Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/U78Egodck8-BAx3vZz-k-ou-6Zs.roa
File: U78Egodck8-BAx3vZz-k-ou-6Zs.roa (raw, json)
Hash identifier: n6t1xbVjue/O0vUiOTueTo2BQdkG0ZO2lRn1cxEtqPs=
Subject key identifier: 53:BF:04:82:87:5C:93:CF:81:03:1D:EF:67:3F:A4:FA:8B:BE:E9:9B
Certificate issuer: /CN=abd3e2b12f479198294faf60c6e36a0a1b7bfd54
Certificate serial: 07391905
Authority key identifier: AB:D3:E2:B1:2F:47:91:98:29:4F:AF:60:C6:E3:6A:0A:1B:7B:FD:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/U78Egodck8-BAx3vZz-k-ou-6Zs.roa
Signing time: Sat 01 Jan 2022 12:57:57 +0000
ROA not before: Sat 01 Jan 2022 12:57:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56683
IP address blocks: 193.194.117.0/24 maxlen: 24
193.194.118.0/24 maxlen: 24
193.194.116.0/22 maxlen: 22
193.194.116.0/24 maxlen: 24
193.194.119.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121182469 (0x7391905)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abd3e2b12f479198294faf60c6e36a0a1b7bfd54
Validity
Not Before: Jan 1 12:57:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=53bf0482875c93cf81031def673fa4fa8bbee99b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7c:c2:b2:65:6d:80:5c:0f:4f:6a:76:0c:52:
79:4f:f6:4a:94:da:d4:fb:23:55:98:0d:d5:f3:46:
e0:78:a3:0c:4a:42:fb:d9:54:39:59:1b:83:8d:d1:
07:19:0f:03:41:f5:94:43:55:c5:ea:99:47:5b:b8:
65:52:94:88:e8:54:47:22:2f:f5:66:67:47:55:57:
1d:88:72:19:a1:d9:2c:d3:cb:ba:c8:9e:3e:1f:e5:
4f:0f:1b:9d:36:d9:38:a4:ac:d2:a7:01:0b:ef:78:
81:10:4e:0f:8e:59:fd:70:12:ed:0c:f5:0c:eb:10:
11:88:be:17:03:99:da:7e:a6:86:d9:e3:21:fb:a3:
7f:6e:cf:87:2a:3a:d2:c5:c7:36:3e:a7:fa:16:35:
19:61:18:0c:b2:4a:f1:17:1c:69:7d:49:59:be:f1:
5e:89:0b:c0:90:47:c3:dd:3e:3c:68:d0:b0:48:0c:
b1:0c:40:52:6d:9f:23:91:97:2b:59:bf:6f:3d:f1:
38:a3:6c:df:55:a6:35:46:62:cc:95:2b:81:ff:20:
47:f0:ca:98:8a:8e:44:f8:8f:10:50:85:3a:61:76:
00:c3:1d:7a:d9:10:3b:60:f1:ab:94:9b:f5:b5:25:
c2:35:91:9b:95:6f:71:e5:c2:c1:d6:ac:bb:13:c7:
9d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:BF:04:82:87:5C:93:CF:81:03:1D:EF:67:3F:A4:FA:8B:BE:E9:9B
X509v3 Authority Key Identifier:
keyid:AB:D3:E2:B1:2F:47:91:98:29:4F:AF:60:C6:E3:6A:0A:1B:7B:FD:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/U78Egodck8-BAx3vZz-k-ou-6Zs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.194.116.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:5a:4b:86:c3:a4:6a:f8:be:d2:e9:0c:cb:b3:f7:e9:8b:85:
bc:c8:18:44:e2:45:b1:fd:2c:bb:ac:17:f2:35:72:1f:9d:01:
a3:51:ff:5b:45:0e:33:cb:0d:27:94:4c:bd:5d:0b:f8:56:5a:
0b:ba:c7:5c:75:75:91:0c:7c:2e:6a:24:28:24:5a:7b:85:69:
9f:fd:4a:1f:68:44:e4:8e:95:28:00:63:c0:69:59:81:20:a9:
65:1e:e9:54:ed:02:d3:39:61:df:23:33:88:5f:8a:9e:6f:cf:
f3:ef:f6:6d:5b:7a:b3:a6:1b:5f:ec:81:1c:52:34:24:2e:d1:
cc:db:64:73:d4:7b:55:3b:cc:40:ed:83:e4:f7:f7:c9:72:df:
cc:17:8b:5a:49:94:b3:97:7b:41:ce:ef:e8:52:c8:77:62:57:
e6:bd:41:70:0f:7a:b0:04:58:a6:35:e8:53:86:67:b2:8f:a4:
b3:4c:7e:11:36:40:e7:37:ce:8f:24:dc:55:62:84:fd:f2:ea:
b7:0c:fb:c8:4f:0a:77:92:a0:30:fa:bc:92:06:da:ae:87:c7:
8d:8e:93:87:3e:2a:b8:2a:37:4f:a8:03:5e:2e:1b:91:3b:36:
d6:06:1c:d5:74:2b:7a:c1:81:88:cd:83:28:00:3b:8b:14:13:
22:03:6d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:37 2025 by rpki-client