Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/CNEeN76zaaU7a3ms3uIJGDfzItE.roa
File: CNEeN76zaaU7a3ms3uIJGDfzItE.roa (raw, json)
Hash identifier: DmWsKOaBj/lReb31ewYRbSb7rGgeP2R/oMjA8cPUeZc=
Subject key identifier: 08:D1:1E:37:BE:B3:69:A5:3B:6B:79:AC:DE:E2:09:18:37:F3:22:D1
Certificate issuer: /CN=0b5caf262fdbfcc5ff30e28a5104646e27a89262
Certificate serial: 0185728C88FD4A33A3C63CDD5EDE54A1FDA6
Authority key identifier: 0B:5C:AF:26:2F:DB:FC:C5:FF:30:E2:8A:51:04:64:6E:27:A8:92:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/CNEeN76zaaU7a3ms3uIJGDfzItE.roa
Signing time: Mon 02 Jan 2023 12:54:50 +0000
ROA not before: Mon 02 Jan 2023 12:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12859
IP address blocks: 193.247.196.0/23 maxlen: 23
2a05:b2c0::/31 maxlen: 31
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:8c:88:fd:4a:33:a3:c6:3c:dd:5e:de:54:a1:fd:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5caf262fdbfcc5ff30e28a5104646e27a89262
Validity
Not Before: Jan 2 12:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=08d11e37beb369a53b6b79acdee2091837f322d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:04:75:a7:6d:59:2c:67:94:24:11:9a:b1:ea:
82:ff:f4:63:57:39:7f:f5:d9:27:24:ec:3d:40:af:
9f:b5:c8:f6:81:5f:4d:bb:77:e9:b8:e9:76:0b:55:
c7:0f:3f:56:e9:29:44:d8:a7:8d:39:f1:e2:c9:39:
64:34:e7:43:83:81:17:d8:b9:58:e6:79:cb:d8:3d:
71:c6:3e:3a:d5:90:9b:a4:97:88:ee:82:06:a6:b9:
f6:1f:4a:df:82:9e:43:e3:b2:5d:e0:e0:53:22:b2:
1c:29:48:3b:40:7f:bc:89:c9:1e:03:ed:9a:db:34:
9b:c4:3b:c2:33:ac:96:33:c0:d3:c6:2c:fa:e4:c9:
34:f2:c6:34:b4:28:b1:0a:28:0a:a2:ca:ff:7f:2f:
fe:2e:bc:21:56:98:fd:17:3f:09:31:a8:c0:84:0b:
36:dc:21:4c:96:15:44:f7:dc:28:62:12:59:d7:77:
49:2b:28:ce:88:5a:69:f0:21:8d:be:13:5a:0e:fb:
b1:6b:de:df:f3:cc:38:16:53:cf:0a:24:f1:91:74:
4c:dd:01:fa:a1:4f:0e:79:d0:1d:d1:21:b5:08:bb:
7b:3e:a2:b5:c1:ba:3d:d9:93:af:54:48:94:c2:6d:
2d:22:1c:d0:39:3b:6b:e9:4f:8e:cc:71:1f:ed:94:
b6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D1:1E:37:BE:B3:69:A5:3B:6B:79:AC:DE:E2:09:18:37:F3:22:D1
X509v3 Authority Key Identifier:
keyid:0B:5C:AF:26:2F:DB:FC:C5:FF:30:E2:8A:51:04:64:6E:27:A8:92:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/CNEeN76zaaU7a3ms3uIJGDfzItE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.196.0/23
IPv6:
2a05:b2c0::/31
Signature Algorithm: sha256WithRSAEncryption
54:75:36:6c:52:aa:0a:43:0e:1c:56:03:56:94:7b:45:89:9c:
e9:3f:b3:df:37:3d:98:6c:ff:fa:35:6a:8c:ca:6a:dc:34:b4:
9d:7d:01:d9:e0:0e:ff:77:d4:42:9a:40:7e:b2:6b:0c:d3:a8:
64:c3:4d:9a:0f:59:2b:b4:ec:7a:11:af:bf:6c:0c:27:02:8a:
23:95:ec:62:90:7a:1a:4d:1f:11:c9:69:51:c9:07:39:24:eb:
a2:01:6a:51:a7:55:ec:4c:23:a0:57:6b:69:bb:ba:7c:fa:7c:
d2:3f:2f:8c:bd:a8:ca:5a:13:c5:48:08:2d:16:2d:4f:b5:0d:
bd:00:ec:e9:43:88:61:df:a0:88:e2:c2:72:5c:f7:fb:eb:5b:
59:80:e7:18:f4:32:6f:62:e4:bb:aa:88:b2:c5:78:aa:e7:35:
fc:37:59:be:df:28:7c:bf:08:dc:af:f1:70:d9:65:dd:b1:71:
02:22:5d:e6:c9:9d:56:82:21:8e:b6:4a:29:11:99:51:56:99:
9b:07:30:fc:e6:ad:6c:90:e5:34:0f:77:da:09:f6:17:cf:7b:
c4:31:96:e7:be:37:1e:13:57:6a:d8:cc:2f:d5:08:b7:9e:f7:
40:89:da:cc:14:24:0c:e3:86:01:ed:4f:de:03:8a:63:36:f1:
a0:92:21:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:40:24 2025 by rpki-client