Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/iqY_c9eohjkBA4kM9eVurO9KVcE.roa
File: iqY_c9eohjkBA4kM9eVurO9KVcE.roa (raw, json)
Hash identifier: ZcxgGjQUnUHbjAiItUwJ4HHVxpMSF9GZ6SPvpVmdA1I=
Subject key identifier: 8A:A6:3F:73:D7:A8:86:39:01:03:89:0C:F5:E5:6E:AC:EF:4A:55:C1
Certificate issuer: /CN=b74ce3f3c5e5a2f9d8b8a4c77a8361f8a216f3ad
Certificate serial: 01857315F5D8DF4FA4B3BF70576DBCBE909C
Authority key identifier: B7:4C:E3:F3:C5:E5:A2:F9:D8:B8:A4:C7:7A:83:61:F8:A2:16:F3:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/iqY_c9eohjkBA4kM9eVurO9KVcE.roa
Signing time: Mon 02 Jan 2023 15:24:57 +0000
ROA not before: Mon 02 Jan 2023 15:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 194.99.96.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:15:f5:d8:df:4f:a4:b3:bf:70:57:6d:bc:be:90:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b74ce3f3c5e5a2f9d8b8a4c77a8361f8a216f3ad
Validity
Not Before: Jan 2 15:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8aa63f73d7a886390103890cf5e56eacef4a55c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0c:2c:c1:06:0e:40:31:44:55:86:fe:57:47:
b9:b8:0e:6f:f0:68:d0:b5:3c:7e:f5:45:e0:b0:b9:
68:49:43:a5:46:02:77:97:bc:b3:6c:52:c6:45:eb:
33:4e:7b:94:75:de:00:43:d5:86:5e:fc:ea:00:94:
8b:63:95:15:38:7f:69:7b:57:a7:b1:d8:cb:66:4c:
2b:88:4f:c6:22:68:23:d5:48:54:d4:7f:68:dd:cf:
55:9f:65:b9:a3:b7:b4:9a:dc:66:93:22:4d:4b:c0:
12:3e:3d:85:0c:63:3a:72:a6:92:52:7f:ef:98:52:
8d:cd:b8:2a:ae:60:53:e7:d1:a3:45:eb:c1:aa:92:
dc:d4:32:5d:a0:79:00:ff:8f:52:2b:39:0e:fb:12:
15:64:9d:7f:ee:26:af:63:63:ac:81:1b:8d:cc:5f:
09:b2:06:94:c6:46:3c:32:0f:39:c1:8a:83:4d:18:
e5:61:a0:a5:83:a2:88:d1:76:a7:ad:6d:dc:27:cf:
84:bd:af:91:23:e6:e5:ff:66:38:d5:ef:4d:a0:31:
92:9e:21:92:19:b0:e9:e7:b8:05:3e:77:b7:13:67:
bf:e6:48:dc:f3:c3:91:1c:aa:e4:e3:da:50:e2:19:
db:01:4c:05:15:f6:87:fc:d4:57:71:5d:83:bd:1c:
f9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A6:3F:73:D7:A8:86:39:01:03:89:0C:F5:E5:6E:AC:EF:4A:55:C1
X509v3 Authority Key Identifier:
keyid:B7:4C:E3:F3:C5:E5:A2:F9:D8:B8:A4:C7:7A:83:61:F8:A2:16:F3:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/iqY_c9eohjkBA4kM9eVurO9KVcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.99.96.0/23
Signature Algorithm: sha256WithRSAEncryption
83:b6:98:60:59:8f:42:c8:ff:4c:6d:9a:2b:a7:21:83:5a:9d:
fe:db:52:11:af:29:1a:0c:ee:4e:c1:e9:f8:00:20:16:c2:9a:
f5:f9:78:74:6b:66:9f:a3:2c:20:ce:be:2f:3c:97:83:62:53:
ee:26:70:fe:c6:8c:f5:b7:7e:64:8d:7a:74:06:3c:f5:d1:b9:
bd:9e:96:a9:90:33:ff:e9:cd:06:44:61:2c:70:5a:67:67:32:
80:ef:50:eb:14:2a:20:47:e8:c4:78:68:4a:f6:da:6b:73:7d:
0d:a3:4c:d1:f5:78:0b:00:2f:eb:48:b0:0b:1a:bd:49:cb:3f:
27:fe:08:b9:8d:16:bc:f0:f0:0f:18:fa:6b:ef:f1:e9:68:80:
a4:9c:98:ac:98:80:8e:34:f9:0a:52:50:fa:87:d6:e9:f2:28:
10:1e:f0:ac:4b:06:c7:ca:b0:04:71:9c:a2:83:a3:da:65:24:
9d:26:1c:ac:e2:db:f7:de:ea:5c:91:dd:6e:7e:5e:44:2e:e8:
f0:5f:80:1b:5e:db:09:a1:9b:5d:79:6b:be:4d:5c:20:36:f5:
28:96:db:39:a9:d2:25:6a:ae:b2:a5:c1:e7:54:d2:23:a0:0c:
43:6b:9e:8e:18:28:02:0e:18:81:2a:76:bb:40:71:35:d7:67:
63:c3:ff:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:41:36 2025 by rpki-client