Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/no2tFjueAapNHHepHiKtTyRuKWg.roa
File: no2tFjueAapNHHepHiKtTyRuKWg.roa (raw, json)
Hash identifier: A6xygbIdBbEhZTUnIZNQsWcv9gKdb/nJ8bIuezGZjvQ=
Subject key identifier: 9E:8D:AD:16:3B:9E:01:AA:4D:1C:77:A9:1E:22:AD:4F:24:6E:29:68
Certificate issuer: /CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6
Certificate serial: 01874D1500362A1472D510CEADE13F58F399
Authority key identifier: 5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/no2tFjueAapNHHepHiKtTyRuKWg.roa
Signing time: Tue 04 Apr 2023 16:23:54 +0000
ROA not before: Tue 04 Apr 2023 16:23:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.8.236.0/23 maxlen: 23
193.8.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4d:15:00:36:2a:14:72:d5:10:ce:ad:e1:3f:58:f3:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6
Validity
Not Before: Apr 4 16:23:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e8dad163b9e01aa4d1c77a91e22ad4f246e2968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:fa:d2:a9:43:3c:58:e9:fa:b6:68:29:22:5c:
df:4a:68:36:95:c4:53:94:87:37:87:d7:f4:92:a4:
e2:38:fc:c4:a6:05:e8:12:92:33:a0:bf:fc:2d:5d:
f6:f0:26:a0:fa:f8:85:ff:b1:99:86:a7:fa:2a:e9:
fa:db:ef:a9:12:03:0a:5c:bc:d2:45:fe:45:a5:da:
88:b2:b1:a9:ff:69:e9:40:bf:c8:c6:d7:ba:15:d5:
31:a0:49:03:3c:6c:83:56:81:77:a7:a8:b7:bf:57:
f6:57:c3:7f:2e:ce:55:da:cb:f9:77:97:0b:05:67:
1e:26:92:24:30:d5:a4:0a:f9:43:7f:3b:2a:33:a2:
e9:56:7e:df:58:55:50:3a:24:3f:25:87:65:79:75:
88:73:5b:3d:be:49:d7:db:f4:29:48:19:a2:71:99:
ba:5d:79:48:61:b1:a6:a7:eb:46:79:56:04:c9:fe:
28:19:08:90:76:59:89:c0:e0:ae:df:1e:e2:78:29:
29:92:49:a8:5d:1b:3b:f3:89:9e:8e:74:4b:f8:36:
7f:96:2a:f7:e6:23:46:e2:51:b4:e5:b4:37:50:ce:
34:7a:56:44:6b:a6:b5:b9:24:83:26:f8:bb:ae:c7:
09:6d:19:16:85:66:0b:f2:73:38:4a:b3:6f:83:0b:
35:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:8D:AD:16:3B:9E:01:AA:4D:1C:77:A9:1E:22:AD:4F:24:6E:29:68
X509v3 Authority Key Identifier:
keyid:5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/no2tFjueAapNHHepHiKtTyRuKWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.236.0/23
Signature Algorithm: sha256WithRSAEncryption
69:43:63:05:e4:be:67:cf:8f:e2:95:b9:d0:c9:97:ce:07:7b:
9c:bf:40:0a:85:85:40:af:62:87:91:ef:27:53:d3:57:7e:b6:
64:58:54:86:2c:54:3a:68:79:96:56:5e:1d:a8:78:1b:74:4f:
ed:df:d8:15:a3:28:b5:77:93:19:e1:e6:83:55:55:31:ed:a1:
7a:22:d5:5b:7a:c3:69:78:15:d9:09:9d:17:9b:6e:bf:03:be:
e5:77:6f:ed:0e:cb:d9:46:63:5d:25:bb:56:e4:3d:43:ba:45:
d3:8f:77:49:13:e0:05:6a:c9:be:92:be:29:2e:4f:eb:b6:91:
da:fe:45:08:7f:88:3b:2c:15:67:24:c6:73:2d:50:45:35:53:
b9:58:b5:65:0f:55:3b:99:d7:37:33:1e:4e:73:b7:ba:de:d2:
1f:8f:71:bd:03:d1:58:a1:68:67:34:9d:a8:af:cb:52:37:fc:
c3:0f:77:0d:3c:d7:b8:24:88:f1:86:40:70:aa:de:24:47:d5:
48:b2:68:f3:92:da:3f:32:f8:3f:89:03:e2:d5:7d:f3:cb:e1:
be:6e:83:b3:bd:39:f8:0c:22:39:f8:7c:34:1d:53:2d:c0:1f:
a3:7b:ed:75:3f:94:05:fa:a6:22:6c:ce:c6:66:f4:a4:87:c2:
45:fa:71:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:38 2025 by rpki-client