Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/1hTZzWhnlPj8vxUvSuuP12JKMZk.roa
File: 1hTZzWhnlPj8vxUvSuuP12JKMZk.roa (raw, json)
Hash identifier: civyCScUcPhFrN+HwmnRbd81XbX8gg7cGiJobEqfFaQ=
Subject key identifier: D6:14:D9:CD:68:67:94:F8:FC:BF:15:2F:4A:EB:8F:D7:62:4A:31:99
Certificate issuer: /CN=f7e5647cd0b7f722bed4569f37b8bf8f92538cf5
Certificate serial: 0300473E
Authority key identifier: F7:E5:64:7C:D0:B7:F7:22:BE:D4:56:9F:37:B8:BF:8F:92:53:8C:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-VkfNC39yK-1FafN7i_j5JTjPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/1hTZzWhnlPj8vxUvSuuP12JKMZk.roa
Signing time: Sat 01 Jan 2022 13:06:57 +0000
ROA not before: Sat 01 Jan 2022 13:06:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60860
IP address blocks: 193.106.67.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50349886 (0x300473e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e5647cd0b7f722bed4569f37b8bf8f92538cf5
Validity
Not Before: Jan 1 13:06:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d614d9cd686794f8fcbf152f4aeb8fd7624a3199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ef:b4:3e:79:3f:36:29:91:22:9b:2e:92:c8:
20:6c:73:51:a6:83:13:cb:2a:4b:4a:ed:e6:e8:66:
41:11:30:63:c3:a5:f7:fe:1e:84:f9:a5:48:2d:5c:
02:01:e7:c8:e1:ec:1d:06:7f:08:b3:b9:e4:17:36:
a1:77:4b:8a:59:24:3e:f9:60:8e:30:7e:b0:42:44:
29:6a:60:13:70:14:72:d2:50:8f:48:1d:c7:64:15:
4e:b9:1a:75:36:d5:1a:57:e4:77:1d:fc:40:ff:cd:
77:1f:dd:1c:e8:d0:be:22:d3:3e:b1:4d:1b:aa:d9:
7b:90:e7:2f:33:32:1c:6d:01:36:97:ce:ab:12:b5:
f8:5a:5b:1a:83:fb:f4:1f:a0:e0:ef:6b:af:49:f0:
9f:42:97:58:b2:c3:80:07:a4:8d:9e:fb:30:b8:66:
c2:99:2c:6c:f7:c3:07:41:dd:68:92:ad:bd:c8:a0:
1b:0f:4d:79:03:78:c7:91:f1:0b:72:6f:16:ba:42:
47:03:c0:4d:83:4e:d2:20:81:14:94:e1:75:fc:13:
a8:66:1e:12:e0:2c:d2:7a:99:c1:c1:63:89:98:ca:
4e:89:8a:5d:3f:a1:fb:8b:cb:65:40:2d:d4:e4:e7:
1a:71:77:4e:bb:18:4a:e3:9c:1a:b4:c3:b9:9a:38:
15:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:14:D9:CD:68:67:94:F8:FC:BF:15:2F:4A:EB:8F:D7:62:4A:31:99
X509v3 Authority Key Identifier:
keyid:F7:E5:64:7C:D0:B7:F7:22:BE:D4:56:9F:37:B8:BF:8F:92:53:8C:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-VkfNC39yK-1FafN7i_j5JTjPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/1hTZzWhnlPj8vxUvSuuP12JKMZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.67.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:2b:83:8b:c1:80:25:46:7a:10:a4:1f:5a:45:cf:b2:83:39:
be:60:c6:e8:8d:16:ba:6c:c8:4e:0d:02:d3:45:96:ff:b4:8f:
94:6b:e6:87:3a:b1:ed:e8:47:09:3e:a7:17:f7:e2:d6:1a:c4:
95:0e:ab:ac:91:5d:da:fe:fc:2a:a1:d6:54:6f:62:5c:a5:6a:
f7:87:dd:3a:88:d3:8d:8b:43:5d:23:5e:c2:b1:0e:7a:34:f3:
5f:52:32:6a:0b:31:32:45:18:be:36:f7:8a:d4:72:d1:11:1a:
2e:c1:25:8e:16:48:8c:ec:14:01:f2:b9:10:c4:7a:b6:5a:70:
08:bf:1b:1d:80:c8:e6:8b:db:b1:61:ce:84:4a:e1:ab:1a:a0:
10:87:f7:1d:e5:df:64:31:45:44:1b:7d:fb:d5:03:04:e1:50:
e7:fb:5f:bd:ef:ba:fa:cd:3c:76:5e:80:a5:f3:7d:28:f0:17:
3c:34:8f:30:ae:2c:d0:fc:b3:c4:4b:20:e9:1e:bf:59:cc:30:
52:eb:a9:d3:4f:67:b9:60:3f:21:c7:06:86:4b:39:fd:8e:37:
0c:6c:c5:82:e5:d0:8b:5e:a1:ae:73:5a:0d:58:e2:bb:c3:38:
57:d8:ff:5b:8a:30:95:c0:0b:f1:82:c1:8a:47:11:94:16:86:
e7:b4:46:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:05 2025 by rpki-client