Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/tioY1FAhezS6c4_gVQFWaxyYxJM.roa
File: tioY1FAhezS6c4_gVQFWaxyYxJM.roa (raw, json)
Hash identifier: uA4iGI3o8EmbU2z6MYpU0NCvX7l0O4qaKqjGI8uN24k=
Subject key identifier: B6:2A:18:D4:50:21:7B:34:BA:73:8F:E0:55:01:56:6B:1C:98:C4:93
Certificate issuer: /CN=9e9e6887ea7572a6411306c87b0cc089397a6354
Certificate serial: 03F23368
Authority key identifier: 9E:9E:68:87:EA:75:72:A6:41:13:06:C8:7B:0C:C0:89:39:7A:63:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/tioY1FAhezS6c4_gVQFWaxyYxJM.roa
Signing time: Sun 29 May 2022 13:07:14 +0000
ROA not before: Sun 29 May 2022 13:07:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49632
IP address blocks: 188.125.175.0/24 maxlen: 24
188.125.173.0/24 maxlen: 24
188.125.172.0/24 maxlen: 24
188.125.171.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66204520 (0x3f23368)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e9e6887ea7572a6411306c87b0cc089397a6354
Validity
Not Before: May 29 13:07:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b62a18d450217b34ba738fe05501566b1c98c493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:92:60:c7:82:08:8d:d0:79:d1:0e:e3:f7:90:
26:72:80:36:2d:81:9f:59:6b:bb:92:37:8d:d8:a4:
dc:f1:f8:40:f1:1b:cf:f0:bd:f9:5c:27:c0:96:aa:
5f:df:2b:cf:fa:90:d2:4c:c9:d5:6e:4d:70:39:d0:
aa:50:0e:fe:b6:bc:96:e7:2d:d6:5c:00:c0:ea:22:
39:ca:4d:cd:ff:49:25:cd:49:50:fd:e6:67:b6:78:
be:14:f5:e5:63:96:07:1d:8d:cf:fa:29:ee:02:b6:
3e:59:ac:c5:33:94:04:07:03:3b:34:36:a5:71:cd:
9f:be:23:66:ad:55:29:e0:7e:72:7d:0f:06:e4:99:
7f:a9:2a:e5:a3:88:d3:56:29:df:49:6d:6f:91:90:
51:aa:01:0a:91:ab:37:6e:95:8e:12:1d:c7:47:18:
21:2f:c3:40:a6:7e:1d:54:84:74:21:6f:67:ee:0b:
26:0d:a0:a8:45:35:72:e6:97:ff:82:68:f4:59:9c:
18:6b:7e:b7:ab:c3:4b:fc:ec:57:ce:7f:70:82:9d:
62:c0:f4:9c:37:ac:8c:8c:b9:3e:03:9d:f7:62:17:
f8:aa:3d:bd:b5:d3:e2:1c:d6:e5:c3:a4:04:98:8d:
a3:16:30:9b:a0:07:60:aa:fc:ff:22:ff:14:86:f0:
5c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:2A:18:D4:50:21:7B:34:BA:73:8F:E0:55:01:56:6B:1C:98:C4:93
X509v3 Authority Key Identifier:
keyid:9E:9E:68:87:EA:75:72:A6:41:13:06:C8:7B:0C:C0:89:39:7A:63:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/tioY1FAhezS6c4_gVQFWaxyYxJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.125.171.0-188.125.173.255
188.125.175.0/24
Signature Algorithm: sha256WithRSAEncryption
56:57:88:d1:c5:74:eb:bc:01:4c:72:b5:81:6a:0f:9d:7d:80:
da:11:f3:13:61:a9:b8:b7:5a:eb:7c:e5:2f:ad:91:8b:c1:b8:
89:d7:e6:c8:93:bf:be:cb:bc:ae:bb:cb:9e:17:e4:6b:f5:8e:
44:8e:61:6a:b2:58:ed:42:04:52:09:b6:5c:d6:24:95:68:30:
ac:53:ea:0f:6e:db:16:35:dd:8b:f9:83:61:fe:90:f7:a6:87:
3a:e7:64:db:c7:ac:36:cd:66:bf:53:51:cb:29:22:d4:28:e9:
b7:38:83:85:42:16:31:fb:3e:36:bb:89:ae:63:b2:33:74:84:
56:c2:a0:4f:e5:ff:47:0a:e5:35:45:40:24:f6:21:cf:65:8b:
2c:3d:ab:20:30:a5:8f:eb:02:92:5b:fa:ac:a0:e7:8c:6d:64:
24:20:36:e5:2e:ed:d5:91:19:37:29:f9:d8:99:10:77:c5:21:
46:ca:7b:43:3f:99:f8:45:81:86:17:6c:25:3d:16:e6:6c:3e:
69:94:ce:be:a4:05:a8:13:c8:37:0e:97:53:c6:c0:e4:f7:7c:
17:0b:9d:21:54:0e:c9:75:2e:d5:3a:f6:8a:aa:7f:08:a2:51:
11:8f:62:93:db:c2:f4:20:62:7a:73:50:d9:c9:da:0b:89:38:
ce:1a:04:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:19 2025 by rpki-client