Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ee9ddc-acd0-481d-8c0b-788b46e10497/1/ERWNh8pwun_nzTA_EkCD7W-q6RY.roa
File: ERWNh8pwun_nzTA_EkCD7W-q6RY.roa (raw, json)
Hash identifier: du9iV7UmtdYKUPdYwkZh9ejnKmTPeqkgbmOaq1TEhbA=
Subject key identifier: 11:15:8D:87:CA:70:BA:7F:E7:CD:30:3F:12:40:83:ED:6F:AA:E9:16
Certificate issuer: /CN=aa8093354e565ac4838a51f47d2769769c66944e
Certificate serial: 018BB8567B78D9743164A7FF104170CD2EC4
Authority key identifier: AA:80:93:35:4E:56:5A:C4:83:8A:51:F4:7D:27:69:76:9C:66:94:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoCTNU5WWsSDilH0fSdpdpxmlE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ee9ddc-acd0-481d-8c0b-788b46e10497/1/ERWNh8pwun_nzTA_EkCD7W-q6RY.roa
Signing time: Fri 10 Nov 2023 08:25:57 +0000
ROA not before: Fri 10 Nov 2023 08:25:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211409
IP address blocks: 193.163.170.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b8:56:7b:78:d9:74:31:64:a7:ff:10:41:70:cd:2e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa8093354e565ac4838a51f47d2769769c66944e
Validity
Not Before: Nov 10 08:25:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11158d87ca70ba7fe7cd303f124083ed6faae916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e4:b0:b1:10:8d:d9:41:c8:00:34:46:05:83:
01:04:4f:8e:12:6a:96:54:c7:c1:08:29:4b:66:89:
9f:89:22:40:8f:14:0c:b9:d1:e7:44:08:c7:a5:4c:
f1:47:dc:ba:73:bc:7c:2a:b5:bc:a1:bc:f9:f1:55:
b6:3d:3c:ee:f8:5c:e4:72:bc:81:ee:73:a0:c6:30:
f6:9d:97:6c:3e:9b:86:8b:bf:a4:23:6c:11:17:73:
b4:25:d0:71:98:e5:ff:b6:1c:c1:86:f5:6d:05:6e:
43:e5:c0:c0:ab:28:45:c4:0b:13:5e:4b:2b:e9:f5:
5f:bd:fd:9c:47:6a:36:92:9e:6a:52:a4:29:77:2c:
c3:fb:6d:9c:41:cf:c5:93:a3:20:15:83:62:18:d1:
c1:49:27:7d:e0:cb:2e:01:a1:99:b3:5f:c0:eb:f5:
f3:b5:71:20:80:15:57:fc:78:d6:4c:05:f6:f2:ab:
f3:e3:4b:36:4d:e7:0a:1c:c0:c9:6a:fe:e9:b0:ad:
34:3d:39:4e:75:8b:19:ac:d6:b8:d2:e4:8a:e3:b3:
94:21:42:f8:d3:db:40:db:b1:d4:d8:00:65:76:a2:
b3:ae:e9:da:ae:f5:2b:09:44:14:7f:af:8d:9d:59:
7e:3d:60:0e:b6:99:27:ba:e8:6b:ed:1f:fe:ec:72:
96:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:15:8D:87:CA:70:BA:7F:E7:CD:30:3F:12:40:83:ED:6F:AA:E9:16
X509v3 Authority Key Identifier:
keyid:AA:80:93:35:4E:56:5A:C4:83:8A:51:F4:7D:27:69:76:9C:66:94:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoCTNU5WWsSDilH0fSdpdpxmlE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ee9ddc-acd0-481d-8c0b-788b46e10497/1/ERWNh8pwun_nzTA_EkCD7W-q6RY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ee9ddc-acd0-481d-8c0b-788b46e10497/1/qoCTNU5WWsSDilH0fSdpdpxmlE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.170.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:38:4f:0a:3c:4b:dc:47:b6:49:ed:fd:7d:6a:7f:31:ef:12:
e0:72:e6:67:27:b0:e0:ec:02:41:d2:ac:00:81:3b:e3:b3:14:
f9:fa:c5:62:82:93:40:67:0c:6b:c6:fa:28:31:3f:ca:5a:68:
22:83:9b:ea:50:37:93:0f:76:f5:7f:2f:fc:d7:24:a8:19:64:
15:52:99:e6:2c:09:c0:97:d6:47:0c:4e:17:9f:be:92:57:23:
fd:89:9a:a9:b1:c8:04:14:4f:ab:db:b5:5e:f1:60:a9:ac:8e:
b1:3b:a2:9b:ba:35:c2:fa:b9:36:d6:22:0a:11:3c:9d:72:d8:
fe:0f:ec:12:51:93:b9:96:1a:5d:1b:12:96:d1:f4:e6:d4:7a:
67:21:b6:3d:5b:ac:b5:a3:e1:a5:61:d4:17:7d:f5:b5:b6:8a:
6e:5d:74:18:bd:62:8d:d3:74:4b:21:2a:f8:a9:35:e8:4d:ec:
b8:39:cb:ba:14:b9:24:e2:5d:65:09:bc:1f:ef:f1:39:0d:93:
14:f5:d8:f7:04:3d:44:db:96:53:94:cf:ac:24:75:90:00:c2:
88:d1:05:c5:51:8f:82:6f:2e:91:44:4c:ba:4a:09:3b:2c:90:
0e:09:e9:0d:7f:56:c2:a8:75:99:78:c8:23:54:95:61:7c:b7:
93:13:d8:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:23 2025 by rpki-client