Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/6L8X0nmXghgFsPYaEXL8XvOlv3k.roa
File: 6L8X0nmXghgFsPYaEXL8XvOlv3k.roa (raw, json)
Hash identifier: PWyP/hJFC492TI85dEk69qUkDfSOjiNIWvSS40f/q3w=
Subject key identifier: E8:BF:17:D2:79:97:82:18:05:B0:F6:1A:11:72:FC:5E:F3:A5:BF:79
Certificate issuer: /CN=a4abaf1d37f0a141a814ca02fc01e3d9621c73d9
Certificate serial: 0186119E8F4C21F6F74E6DC66BC0B128FC2F
Authority key identifier: A4:AB:AF:1D:37:F0:A1:41:A8:14:CA:02:FC:01:E3:D9:62:1C:73:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/6L8X0nmXghgFsPYaEXL8XvOlv3k.roa
Signing time: Thu 02 Feb 2023 10:14:09 +0000
ROA not before: Thu 02 Feb 2023 10:14:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60781
IP address blocks: 195.242.98.0/23 maxlen: 23
193.242.108.0/24 maxlen: 24
193.43.92.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:11:9e:8f:4c:21:f6:f7:4e:6d:c6:6b:c0:b1:28:fc:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4abaf1d37f0a141a814ca02fc01e3d9621c73d9
Validity
Not Before: Feb 2 10:14:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8bf17d27997821805b0f61a1172fc5ef3a5bf79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e1:5a:f7:1f:05:cc:86:6b:42:a2:fd:da:26:
5c:61:a2:ad:cd:43:7b:5e:12:0c:0e:2d:45:53:e1:
ba:e1:f8:e8:48:6a:e4:68:0a:37:6e:65:14:5d:fb:
cf:97:cf:f5:73:e9:fe:45:f6:32:44:ad:f3:df:d8:
90:fc:34:88:4c:c5:66:03:bd:ef:9c:8e:b2:dc:17:
6a:71:f9:13:b3:95:02:83:a6:a9:97:70:62:3a:0b:
87:ae:a1:34:48:f5:45:a5:c3:71:bd:54:53:07:e5:
59:86:60:34:5a:a0:d8:de:8f:69:9d:b7:b8:86:4b:
c0:d8:78:14:af:9c:a0:83:09:0e:9e:2e:16:be:8f:
bd:dd:d1:0d:c0:cd:cc:db:c9:e7:d8:3b:a2:61:65:
06:cb:8a:ef:97:7c:87:35:dd:5a:e3:db:1d:38:53:
9d:ae:b4:80:9c:6c:f2:75:7d:b9:0c:aa:1c:4e:13:
2b:b9:05:07:1d:84:a5:04:c8:4d:5c:c0:6b:c4:22:
4c:11:64:8f:e9:b1:81:2e:48:46:ac:06:d4:61:0c:
08:bc:2f:d6:ea:29:e9:94:72:b7:e4:59:f1:b9:7c:
76:5e:de:a4:d0:fd:8f:b9:74:0c:7d:61:b9:34:11:
77:74:65:95:d0:0f:b9:46:ed:b3:ed:54:cd:06:5f:
86:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:BF:17:D2:79:97:82:18:05:B0:F6:1A:11:72:FC:5E:F3:A5:BF:79
X509v3 Authority Key Identifier:
keyid:A4:AB:AF:1D:37:F0:A1:41:A8:14:CA:02:FC:01:E3:D9:62:1C:73:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/6L8X0nmXghgFsPYaEXL8XvOlv3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.92.0/24
193.242.108.0/24
195.242.98.0/23
Signature Algorithm: sha256WithRSAEncryption
10:2a:cc:2d:b2:04:3d:24:dc:1d:7c:d1:14:01:8c:6d:ea:38:
b3:1d:41:05:19:aa:c5:19:17:2c:29:bf:ca:7f:f4:36:fb:50:
9f:ae:e2:80:d3:cd:0a:f7:e4:a3:6b:8b:81:44:43:0b:34:49:
60:70:1f:1e:b4:0d:3d:4e:4e:13:bb:c8:c6:5f:d3:39:3b:e7:
77:9b:25:a2:0d:f8:84:7a:88:a5:1e:93:b2:69:01:01:15:02:
d3:44:b3:0e:de:ad:ab:c2:52:d4:74:3f:06:ae:9b:e7:98:cd:
13:c6:aa:30:3b:a7:72:f7:21:60:01:2b:89:46:83:24:2d:87:
21:9c:5c:a2:8c:17:7e:af:a5:3a:7a:5e:e5:55:6d:16:76:c3:
55:f1:8b:f7:d9:b2:cf:dd:84:34:d9:ca:dd:8e:6d:01:f5:28:
69:0b:6b:be:03:57:58:fc:21:47:aa:39:68:84:9d:64:31:17:
4a:7b:fd:39:ea:99:31:88:65:24:35:af:71:ec:1b:9e:52:e0:
0a:bd:d8:c6:93:7e:c2:30:0c:29:9d:4b:a5:8e:02:c3:23:b6:
4e:c1:9c:2a:05:47:89:3c:93:89:64:20:90:cc:66:e6:22:25:
29:46:c8:9d:e0:27:1b:28:15:27:64:25:9b:76:bc:d3:07:c0:
f0:84:c6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:14 2025 by rpki-client