Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/504bfb-2941-447f-9c5e-c0f9f3d66872/1/uCysnwrwWZiimSo-f6RAvGs11Uw.roa
File: uCysnwrwWZiimSo-f6RAvGs11Uw.roa (raw, json)
Hash identifier: VbpkoLA4I5hyhhUmq3ai27QqDnJzAXjjJwvRzBchYJ0=
Subject key identifier: B8:2C:AC:9F:0A:F0:59:98:A2:99:2A:3E:7F:A4:40:BC:6B:35:D5:4C
Certificate issuer: /CN=98b11161b9ed4bb08a0026d5cfd1fec9687c19c3
Certificate serial: 018924FE9189D9F82F4B69777293155F7817
Authority key identifier: 98:B1:11:61:B9:ED:4B:B0:8A:00:26:D5:CF:D1:FE:C9:68:7C:19:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mLERYbntS7CKACbVz9H-yWh8GcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/504bfb-2941-447f-9c5e-c0f9f3d66872/1/uCysnwrwWZiimSo-f6RAvGs11Uw.roa
Signing time: Wed 05 Jul 2023 07:40:10 +0000
ROA not before: Wed 05 Jul 2023 07:40:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208264
IP address blocks: 193.8.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:24:fe:91:89:d9:f8:2f:4b:69:77:72:93:15:5f:78:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98b11161b9ed4bb08a0026d5cfd1fec9687c19c3
Validity
Not Before: Jul 5 07:40:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b82cac9f0af05998a2992a3e7fa440bc6b35d54c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:11:60:b6:07:75:d2:60:72:a3:5e:f0:ba:72:
3a:26:68:c0:d9:66:0f:11:34:b4:5f:f8:e3:09:38:
52:cb:7e:28:24:4f:5c:b3:9e:3a:9d:b1:1e:58:41:
36:d7:50:60:45:f6:4d:0f:1d:8e:58:18:27:ac:c5:
e0:9a:6c:bd:60:3f:75:8b:92:88:03:4a:7a:7e:b7:
a0:1b:75:b1:31:c3:74:b6:21:63:60:9c:a4:4d:8a:
6d:53:63:68:e9:8b:77:a5:5c:c0:27:a1:7f:ce:12:
4b:52:46:17:f4:a8:5f:aa:79:86:21:22:8d:4a:33:
c7:f7:bb:27:fe:2b:92:f1:49:dd:ca:5b:23:f5:07:
c5:a0:1b:d1:24:e4:76:57:fc:d6:57:93:4f:9e:41:
e3:34:96:96:9f:2e:24:eb:42:6a:e7:28:4c:c3:17:
fa:cc:ac:5c:6d:e5:ef:8c:67:c3:36:0d:e9:2e:71:
92:42:d6:83:2c:5d:84:a1:49:7b:31:f2:c0:53:1e:
3b:b2:33:55:5f:ed:31:1a:d2:50:03:1d:7c:c7:48:
72:5a:5f:47:83:ac:3f:aa:a6:38:ee:0a:87:e2:30:
8d:ce:d2:2e:1a:0f:ac:d1:45:17:64:64:93:c3:ba:
70:a1:0a:73:eb:b2:61:23:0f:e5:f9:30:fe:6d:d7:
b9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:2C:AC:9F:0A:F0:59:98:A2:99:2A:3E:7F:A4:40:BC:6B:35:D5:4C
X509v3 Authority Key Identifier:
keyid:98:B1:11:61:B9:ED:4B:B0:8A:00:26:D5:CF:D1:FE:C9:68:7C:19:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mLERYbntS7CKACbVz9H-yWh8GcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/504bfb-2941-447f-9c5e-c0f9f3d66872/1/uCysnwrwWZiimSo-f6RAvGs11Uw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/504bfb-2941-447f-9c5e-c0f9f3d66872/1/mLERYbntS7CKACbVz9H-yWh8GcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.95.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:15:2b:77:e1:f7:7d:26:84:d4:ed:c3:d5:88:b3:67:86:a4:
dc:1e:04:b0:d3:b3:bf:f8:16:ed:2d:a8:41:89:08:05:73:54:
7c:96:4c:2c:c8:e0:cf:8d:c7:bc:64:d3:a3:84:e3:cb:44:d8:
5d:5d:5c:d6:b9:d2:f8:45:b1:0c:10:e0:9c:a6:24:f3:2f:5e:
30:61:63:79:5d:18:38:75:48:fd:85:a1:84:8b:3a:ec:b2:e2:
9f:7d:89:f7:96:b2:db:c1:4d:70:5a:bc:a9:0b:82:28:7b:5b:
ea:4a:aa:db:ba:bb:9c:47:28:05:e5:0c:46:f8:0c:ad:c4:46:
67:be:4f:f3:9a:cb:9d:8b:9b:c0:f6:9e:06:c5:37:a9:ec:98:
22:4e:d4:b1:ee:ee:c7:13:e9:f8:ca:c0:14:60:43:fd:9c:91:
57:17:68:22:45:41:ae:9f:62:36:b6:d2:93:b0:6a:35:2e:ee:
92:8e:9f:8d:48:5b:33:24:fa:72:c1:17:23:5c:bc:08:b1:01:
60:5d:aa:9e:b5:6d:f0:be:91:5f:24:f4:e3:10:ad:2b:b0:92:
78:5a:ae:97:01:49:f8:0d:58:3d:61:b3:2c:3e:80:b2:fb:be:
de:4b:cf:ff:fb:e8:97:92:0a:d2:6f:42:98:bd:be:c8:24:2b:
a7:99:23:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:33:01 2025 by rpki-client