Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/33684a-12c2-423a-bd3a-3ddffdeb9207/1/k6KzyT3GQC53v8PBvFtzWjX8SQQ.roa
File: k6KzyT3GQC53v8PBvFtzWjX8SQQ.roa (raw, json)
Hash identifier: ZUV3lVi7icnfbNsnHS3ySH1k6XQiittyxWLey+I8lqQ=
Subject key identifier: 93:A2:B3:C9:3D:C6:40:2E:77:BF:C3:C1:BC:5B:73:5A:35:FC:49:04
Certificate issuer: /CN=bdf960b0ee6bc5d0f6a0c64a69f2f86259fdcd58
Certificate serial: 050EFFC6
Authority key identifier: BD:F9:60:B0:EE:6B:C5:D0:F6:A0:C6:4A:69:F2:F8:62:59:FD:CD:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vflgsO5rxdD2oMZKafL4Yln9zVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/33684a-12c2-423a-bd3a-3ddffdeb9207/1/k6KzyT3GQC53v8PBvFtzWjX8SQQ.roa
Signing time: Sat 01 Jan 2022 08:06:15 +0000
ROA not before: Sat 01 Jan 2022 08:06:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49369
IP address blocks: 193.169.34.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84869062 (0x50effc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdf960b0ee6bc5d0f6a0c64a69f2f86259fdcd58
Validity
Not Before: Jan 1 08:06:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=93a2b3c93dc6402e77bfc3c1bc5b735a35fc4904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f3:ee:fb:97:43:02:b0:76:45:e4:6c:8b:71:
6e:12:81:c0:7c:8a:78:4f:d5:1e:ae:60:9f:63:b4:
80:40:36:18:82:30:9e:4c:1d:34:25:dd:6b:de:14:
c9:54:7e:b5:52:07:f4:50:e8:dc:24:a9:58:ac:6e:
44:52:0a:35:25:30:95:4e:6f:5f:72:c2:e9:3e:3a:
ba:91:94:e6:af:90:2a:29:ab:6a:10:53:a0:78:17:
dd:82:b0:2b:6a:e4:d6:69:5b:87:a4:72:1a:9d:26:
47:6a:57:29:3c:d6:ac:b9:ee:d2:86:db:56:b1:4e:
1b:0b:39:cd:45:84:87:a5:d9:4a:b0:1c:ec:ca:d3:
73:a9:df:69:67:9c:9a:45:97:c0:c2:f2:dd:b5:b5:
5d:36:ab:c8:b4:8e:b3:89:62:8d:32:d0:e5:fe:55:
a6:1a:88:22:bf:03:4f:26:cb:4d:fe:09:f4:5f:90:
62:b7:62:53:99:46:8e:f0:f7:f8:5d:47:57:93:4f:
4f:cf:1a:29:3b:07:e7:85:60:f2:84:b9:90:90:7d:
20:72:e9:7a:cc:4c:d7:f9:6c:d6:45:5e:8d:63:76:
42:ca:b1:d2:9a:7f:dd:7c:4a:62:ef:23:db:e3:e6:
dd:4a:f9:e3:66:6c:d8:db:18:c5:5c:6c:e5:13:0e:
34:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A2:B3:C9:3D:C6:40:2E:77:BF:C3:C1:BC:5B:73:5A:35:FC:49:04
X509v3 Authority Key Identifier:
keyid:BD:F9:60:B0:EE:6B:C5:D0:F6:A0:C6:4A:69:F2:F8:62:59:FD:CD:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vflgsO5rxdD2oMZKafL4Yln9zVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/33684a-12c2-423a-bd3a-3ddffdeb9207/1/k6KzyT3GQC53v8PBvFtzWjX8SQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/33684a-12c2-423a-bd3a-3ddffdeb9207/1/vflgsO5rxdD2oMZKafL4Yln9zVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.34.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:5a:f8:70:a7:57:7e:45:ef:c9:5e:be:bb:04:8d:b2:ae:c5:
82:0b:5c:ee:41:e5:a5:0d:db:c7:c1:bd:6c:ca:d5:84:5b:eb:
78:67:84:93:ad:29:f1:4f:f0:8c:4e:18:21:89:d2:c3:e6:4b:
4f:9f:78:49:9d:e9:1b:cc:b5:a2:12:12:d8:f5:d1:b9:2a:ac:
d7:a1:b2:1c:8f:65:20:8a:88:0e:05:5d:66:88:1e:34:67:8f:
e1:12:82:0d:da:7c:1a:03:34:81:4e:ab:8e:46:23:cd:a9:f9:
d8:5e:eb:f6:c2:20:0c:37:61:86:a9:f1:8a:d5:2c:03:1a:b4:
71:22:43:bc:ef:30:34:6f:f7:87:fe:e6:2e:7d:9b:b1:36:40:
56:0f:e9:62:fa:0c:db:3b:ca:89:c5:45:ae:bf:d7:7e:86:3e:
d1:c4:b2:0c:60:71:c2:c3:51:f7:e9:ca:c7:9a:e6:cd:66:3b:
24:45:18:a9:55:55:7b:4c:90:d0:4f:a7:a7:4a:d8:b4:86:90:
f5:96:57:54:cb:b4:cd:20:97:4b:a7:19:b4:43:2d:37:3b:f5:
40:59:3d:52:9d:65:ac:d4:c2:f7:17:c7:18:2e:0c:7c:e1:12:
b3:da:bd:3e:a1:83:10:f7:0a:6f:a5:63:c5:55:e4:8c:3d:48:
42:c7:47:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:28:33 2025 by rpki-client