Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/srKR5lEMjg5fxgY-JBnD9EYiUrk.roa
File: srKR5lEMjg5fxgY-JBnD9EYiUrk.roa (raw, json)
Hash identifier: WcePDOB/fKI0se9Hxrfqy6SkmPLS+m3eo1/4iebUK5M=
Subject key identifier: B2:B2:91:E6:51:0C:8E:0E:5F:C6:06:3E:24:19:C3:F4:46:22:52:B9
Certificate issuer: /CN=1a29b2a45de0136feabbfae4baa70172aa86619b
Certificate serial: 06A3B3AD
Authority key identifier: 1A:29:B2:A4:5D:E0:13:6F:EA:BB:FA:E4:BA:A7:01:72:AA:86:61:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/srKR5lEMjg5fxgY-JBnD9EYiUrk.roa
Signing time: Sat 01 Jan 2022 04:03:40 +0000
ROA not before: Sat 01 Jan 2022 04:03:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61201
IP address blocks: 193.36.189.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111391661 (0x6a3b3ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a29b2a45de0136feabbfae4baa70172aa86619b
Validity
Not Before: Jan 1 04:03:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b2b291e6510c8e0e5fc6063e2419c3f4462252b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:99:49:20:71:d2:58:ba:e5:48:68:31:a1:58:
aa:76:07:a1:e9:cf:21:2b:36:eb:9d:db:fb:05:b9:
c4:4d:f8:19:85:4d:24:b5:b8:75:ef:65:f0:7b:bb:
6a:2c:f2:bf:6f:bb:d3:14:62:ca:3b:40:7b:a4:72:
ed:64:4f:3d:51:ff:74:2c:13:1e:82:79:1e:b6:9b:
60:50:38:9f:b0:78:c9:1a:01:f7:67:27:5f:05:b6:
d7:bf:9b:7e:af:e6:c1:cc:8b:1f:57:1e:78:22:87:
c6:c7:74:64:1a:a0:55:b7:a5:da:11:c2:9a:7f:f9:
fe:c5:f7:15:91:ec:e3:8b:b4:8e:aa:3d:39:60:f3:
17:10:ec:ad:f0:92:2b:ec:aa:46:0f:fd:a9:e9:0a:
84:f3:92:f3:dd:95:4e:d3:7e:5c:59:7a:08:60:6f:
81:64:a7:a7:ae:04:ad:5f:ca:b9:04:2b:eb:38:ed:
e2:46:ac:25:aa:f9:0d:22:98:5d:dd:e2:56:03:81:
c6:88:a5:13:e6:1d:20:34:bb:9a:5f:99:1f:da:02:
6f:29:11:25:77:dd:bc:6e:9d:58:7e:4b:45:8c:12:
0b:39:65:16:41:71:3a:57:b0:29:b2:ff:a2:e6:65:
fa:f4:19:69:a5:5d:38:25:45:c0:26:46:2b:c2:8c:
f3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B2:91:E6:51:0C:8E:0E:5F:C6:06:3E:24:19:C3:F4:46:22:52:B9
X509v3 Authority Key Identifier:
keyid:1A:29:B2:A4:5D:E0:13:6F:EA:BB:FA:E4:BA:A7:01:72:AA:86:61:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/srKR5lEMjg5fxgY-JBnD9EYiUrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.189.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:5d:5d:87:e9:75:f3:63:a2:d2:06:58:a5:1f:a4:a1:6f:21:
f6:f2:92:8e:f0:4d:7c:76:3b:75:7f:ef:bd:99:5b:b8:9e:c4:
5c:2a:12:46:36:4c:97:36:5a:ff:26:3f:67:5d:c6:b5:2c:d5:
b2:e5:14:e7:27:fd:10:38:92:e3:d8:06:68:8b:1c:6f:0a:f2:
2c:a8:d1:b1:f1:be:29:3b:2d:8d:99:57:35:65:75:9a:9a:ba:
f1:03:e0:00:a1:9e:b5:c8:c8:b5:06:45:40:a9:d1:1d:50:92:
7b:76:14:c8:c7:28:37:25:d5:4c:e7:9b:2b:3b:31:f0:ce:99:
f2:80:79:45:79:0d:8f:4c:5f:ba:2c:0d:54:47:17:20:8d:9f:
8d:b4:c5:8d:b1:be:bd:d5:76:da:fc:09:7d:c2:d5:f4:02:18:
dd:25:cb:b0:25:03:80:5c:ad:3a:1a:18:68:95:49:94:80:92:
54:80:76:bd:d8:78:41:7b:6d:3b:5e:c6:b7:2b:c4:8d:20:6d:
f1:ed:16:e6:f9:30:25:f7:13:73:f2:87:8a:bf:f0:4f:48:da:
64:45:a6:3c:a1:28:4c:99:0f:d0:c3:37:40:12:b7:18:40:85:
45:31:d5:92:9b:e6:d3:5d:24:87:ac:11:49:b2:62:1d:b8:21:
d7:8d:c1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:26:05 2025 by rpki-client