Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/yTItMxTGNsuUh9uk28PZPvMr2n0.roa
File: yTItMxTGNsuUh9uk28PZPvMr2n0.roa (raw, json)
Hash identifier: ek9KGpkLhZBTaCm05GuevejRFZJI8XEEkcwlsZVBVeU=
Subject key identifier: C9:32:2D:33:14:C6:36:CB:94:87:DB:A4:DB:C3:D9:3E:F3:2B:DA:7D
Certificate issuer: /CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
Certificate serial: 0188B9B0FA5D02311920AE9808D8094CE782
Authority key identifier: 9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/yTItMxTGNsuUh9uk28PZPvMr2n0.roa
Signing time: Wed 14 Jun 2023 11:36:03 +0000
ROA not before: Wed 14 Jun 2023 11:36:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42474
IP address blocks: 193.169.228.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b9:b0:fa:5d:02:31:19:20:ae:98:08:d8:09:4c:e7:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
Validity
Not Before: Jun 14 11:36:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9322d3314c636cb9487dba4dbc3d93ef32bda7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:13:e2:e3:cf:92:51:6f:5e:57:87:23:0f:5d:
b8:ef:8c:a0:20:ef:aa:a8:9f:3f:92:ae:82:d0:64:
df:1d:e4:6b:ec:45:1a:45:39:d6:ff:fe:85:07:4a:
36:b4:83:2a:74:c8:41:86:1b:40:e1:d6:17:1b:0f:
f9:63:5f:41:29:75:1d:0a:fa:69:53:bf:9d:0e:a4:
9e:5b:0d:ca:a5:81:c5:c0:88:4a:94:ea:ce:8b:65:
05:24:79:bb:d4:cf:cc:21:91:88:2f:6d:f0:ee:12:
2a:ee:d4:11:d6:4e:cf:f9:45:c7:2e:bb:b6:57:c6:
b3:4a:3d:bf:f2:4d:93:63:88:94:e9:a8:ca:41:87:
51:90:19:fe:38:29:85:fd:0b:34:ca:76:74:78:ed:
e5:5a:24:a0:c6:4c:c3:46:02:d5:d5:15:1c:af:68:
94:11:03:26:3c:e0:9d:10:e8:cc:b6:3a:ad:f5:ad:
27:2a:42:a4:8d:46:1b:df:56:59:a7:8e:b6:da:53:
21:db:e1:f5:12:80:f5:1b:1e:4e:86:3c:04:d9:d9:
15:8d:f3:e9:a1:90:de:14:43:ed:fd:26:be:29:04:
60:88:87:6f:55:d7:26:76:f9:4d:84:83:86:38:84:
00:41:11:06:92:99:d6:cc:94:8d:5f:fb:75:1d:f3:
11:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:32:2D:33:14:C6:36:CB:94:87:DB:A4:DB:C3:D9:3E:F3:2B:DA:7D
X509v3 Authority Key Identifier:
keyid:9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/yTItMxTGNsuUh9uk28PZPvMr2n0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.228.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:3b:26:21:7d:e3:fc:41:3b:e0:f9:e1:0d:cf:84:08:74:b5:
6c:52:89:54:a4:97:07:27:e3:8b:f5:b5:35:ca:e0:aa:f7:a7:
a0:e4:2f:e1:97:c3:92:72:5d:0b:18:00:8b:72:07:12:e5:90:
43:67:ab:3a:43:f1:48:79:1b:c0:f5:a0:b4:9b:c8:61:40:d3:
92:f1:b8:15:c6:c5:5b:15:be:01:87:f9:7e:ba:79:8a:ee:ad:
77:0b:6e:6e:2e:77:0c:81:cb:0b:60:27:59:11:7c:b0:fd:f7:
ca:af:67:e0:4c:98:15:9e:e6:40:19:c8:0d:31:2e:4a:18:9d:
d3:d9:e4:1a:e8:97:a7:ab:77:40:c4:d1:6d:1d:dc:a8:81:8f:
d6:d9:ae:0d:30:db:de:38:51:61:be:3e:36:cf:5c:f1:81:db:
c9:6b:de:64:ea:94:e0:9d:8e:79:20:eb:67:e5:ba:02:a2:fd:
67:66:26:e9:c8:3b:ac:bd:d1:f5:80:1e:f8:e6:e4:9c:ee:99:
b4:3d:96:5e:9f:da:c9:c6:31:3d:a5:61:91:af:60:32:8a:1a:
ca:8e:8d:68:a2:e5:4e:98:5c:5e:b6:cc:0b:f4:15:5e:3f:18:
3f:33:5e:ff:50:32:9b:51:83:a2:f9:ec:fd:53:fe:87:94:55:
e8:51:84:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:56 2025 by rpki-client