Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/pUz-XiOCUoqT_E7qkA3XjKZoUEA.roa
File: pUz-XiOCUoqT_E7qkA3XjKZoUEA.roa (raw, json)
Hash identifier: FgH8E73Wmd3EphI1Zv6RPyh4UeyOylRfhMYe9CucX3k=
Subject key identifier: A5:4C:FE:5E:23:82:52:8A:93:FC:4E:EA:90:0D:D7:8C:A6:68:50:40
Certificate issuer: /CN=1a29b2a45de0136feabbfae4baa70172aa86619b
Certificate serial: 018726BE458C33CAE65D19831B9FFF0E7C1A
Authority key identifier: 1A:29:B2:A4:5D:E0:13:6F:EA:BB:FA:E4:BA:A7:01:72:AA:86:61:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/pUz-XiOCUoqT_E7qkA3XjKZoUEA.roa
Signing time: Tue 28 Mar 2023 05:43:36 +0000
ROA not before: Tue 28 Mar 2023 05:43:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61201
IP address blocks: 193.36.189.0/24 maxlen: 24
2001:67c:91c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:26:be:45:8c:33:ca:e6:5d:19:83:1b:9f:ff:0e:7c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a29b2a45de0136feabbfae4baa70172aa86619b
Validity
Not Before: Mar 28 05:43:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a54cfe5e2382528a93fc4eea900dd78ca6685040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:30:d6:03:f5:23:90:e3:d6:ec:f6:b5:0a:fb:
34:b5:26:ce:56:ba:e8:b9:b9:ef:74:72:87:f1:f3:
63:ee:06:e8:cd:d3:90:e4:05:be:bc:b8:b7:f3:cf:
7f:05:1b:bd:82:a6:c5:8f:0b:35:80:25:17:df:d2:
8f:c4:97:db:51:14:62:7b:93:d9:e1:60:6a:94:d1:
5e:92:0b:68:87:02:fd:fa:45:2c:60:05:05:cb:02:
46:a2:88:44:d7:18:65:87:a8:49:6a:56:fc:22:8d:
61:e5:c7:fc:04:52:1d:2c:df:84:8c:69:fc:e8:ef:
1b:c8:70:64:48:78:a8:9a:b6:e5:d4:75:44:76:a5:
8f:66:c5:94:ac:bd:8b:f2:26:fa:05:5c:ee:2c:c5:
d4:6f:6b:43:93:b0:71:fe:9b:1a:b8:72:c9:bf:ff:
fa:92:c0:92:c8:cf:a2:81:94:00:22:4c:0b:27:17:
45:c3:cd:c9:dc:8e:29:6e:96:d5:fb:8d:95:65:f7:
61:28:39:3c:c5:6c:33:1c:74:cb:53:85:ef:c9:26:
89:4a:a1:fe:f2:83:7e:11:f6:e2:d2:f3:3a:50:84:
32:3d:06:8b:52:05:33:c2:40:00:96:67:e2:fd:e3:
9a:ee:b7:9c:fe:45:d7:2b:49:45:9d:f4:bd:a0:7f:
86:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:4C:FE:5E:23:82:52:8A:93:FC:4E:EA:90:0D:D7:8C:A6:68:50:40
X509v3 Authority Key Identifier:
keyid:1A:29:B2:A4:5D:E0:13:6F:EA:BB:FA:E4:BA:A7:01:72:AA:86:61:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/pUz-XiOCUoqT_E7qkA3XjKZoUEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.189.0/24
IPv6:
2001:67c:91c::/48
Signature Algorithm: sha256WithRSAEncryption
78:1f:b2:21:d5:49:a2:68:93:a8:e6:9e:98:79:61:f2:43:15:
df:97:0f:cd:cd:c6:16:f9:ce:16:83:5f:a0:54:cb:7e:78:bd:
f1:a7:a1:d7:3f:58:78:b7:87:cd:26:4a:fe:8d:09:3e:5d:44:
5a:22:cb:fb:12:ab:ac:cb:66:c2:86:ed:d7:b2:2d:e8:54:32:
49:d4:6e:dc:77:48:38:0a:a9:0c:5a:0c:84:b1:61:94:3c:87:
f9:b7:e4:37:ec:6d:bc:6e:d3:b4:a3:ca:70:e1:46:30:84:93:
60:a1:e4:28:db:ba:57:51:8a:a6:0d:58:42:e1:91:24:85:e3:
f2:a3:87:c2:fe:ce:14:7d:1e:c7:11:f6:31:f4:25:6a:b6:45:
01:3c:c8:40:1f:1b:eb:f1:b6:0a:a7:61:39:9f:5b:2e:a2:1c:
17:0b:a4:24:5c:df:dd:52:d5:85:ef:7e:e0:cc:c4:69:e0:c3:
e8:4e:cb:2d:1f:47:ff:dc:d1:7f:ee:d8:a5:d9:44:d4:f3:50:
75:1b:81:47:50:67:c9:94:df:01:f3:e7:8a:3e:3d:d1:a0:73:
80:18:f5:92:a1:83:da:fa:99:79:ec:62:15:13:52:38:45:9c:
c1:ee:2f:de:05:d7:62:15:ac:54:91:28:2c:45:8c:7f:8a:58:
f4:ff:69:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:26:04 2025 by rpki-client