Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/nuF00C4ickimp3u2WSQCiknObGU.roa
File: nuF00C4ickimp3u2WSQCiknObGU.roa (raw, json)
Hash identifier: H7llCRmHgRLRsmH9TL8WqanEZRhVViClU/GoQa60cqI=
Subject key identifier: 9E:E1:74:D0:2E:22:72:48:A6:A7:7B:B6:59:24:02:8A:49:CE:6C:65
Certificate issuer: /CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6
Certificate serial: 01885C1D9DF976F047BF0544EF1839A6D576
Authority key identifier: 5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/nuF00C4ickimp3u2WSQCiknObGU.roa
Signing time: Sat 27 May 2023 07:30:24 +0000
ROA not before: Sat 27 May 2023 07:30:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35758
IP address blocks: 193.8.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:5c:1d:9d:f9:76:f0:47:bf:05:44:ef:18:39:a6:d5:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6
Validity
Not Before: May 27 07:30:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ee174d02e227248a6a77bb65924028a49ce6c65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:96:1e:7b:d4:20:cc:ee:fb:19:c0:fa:89:5f:
63:2d:07:23:33:e3:02:c6:f7:ae:47:bf:0f:f7:73:
6b:b1:b1:18:48:1a:b1:60:24:12:29:70:4b:e3:91:
c2:ad:17:68:0e:d0:c4:34:ed:16:8b:94:c6:f6:9d:
4d:94:4d:5b:27:f7:0d:13:3f:8a:85:7c:fb:cb:55:
da:04:f9:02:21:5c:dc:d5:33:dd:cb:b1:6a:cb:8b:
a2:45:e4:61:74:d1:ab:3e:d7:46:71:66:73:7b:b1:
d5:3a:b8:9e:a7:a3:42:90:9e:1d:96:d1:79:5a:f9:
68:60:5b:b6:29:44:41:46:37:27:10:16:42:49:9b:
a9:c7:96:a8:41:99:8a:ba:f9:51:08:b7:a7:c5:7c:
f1:a5:e4:ba:39:68:ec:43:01:72:38:aa:38:fe:1b:
e9:07:83:3f:69:e0:b6:dd:13:91:c9:35:cf:bd:8a:
0c:ac:65:b7:d7:81:60:ba:b7:de:66:af:58:63:79:
a7:ce:8c:ae:06:82:86:60:04:31:5f:b4:b9:88:cd:
02:a1:dc:14:18:83:44:69:05:36:78:df:3e:83:18:
9c:03:1d:6a:93:c5:a8:4c:dc:9e:a6:68:6f:2e:06:
91:a1:15:f2:0f:6b:ab:d0:c3:fd:63:02:c9:4c:45:
ef:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E1:74:D0:2E:22:72:48:A6:A7:7B:B6:59:24:02:8A:49:CE:6C:65
X509v3 Authority Key Identifier:
keyid:5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/nuF00C4ickimp3u2WSQCiknObGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.237.0/24
Signature Algorithm: sha256WithRSAEncryption
27:1f:e6:59:fe:f0:9b:4b:76:ed:9e:36:53:07:eb:81:0f:13:
9f:5c:db:98:5d:7a:8b:93:42:5c:14:0a:18:14:57:0d:44:49:
d6:c0:6e:08:a4:c3:38:1d:74:cc:89:75:de:38:6b:80:ef:f5:
c5:83:11:5c:7f:66:2f:39:a2:58:97:4a:6c:8f:52:ca:d6:be:
2d:7f:fe:c5:43:15:37:bb:5b:8a:cf:87:c0:cd:dc:e2:da:ea:
30:3e:7e:c4:88:39:41:38:dd:fc:e2:f0:39:b6:b4:8d:72:93:
94:c4:4e:b0:da:fc:3f:d5:47:84:12:08:33:b2:1c:0a:c7:82:
ba:6d:a1:71:83:f1:41:a9:b8:20:3e:c1:93:b3:ed:46:c6:37:
06:6a:62:51:2c:2b:f3:b5:88:a3:c4:d6:c5:eb:2d:fc:39:ee:
65:44:70:bb:59:3b:41:80:cf:12:be:1d:e6:a6:cc:0d:8c:5f:
6e:9b:e5:f8:c8:1b:cb:74:16:2e:30:81:cc:c1:55:29:61:d8:
f8:00:01:d3:e4:62:26:33:7b:4c:50:07:e8:d4:bd:29:ef:73:
1a:30:36:71:32:fc:dc:06:7e:01:9f:60:c2:d4:33:15:04:b3:
6a:cb:a1:a0:3f:50:8d:5b:14:aa:da:0a:19:a5:7f:4d:3f:4e:
e1:84:81:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:39:57 2025 by rpki-client