Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/9lXVMw91RaD_kXCa8OUnnNL6SwM.roa
File: 9lXVMw91RaD_kXCa8OUnnNL6SwM.roa (raw, json)
Hash identifier: 6XF2WDZB+K9uNEfpTcTXOaVngYwPK8lnGYrmRSGp+8c=
Subject key identifier: F6:55:D5:33:0F:75:45:A0:FF:91:70:9A:F0:E5:27:9C:D2:FA:4B:03
Certificate issuer: /CN=3f96703f30e2099a3d9006bfa84e5c6c486a8d2e
Certificate serial: 02AB04DC
Authority key identifier: 3F:96:70:3F:30:E2:09:9A:3D:90:06:BF:A8:4E:5C:6C:48:6A:8D:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/9lXVMw91RaD_kXCa8OUnnNL6SwM.roa
Signing time: Fri 13 May 2022 11:15:40 +0000
ROA not before: Fri 13 May 2022 11:15:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15404
IP address blocks: 193.46.62.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44762332 (0x2ab04dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f96703f30e2099a3d9006bfa84e5c6c486a8d2e
Validity
Not Before: May 13 11:15:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f655d5330f7545a0ff91709af0e5279cd2fa4b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:02:d7:4a:fa:86:5d:a6:55:a5:f0:0a:65:c6:
4b:7c:1a:0a:f6:6e:db:ff:7f:b3:3d:78:f6:32:7f:
34:6e:57:ea:0d:50:ca:76:d6:ef:44:c6:2f:bb:42:
4a:cb:df:25:f2:4a:27:58:2b:2d:97:7b:76:ec:8d:
22:7d:3c:92:ed:29:d6:68:af:5d:a2:bf:06:80:ce:
a3:e7:d5:cf:22:d9:ed:d6:79:de:fa:f0:f2:3b:59:
c3:b9:96:cb:b4:92:94:17:49:06:c8:a0:0b:b2:85:
1c:50:82:9f:02:ee:ed:d8:d3:55:d8:b1:9e:8c:de:
34:71:0f:7d:37:6b:40:b8:7e:85:7a:c8:e1:12:95:
4c:b8:7c:bd:c5:20:04:5d:aa:d2:a2:65:9e:ee:b8:
64:be:ad:dd:9b:7f:06:04:6c:86:55:fb:fb:63:95:
82:41:28:99:72:cb:2e:b4:fb:9f:a9:f0:db:16:ed:
b4:1d:24:a0:4b:87:20:ca:ef:e1:98:82:c6:66:77:
d2:b6:96:85:99:f0:bc:6e:78:69:1b:ca:2e:1e:9d:
b4:f6:f5:7f:05:d4:1c:7a:43:75:22:77:21:d6:9d:
d8:67:f5:a5:cf:2b:60:1a:10:ec:48:94:19:b7:b3:
bd:67:e4:9e:d2:07:93:3c:5f:4c:14:ca:87:f0:70:
6a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:55:D5:33:0F:75:45:A0:FF:91:70:9A:F0:E5:27:9C:D2:FA:4B:03
X509v3 Authority Key Identifier:
keyid:3F:96:70:3F:30:E2:09:9A:3D:90:06:BF:A8:4E:5C:6C:48:6A:8D:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/9lXVMw91RaD_kXCa8OUnnNL6SwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.62.0/24
Signature Algorithm: sha256WithRSAEncryption
29:4a:4a:1e:f2:36:d2:7d:6d:61:23:5d:2d:4d:b5:f7:e9:f7:
6c:b3:a5:5d:34:e7:81:f5:cd:38:ca:ab:2a:79:32:79:4f:c7:
5e:ea:4d:33:47:f6:74:69:c9:15:dc:bf:73:5e:68:ce:10:09:
8a:2f:e5:8a:93:8e:e0:67:2c:84:45:79:11:d7:ad:2b:9b:1d:
54:26:0a:4f:0f:fe:19:92:9b:9d:39:dd:5f:1f:60:d3:71:9e:
41:f6:fa:43:29:23:a8:91:31:ca:87:9d:b4:d5:ed:59:87:a5:
d6:ca:84:8a:e5:16:65:d8:6e:27:17:88:59:48:32:8c:30:25:
ee:3e:33:12:55:79:b1:ad:59:c5:59:e3:85:93:0a:e0:f3:8f:
7e:eb:3c:eb:a7:90:31:86:ba:52:24:97:8d:5a:2f:35:2a:85:
28:be:9f:74:14:5c:03:7d:26:e0:df:af:0a:97:5e:1f:6b:4b:
cf:f8:f7:46:0d:57:8e:f2:98:05:ad:dc:98:e6:42:a0:28:34:
a1:83:4f:61:c3:25:b7:15:bf:e3:28:7b:62:8a:70:37:8e:76:
15:31:de:64:70:ee:27:f7:54:75:3d:53:8e:58:7a:11:75:00:
b2:d3:89:1d:2c:21:63:03:22:90:e4:28:55:cd:25:8a:b9:a8:
21:25:6a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:21:08 2025 by rpki-client