Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/503458-1dc4-4102-9427-d6398183525d/1/N1Rk4SK9raRBfiTohBLhVYBQZ1U.roa
File: N1Rk4SK9raRBfiTohBLhVYBQZ1U.roa (raw, json)
Hash identifier: Zt6s7cvUy0vLuIh1sD/XtSOLd4MJEGPjN8LnRovHDUs=
Subject key identifier: 37:54:64:E1:22:BD:AD:A4:41:7E:24:E8:84:12:E1:55:80:50:67:55
Certificate issuer: /CN=eb0d53c87071484971aedfd90ca6ecc656a96e4c
Certificate serial: 0186798493EFA2081777E45A1133579616C7
Authority key identifier: EB:0D:53:C8:70:71:48:49:71:AE:DF:D9:0C:A6:EC:C6:56:A9:6E:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6w1TyHBxSElxrt_ZDKbsxlapbkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/503458-1dc4-4102-9427-d6398183525d/1/N1Rk4SK9raRBfiTohBLhVYBQZ1U.roa
Signing time: Wed 22 Feb 2023 14:26:17 +0000
ROA not before: Wed 22 Feb 2023 14:26:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203215
IP address blocks: 192.166.11.0/24 maxlen: 24
192.166.10.0/24 maxlen: 24
192.166.9.0/24 maxlen: 24
192.166.8.0/22 maxlen: 22
192.166.8.0/24 maxlen: 24
2a0c:7ac0::/29 maxlen: 29
2a0c:7ac0:9000::/36 maxlen: 48
2a0c:7ac0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:79:84:93:ef:a2:08:17:77:e4:5a:11:33:57:96:16:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb0d53c87071484971aedfd90ca6ecc656a96e4c
Validity
Not Before: Feb 22 14:26:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=375464e122bdada4417e24e88412e15580506755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f6:c8:35:d7:33:27:bb:0e:9a:4f:1f:7a:12:
2d:67:5f:13:a6:33:6e:67:60:36:c0:f4:61:fb:f7:
71:f3:d4:99:9e:fa:f1:c2:30:b5:d5:84:ed:53:b7:
15:70:01:21:52:25:8b:ae:02:54:5e:cd:78:61:76:
7c:7e:6d:25:39:d2:10:5c:e4:00:e6:d0:19:60:56:
4e:98:04:20:65:59:ce:07:8b:c8:64:43:61:4f:df:
f4:12:88:0f:4c:0f:08:49:63:f1:7b:d5:e8:80:d6:
27:14:b2:85:1c:c3:12:6a:fb:57:7f:8a:78:27:6a:
5e:d5:4f:fe:0a:53:ac:af:7b:d3:26:5d:5f:5e:1f:
6e:84:87:f4:10:0c:54:a0:4e:39:5d:fd:86:e5:b8:
48:a0:0e:ce:f2:93:77:5a:c4:17:d9:88:3f:65:bb:
01:b9:90:26:72:5e:51:87:92:4c:f0:08:c7:40:32:
78:62:da:db:dd:69:5c:3b:4e:64:7d:59:f8:e5:dd:
59:7b:9a:df:3d:ea:49:29:bf:ff:bd:09:95:0b:f3:
c5:14:28:e1:21:47:e4:4f:43:4c:3b:68:72:d1:89:
04:29:43:e0:82:31:7b:84:35:99:db:ad:29:f4:04:
58:7f:78:c3:11:0c:0d:5e:43:3c:3e:e0:19:8d:dd:
8c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:54:64:E1:22:BD:AD:A4:41:7E:24:E8:84:12:E1:55:80:50:67:55
X509v3 Authority Key Identifier:
keyid:EB:0D:53:C8:70:71:48:49:71:AE:DF:D9:0C:A6:EC:C6:56:A9:6E:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6w1TyHBxSElxrt_ZDKbsxlapbkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/503458-1dc4-4102-9427-d6398183525d/1/N1Rk4SK9raRBfiTohBLhVYBQZ1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/503458-1dc4-4102-9427-d6398183525d/1/6w1TyHBxSElxrt_ZDKbsxlapbkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.166.8.0/22
IPv6:
2a0c:7ac0::/29
Signature Algorithm: sha256WithRSAEncryption
25:ea:eb:92:9f:17:1a:28:77:c4:fd:3a:91:12:f3:96:71:e4:
52:fc:2c:60:2d:31:16:1d:a3:98:59:cc:9b:b9:90:7f:9e:46:
39:00:03:1e:46:cd:4c:fb:f6:a4:da:92:a2:ff:51:fc:34:c9:
04:84:de:42:be:59:bb:8a:03:08:ad:c8:ea:1e:57:2b:2c:90:
38:71:f8:3f:c8:ce:28:bb:db:4d:c2:7b:bd:ce:35:51:cd:d1:
68:73:4c:57:0f:1f:d8:fa:da:97:12:80:c0:c6:a8:ce:ed:ae:
c5:38:83:e1:62:fe:b7:e1:4f:dc:a0:d7:47:07:d3:5d:40:2c:
76:c1:c2:2d:db:8c:45:0f:41:fa:00:82:9b:37:18:8a:18:0a:
10:a2:71:bd:29:64:5b:0a:b2:cc:29:ac:05:27:b8:65:c5:11:
84:d2:d5:3d:e6:d7:6a:a4:f8:ad:47:11:6c:34:6a:57:fd:dd:
33:ec:55:31:b2:7e:3f:ba:8b:e9:4d:d9:9f:a2:d7:f6:04:96:
77:ac:71:35:05:0e:cf:f1:e8:05:5e:61:56:75:fc:85:2a:7a:
03:e2:87:0d:f9:83:53:b6:60:1e:67:41:39:51:a0:00:8a:23:
a5:a4:cf:6b:b9:d9:d5:61:ea:09:23:7d:26:a6:f7:0d:ea:08:
5f:be:41:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:36 2025 by rpki-client