Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/SieBd-44r9DO_1URT8W-peOcBqU.roa
File: SieBd-44r9DO_1URT8W-peOcBqU.roa (raw, json)
Hash identifier: TY4GV+qs7yrnaxocHmZEfuLmT84qtfIO8VrlIHwqxYQ=
Subject key identifier: 4A:27:81:77:EE:38:AF:D0:CE:FF:55:11:4F:C5:BE:A5:E3:9C:06:A5
Certificate issuer: /CN=0d4ee193b301665b56f6780f225fd44d144093af
Certificate serial: 01856F0249ABFA5FAAEC06F30115E0B759D0
Authority key identifier: 0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/SieBd-44r9DO_1URT8W-peOcBqU.roa
Signing time: Sun 01 Jan 2023 20:24:58 +0000
ROA not before: Sun 01 Jan 2023 20:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207969
IP address blocks: 193.236.96.0/24 maxlen: 24
2001:694::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:49:ab:fa:5f:aa:ec:06:f3:01:15:e0:b7:59:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4ee193b301665b56f6780f225fd44d144093af
Validity
Not Before: Jan 1 20:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a278177ee38afd0ceff55114fc5bea5e39c06a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b9:3a:a8:aa:e0:7b:ac:7b:09:6e:c9:66:25:
aa:92:40:ce:84:81:71:64:68:90:51:f0:86:d9:a5:
5e:ce:c9:d9:4e:70:41:ee:88:11:5c:d0:8d:cc:c5:
23:5e:2d:6a:5e:34:94:f7:72:e5:5e:df:45:35:23:
06:db:2b:64:2e:94:c3:4e:c6:51:32:ee:ff:d9:59:
fc:93:cd:87:d8:ba:ec:f6:44:10:a1:ff:ce:20:7f:
4a:34:ba:44:ba:e6:6c:78:ad:a9:09:17:dc:34:6a:
7f:ad:b0:66:f4:b8:96:4b:f8:b2:f3:5f:d2:6f:6f:
46:8b:5c:7d:f1:ef:b7:ee:fd:9d:1d:2c:61:e9:f6:
a7:de:e8:a7:a2:24:d0:f5:60:a3:e0:b2:47:23:11:
70:a8:54:fe:7e:8c:f7:4f:c4:e7:3d:25:81:7f:4d:
02:e2:27:fe:e3:80:05:b8:66:f6:09:43:c4:69:be:
cc:59:a6:e5:f8:f6:0f:9d:d2:8a:03:a7:30:8a:55:
8c:4d:66:8a:5a:84:a1:11:9b:f7:f2:a3:c6:7b:08:
44:4a:c4:40:89:73:5a:18:b2:2a:88:72:a5:9e:cb:
c7:c4:2b:2f:4f:bc:60:34:8c:26:7d:ad:ca:dc:c2:
b3:d8:0a:4d:74:7c:75:05:42:1e:25:8e:cc:c8:1f:
25:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:27:81:77:EE:38:AF:D0:CE:FF:55:11:4F:C5:BE:A5:E3:9C:06:A5
X509v3 Authority Key Identifier:
keyid:0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/SieBd-44r9DO_1URT8W-peOcBqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.236.96.0/24
IPv6:
2001:694::/48
Signature Algorithm: sha256WithRSAEncryption
64:7c:9a:fd:b1:d8:3e:e4:4d:f2:b1:a5:d2:46:16:3d:e4:e7:
84:be:12:33:aa:63:ff:88:0c:d8:20:a9:18:83:fa:a7:c6:f2:
35:7e:c3:e2:dd:2a:96:b8:a3:b6:48:e6:55:92:38:5f:33:f0:
c3:34:8d:6a:0a:54:02:91:16:bc:8e:bb:05:40:5c:3b:49:eb:
69:cd:20:e6:06:ff:ff:b7:92:c0:b9:64:6d:a4:dc:2d:e4:de:
8e:68:82:4e:73:9a:59:ad:67:23:a2:ff:f1:a2:37:8a:b2:72:
b4:ea:e4:6c:78:f8:09:d2:14:95:8a:1a:ad:30:20:09:70:ce:
ed:65:1a:64:76:dc:8c:dc:42:9e:f4:97:ff:06:65:5f:9b:61:
50:48:d4:67:ac:de:7a:97:61:30:cb:3f:bc:40:53:93:26:cf:
10:90:7d:5a:09:01:d2:c5:82:99:69:57:98:56:80:51:45:b4:
06:f0:99:30:bf:5f:c6:52:40:e5:f7:14:0c:a4:6b:dd:58:7e:
e2:99:89:17:c1:30:c5:c1:c9:46:ba:90:cc:90:3b:26:6f:2e:
7d:2f:c7:a6:99:ff:1d:9a:50:d1:a2:f8:0d:79:2c:a2:d5:42:
b3:57:47:b7:cd:65:04:89:8d:fc:1c:cc:57:25:0d:d5:3e:af:
f1:8b:04:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 01:25:25 2025 by rpki-client