Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/IX1wTHYzdqr6hpHJhEyWr1v9MiA.roa
File: IX1wTHYzdqr6hpHJhEyWr1v9MiA.roa (raw, json)
Hash identifier: dos6nIwLpRx2PSt1AYfZyc4lK768cYjhxVmQ1xyf9C8=
Subject key identifier: 21:7D:70:4C:76:33:76:AA:FA:86:91:C9:84:4C:96:AF:5B:FD:32:20
Certificate issuer: /CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Certificate serial: 01856F824405CDBE858DFCF6649C89513929
Authority key identifier: 9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/IX1wTHYzdqr6hpHJhEyWr1v9MiA.roa
Signing time: Sun 01 Jan 2023 22:44:45 +0000
ROA not before: Sun 01 Jan 2023 22:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39521
IP address blocks: 193.34.49.0/24 maxlen: 24
193.34.51.0/24 maxlen: 24
195.13.62.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:82:44:05:cd:be:85:8d:fc:f6:64:9c:89:51:39:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Validity
Not Before: Jan 1 22:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=217d704c763376aafa8691c9844c96af5bfd3220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f7:8b:cd:14:3f:fd:77:ec:b5:84:60:11:f8:
a6:02:55:f3:53:3d:b7:b1:13:73:6a:f3:11:ca:78:
51:bb:50:39:83:e0:41:60:19:80:6b:b2:a7:2b:40:
d9:a9:50:74:5c:f1:8d:63:d3:dc:3a:4e:98:c2:91:
3f:0f:f8:58:35:5c:e0:92:14:97:ab:8c:09:f7:ad:
99:c4:77:7f:39:0e:93:17:02:68:18:16:37:ae:19:
08:71:83:0c:e0:42:99:fe:9e:b1:a6:31:26:52:6c:
af:2c:8a:a4:f5:c7:92:38:54:1e:91:fb:96:33:77:
a9:a8:bb:77:cd:b1:47:aa:ed:ff:17:e2:6e:b3:51:
08:ad:69:3f:2b:47:ff:1d:8d:26:4e:b0:64:c7:fb:
b6:8b:56:0a:f1:29:c6:b9:87:7f:dc:f4:04:3d:1d:
0b:f4:a9:29:1f:2f:0c:44:4e:66:11:1b:09:da:5e:
70:38:bc:78:fe:47:c4:99:e5:09:33:a7:92:8d:f7:
a7:12:90:64:b5:ca:16:e9:36:97:37:d1:19:6a:73:
e6:ca:dd:4e:7e:59:31:7a:19:5e:63:ef:91:11:51:
7b:ff:2e:6b:64:4f:85:eb:29:3e:04:e0:1b:46:30:
d1:da:91:a1:b8:f6:5b:eb:f8:d6:1c:a2:0f:1c:46:
1a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:7D:70:4C:76:33:76:AA:FA:86:91:C9:84:4C:96:AF:5B:FD:32:20
X509v3 Authority Key Identifier:
keyid:9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/IX1wTHYzdqr6hpHJhEyWr1v9MiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.49.0/24
193.34.51.0/24
195.13.62.0/24
Signature Algorithm: sha256WithRSAEncryption
83:db:5c:33:d5:f7:db:07:41:bc:e5:49:58:c9:ed:92:57:b8:
8b:c4:16:16:76:e0:1b:16:e7:39:7f:11:4d:03:95:16:7f:23:
19:80:c6:b4:a2:40:5b:45:e9:bd:2d:0d:bb:4c:1d:06:96:24:
35:4f:79:89:7b:4c:8d:1e:c3:9e:18:46:d5:c2:29:86:ce:b6:
d6:bf:57:fc:ce:87:46:c0:98:29:fa:0b:f0:c8:05:09:96:d2:
14:48:d1:c0:22:0b:6e:e3:05:51:24:2f:48:73:5d:79:b3:e9:
a8:65:49:a7:75:00:62:3c:d4:5b:dd:9a:b9:c2:52:28:fa:15:
16:71:ee:43:b6:a0:46:59:2a:c2:19:dd:15:ae:ac:7c:c7:4d:
8e:a1:6e:19:91:fc:8f:3c:f6:14:ab:93:28:78:9a:7a:59:74:
05:0a:89:5c:6b:d7:97:bd:3f:90:53:2c:04:c5:98:ca:02:ec:
32:02:e0:fc:72:99:23:29:58:0c:68:79:ec:08:29:19:b6:ba:
18:f1:24:87:c7:76:75:4d:a5:20:3e:39:5f:c3:85:fe:5b:8c:
29:64:1e:11:11:b2:d8:fb:a1:2d:db:95:30:00:d6:49:f0:72:
41:4c:c2:8f:31:e3:3d:68:b2:b5:25:2c:c1:8c:56:d2:ac:38:
0a:db:d1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 02:41:58 2025 by rpki-client