Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/N6vB5zS6mSgTf82EUtkEWi1vpe4.roa
File: N6vB5zS6mSgTf82EUtkEWi1vpe4.roa (raw, json)
Hash identifier: d84/ixnjO42DuxcPlqKkJZDcKWR6+Hbjw+RgZbk2JC4=
Subject key identifier: 37:AB:C1:E7:34:BA:99:28:13:7F:CD:84:52:D9:04:5A:2D:6F:A5:EE
Certificate issuer: /CN=a679160a0449e8b50fc01c85dcfce54b2c629b51
Certificate serial: 018571C2FF65FCBE46B2A92C7007DB32BAAE
Authority key identifier: A6:79:16:0A:04:49:E8:B5:0F:C0:1C:85:DC:FC:E5:4B:2C:62:9B:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnkWCgRJ6LUPwByF3PzlSyxim1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/N6vB5zS6mSgTf82EUtkEWi1vpe4.roa
Signing time: Mon 02 Jan 2023 09:14:42 +0000
ROA not before: Mon 02 Jan 2023 09:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211031
IP address blocks: 193.38.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:c2:ff:65:fc:be:46:b2:a9:2c:70:07:db:32:ba:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a679160a0449e8b50fc01c85dcfce54b2c629b51
Validity
Not Before: Jan 2 09:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37abc1e734ba9928137fcd8452d9045a2d6fa5ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:22:42:bf:aa:fb:f2:55:50:00:03:93:8f:1c:
79:83:1a:c2:c1:40:c5:54:2a:22:5e:91:9a:c1:ff:
82:6b:2c:70:b4:f8:50:2f:9b:8c:84:bd:e3:d2:a9:
1e:c1:96:8e:bc:30:cc:02:8e:71:84:15:8c:d5:15:
21:5b:90:a1:44:37:8e:20:79:3f:e1:04:3f:2f:fa:
98:91:86:30:22:da:01:17:42:e4:cf:aa:9c:b7:c3:
d3:00:81:01:0a:5e:27:2d:92:4f:a6:e9:fa:f6:e7:
4b:89:f7:f4:f1:73:b5:ff:88:f8:46:cb:d4:cf:1b:
df:c9:7e:ef:a8:9f:4c:41:47:88:49:f6:2c:93:fa:
5c:fe:bd:32:cc:98:cb:a3:b8:d5:34:b1:d0:13:eb:
8d:7f:c0:82:1c:1d:e1:19:7f:ed:dd:8c:3c:69:5b:
d5:34:b3:dc:56:4e:7d:f8:01:8e:a5:57:13:67:f8:
a3:60:37:19:53:9d:a6:5d:60:80:cb:a1:e2:7d:a9:
e7:fc:29:62:02:97:67:75:1a:f2:ff:c3:31:d4:56:
6a:fd:e0:c7:3b:4e:ae:68:ab:14:af:33:0a:bd:51:
b4:d1:02:87:25:af:6c:71:e2:f4:e3:e9:1b:56:17:
66:0d:d0:ac:11:d9:c1:00:2f:a9:00:ea:1b:9e:6e:
b0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:AB:C1:E7:34:BA:99:28:13:7F:CD:84:52:D9:04:5A:2D:6F:A5:EE
X509v3 Authority Key Identifier:
keyid:A6:79:16:0A:04:49:E8:B5:0F:C0:1C:85:DC:FC:E5:4B:2C:62:9B:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnkWCgRJ6LUPwByF3PzlSyxim1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/N6vB5zS6mSgTf82EUtkEWi1vpe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.153.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:8f:dc:d6:7f:d1:a5:05:8a:5f:5b:21:4d:d6:04:23:b7:db:
05:f6:c0:67:eb:84:98:f7:57:d1:72:8b:0a:d4:2f:a9:02:95:
85:af:60:77:54:46:62:bf:c6:19:ea:72:1b:8a:e7:e6:2e:9f:
38:c3:38:30:57:73:21:07:ad:34:bb:ac:b7:78:ac:b8:b2:4c:
aa:14:0c:f4:70:ae:93:25:f0:59:25:16:38:9f:1b:21:a6:87:
ab:ee:fd:d8:7e:0d:8f:da:9b:98:9d:cc:1e:55:a5:8b:f4:a6:
2b:ce:66:b4:21:94:4b:5e:6b:0c:74:1c:1a:46:79:16:26:97:
87:46:12:59:07:b8:c9:3d:d5:13:c1:10:45:70:d7:a6:60:5b:
46:8c:ad:3c:f2:b5:a1:32:2f:b0:d9:08:50:b1:09:82:23:b6:
95:bb:37:c8:26:90:28:ad:03:89:77:de:9f:f1:12:d7:28:bf:
f2:76:89:64:d0:36:30:75:2e:f3:8a:30:54:a2:13:29:4f:f2:
17:e0:3c:57:de:e1:27:82:bd:a7:e5:53:43:5d:8e:3a:ef:fd:
96:8d:18:72:f2:cb:df:19:01:33:5b:bc:2a:b7:7a:3d:ee:44:
59:74:e1:79:5f:5f:43:2c:cf:50:24:e3:10:dd:7c:79:60:82:
e4:18:0e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:04 2025 by rpki-client