43:47 2025 by rpki-client