Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/rpmLXIxjucp66AEtWGXg6feq5GM.roa
File: rpmLXIxjucp66AEtWGXg6feq5GM.roa (raw, json)
Hash identifier: vzxftMkUYyqDnxilwvm8jvH1imlS/ynw57DvF8eB3v4=
Subject key identifier: AE:99:8B:5C:8C:63:B9:CA:7A:E8:01:2D:58:65:E0:E9:F7:AA:E4:63
Certificate issuer: /CN=2ab32a51f01880f48415691b6008b8f3699c343d
Certificate serial: 08AC5162
Authority key identifier: 2A:B3:2A:51:F0:18:80:F4:84:15:69:1B:60:08:B8:F3:69:9C:34:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KrMqUfAYgPSEFWkbYAi482mcND0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/rpmLXIxjucp66AEtWGXg6feq5GM.roa
Signing time: Wed 23 Feb 2022 10:25:11 +0000
ROA not before: Wed 23 Feb 2022 10:25:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209994
IP address blocks: 193.176.88.0/22 maxlen: 24
2a0e:e900::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145510754 (0x8ac5162)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ab32a51f01880f48415691b6008b8f3699c343d
Validity
Not Before: Feb 23 10:25:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ae998b5c8c63b9ca7ae8012d5865e0e9f7aae463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:aa:82:6a:86:c7:a5:a9:65:ce:0f:21:07:8c:
d2:ed:3b:6b:61:40:0e:00:37:70:84:e9:11:e5:73:
60:30:1d:58:0b:10:f8:ae:67:7d:2d:c5:81:aa:ab:
0e:c2:8a:44:42:5c:cc:b4:75:dc:9a:b2:d7:35:ff:
00:68:7f:4f:ff:27:0c:dc:cf:ce:6c:a6:c1:ca:d6:
ff:91:c4:e2:3d:bf:77:76:8a:19:12:04:78:26:f6:
2b:da:1f:eb:9e:1f:4c:57:e4:84:83:7f:69:7f:de:
fb:e6:15:0b:79:d4:0b:e0:42:67:70:6f:6a:e8:dd:
2f:48:d0:e9:34:49:6e:1d:fa:f7:f8:9e:9a:0d:f2:
0e:09:69:05:98:8a:93:3a:36:ec:6e:4e:85:52:a4:
e0:5a:09:65:cf:32:49:83:e7:fa:2c:1a:c6:5d:fe:
3d:be:3f:8c:bd:7f:3a:bc:e9:2f:37:a7:26:32:58:
31:41:80:73:82:d7:04:b4:b4:ab:87:10:01:bc:02:
98:a1:b5:b6:4e:69:0e:bf:15:57:8c:e1:cb:ea:75:
18:58:4f:a1:02:a2:d5:ec:36:d4:8a:cc:86:6d:6a:
2d:b8:ed:96:4e:6d:e0:9d:43:a1:29:f6:a0:2e:2e:
46:98:2e:af:53:b1:13:85:8d:df:ce:5c:aa:30:2a:
65:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:99:8B:5C:8C:63:B9:CA:7A:E8:01:2D:58:65:E0:E9:F7:AA:E4:63
X509v3 Authority Key Identifier:
keyid:2A:B3:2A:51:F0:18:80:F4:84:15:69:1B:60:08:B8:F3:69:9C:34:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrMqUfAYgPSEFWkbYAi482mcND0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/rpmLXIxjucp66AEtWGXg6feq5GM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.88.0/22
IPv6:
2a0e:e900::/29
Signature Algorithm: sha256WithRSAEncryption
7e:db:8b:74:37:d4:ba:e1:b4:cf:99:a3:15:d7:10:bf:2b:7b:
07:a8:30:77:6d:d7:25:dc:74:52:38:55:46:ec:91:2f:58:ff:
91:0e:73:67:6c:ab:42:50:8c:ab:6f:17:71:d4:30:7c:12:e1:
0b:e9:96:39:95:03:3c:e2:7f:93:99:02:e5:bb:57:38:02:1c:
21:42:38:f6:4b:24:56:29:c8:96:5f:4e:ff:fe:1d:5b:a9:24:
8b:c8:5a:da:f2:d5:94:06:87:34:27:39:c7:06:c8:83:07:5a:
ea:fe:bf:a8:0e:bf:31:16:17:c1:66:2e:75:b4:04:40:b3:c9:
76:4b:96:4c:1c:0f:eb:16:9c:cf:0c:43:7a:1c:08:12:67:d1:
2a:ff:4a:b9:4c:9f:ef:66:f4:c5:0c:76:16:72:4b:e7:36:5f:
2a:ad:b3:83:94:c6:2f:7a:67:c2:7c:5f:c0:74:fb:c5:61:45:
c5:c0:d8:e3:32:7a:44:b7:00:30:c6:a3:69:a1:32:68:97:13:
36:3e:c8:bf:1a:aa:73:63:83:e9:ea:fe:8c:25:b4:bd:a6:69:
71:26:8f:be:99:59:f1:71:3a:73:91:39:df:1a:e8:9d:c4:0b:
5e:6d:9d:ef:9d:cc:bc:a8:2d:71:e7:db:36:8c:b8:50:9d:46:
f8:72:fb:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:56 2025 by rpki-client