Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/N6buoHMKD6EWO602eWke659R_sI.roa
File: N6buoHMKD6EWO602eWke659R_sI.roa (raw, json)
Hash identifier: 9uQroxQ4DKOYtqSPZU0i7tzCZqiue/3BbHbVTQJDg8U=
Subject key identifier: 37:A6:EE:A0:73:0A:0F:A1:16:3B:AD:36:79:69:1E:EB:9F:51:FE:C2
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 01886BFCBB0A3434B6533DED8F7D76E83591
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/N6buoHMKD6EWO602eWke659R_sI.roa
Signing time: Tue 30 May 2023 09:28:25 +0000
ROA not before: Tue 30 May 2023 09:28:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 149457
IP address blocks: 185.233.17.0/24 maxlen: 24
85.92.114.0/24 maxlen: 24
85.92.115.0/24 maxlen: 24
193.107.218.0/24 maxlen: 24
185.243.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6b:fc:bb:0a:34:34:b6:53:3d:ed:8f:7d:76:e8:35:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: May 30 09:28:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37a6eea0730a0fa1163bad3679691eeb9f51fec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:21:7d:ac:5d:37:d4:7d:a1:f6:58:a2:ce:7b:
f5:0c:3b:41:91:db:d5:15:18:e6:94:1b:6c:0c:64:
be:62:b7:cf:9a:c6:fc:c7:cd:da:a2:b0:6f:8a:55:
7a:85:7a:7c:41:00:11:09:ae:da:62:9a:ce:e8:14:
15:12:46:b5:66:b3:0c:33:71:79:8c:74:1b:f7:ea:
a0:df:98:b3:5a:74:82:3e:b9:f6:5d:22:be:28:51:
55:66:93:b9:6a:68:a6:1e:22:30:c1:bf:06:2d:54:
7a:f5:75:4a:fc:24:3d:11:f0:96:94:fc:c9:a4:55:
8c:01:c5:c1:91:02:0b:0f:33:ce:36:de:63:75:f3:
7d:24:de:36:95:3e:43:92:08:a5:84:85:52:d3:ce:
35:e4:c0:82:c9:07:ed:10:c3:85:5b:9d:28:05:f4:
0c:55:11:8d:cc:7e:23:19:b1:18:9a:26:61:e4:5a:
ca:9c:b2:fc:ee:72:8d:25:43:d6:67:b1:81:2d:38:
5b:86:57:83:38:29:af:fa:a6:b4:67:a4:d0:59:18:
9a:6f:2d:e7:8f:30:70:91:e1:79:a1:36:8b:ef:2f:
8f:8e:71:6a:c5:53:b4:e0:51:a9:e7:b9:4a:67:16:
05:c0:69:61:2a:03:19:e0:65:dd:56:d1:4e:00:54:
9c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A6:EE:A0:73:0A:0F:A1:16:3B:AD:36:79:69:1E:EB:9F:51:FE:C2
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/N6buoHMKD6EWO602eWke659R_sI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.92.114.0/23
185.233.17.0/24
185.243.5.0/24
193.107.218.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:d8:dc:41:03:80:d5:5d:ae:71:e7:08:5e:20:d5:4e:c3:0e:
b8:5b:34:25:b2:d6:e9:9e:0c:41:cb:b1:0a:9f:29:05:b7:81:
83:91:6a:fe:04:94:04:3e:d4:bb:f6:f0:2e:e1:f9:be:30:9c:
a9:c1:83:fe:a3:d0:43:6d:c0:16:63:d6:d9:4b:24:fc:84:ba:
24:23:e8:56:a7:36:57:8c:01:39:96:fb:2f:32:6f:ad:bb:c7:
07:cd:c9:7e:8b:4a:91:a1:7c:1d:c1:97:df:c9:3b:0b:3b:a9:
26:77:e7:89:2c:35:ba:a9:73:0e:d9:0c:a4:17:10:62:33:29:
69:a3:de:c2:43:4b:76:de:d3:32:a2:b9:fd:b2:f3:de:ca:e7:
01:d3:9a:33:39:6f:22:cb:fc:09:42:d8:f7:54:d0:52:40:c1:
7c:73:19:b7:24:79:5b:ec:11:fd:71:c5:8a:b8:0f:e2:97:d2:
67:5c:9c:74:1f:e7:6e:87:26:20:38:59:89:8d:c1:38:e4:d7:
c5:50:72:63:7e:cc:f9:9e:8b:02:68:3a:e8:31:bb:6f:2e:5b:
4e:e5:1a:49:3b:fb:53:f3:f3:0f:c2:1d:a3:e5:9f:a5:0e:7f:
8c:45:91:7c:53:26:fa:a0:54:ec:49:f3:50:b6:26:61:1d:a0:
63:c9:8d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:59 2025 by rpki-client