Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/1t9xgcircvJOAdFezZCWeX60NCk.roa
File: 1t9xgcircvJOAdFezZCWeX60NCk.roa (raw, json)
Hash identifier: PY77ePYYtISDwopAxGNWGIA8xOhqUTF1JFloTKU0s+g=
Subject key identifier: D6:DF:71:81:C8:AB:72:F2:4E:01:D1:5E:CD:90:96:79:7E:B4:34:29
Certificate issuer: /CN=60096e374092cc300bd0bb06c41640932ecf8b49
Certificate serial: 01857102F4A270E02126430D9E4B86C697A5
Authority key identifier: 60:09:6E:37:40:92:CC:30:0B:D0:BB:06:C4:16:40:93:2E:CF:8B:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAluN0CSzDAL0LsGxBZAky7Pi0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/1t9xgcircvJOAdFezZCWeX60NCk.roa
Signing time: Mon 02 Jan 2023 05:44:57 +0000
ROA not before: Mon 02 Jan 2023 05:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15598
IP address blocks: 193.238.27.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:02:f4:a2:70:e0:21:26:43:0d:9e:4b:86:c6:97:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60096e374092cc300bd0bb06c41640932ecf8b49
Validity
Not Before: Jan 2 05:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6df7181c8ab72f24e01d15ecd9096797eb43429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:57:3d:0c:5a:f6:f4:d2:a0:92:9e:18:bb:4b:
13:36:7d:d8:df:26:84:22:ac:14:c0:e2:26:63:c8:
dd:b4:b0:43:ca:f4:f1:89:93:92:ce:50:f0:cb:6c:
20:8a:90:d5:99:07:5d:4c:dc:52:cb:0a:a0:2e:fd:
b9:3c:fb:aa:e8:14:45:9c:d8:6e:76:71:6b:36:a7:
e6:91:14:5c:dc:ed:5c:8c:42:4a:7e:8a:f3:22:82:
f1:a2:0e:5b:73:41:a6:9d:a0:04:1c:c5:cd:ac:20:
c6:e7:1c:da:7d:b9:6c:d9:50:36:85:15:ca:f6:b9:
ca:97:df:c0:14:4c:67:09:e3:7a:e6:d2:b5:f8:d2:
7a:d4:04:8b:7a:35:e8:9d:51:e1:b8:62:ad:71:ff:
2b:2b:93:49:a0:06:2b:55:20:fe:2e:37:e7:fc:84:
6a:d5:7c:f8:fc:42:27:99:6c:ef:69:f4:d2:40:af:
5e:5e:f1:b0:7b:a7:b2:f6:c2:92:38:61:00:1c:20:
9c:6c:31:b7:31:ca:f9:5a:55:ad:4f:9d:c4:8c:60:
df:22:5e:b6:6d:89:cf:1f:6c:69:bb:a7:43:e9:06:
35:0a:b1:d3:8f:31:37:1e:80:df:b8:05:0d:b1:6b:
8f:e6:d7:b2:7a:f9:6d:fc:07:15:90:e2:c2:b5:d3:
f5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:DF:71:81:C8:AB:72:F2:4E:01:D1:5E:CD:90:96:79:7E:B4:34:29
X509v3 Authority Key Identifier:
keyid:60:09:6E:37:40:92:CC:30:0B:D0:BB:06:C4:16:40:93:2E:CF:8B:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAluN0CSzDAL0LsGxBZAky7Pi0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/1t9xgcircvJOAdFezZCWeX60NCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.238.27.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:e5:30:96:fc:e1:f9:3e:d8:97:c0:f3:84:eb:91:16:86:41:
26:29:e6:88:b1:f2:e9:f8:d1:27:da:62:0e:cb:e8:31:86:a1:
ea:07:dc:f7:40:8c:fa:0b:db:66:5c:2a:fc:84:41:3d:e5:4d:
7d:69:51:2b:53:ac:3b:de:10:29:97:92:7e:a2:30:4f:77:a2:
9f:21:59:be:65:91:77:e4:f2:ef:a1:93:21:29:33:d4:ce:2c:
3f:2d:8c:52:cc:13:d5:e6:77:29:67:73:a0:a2:87:ea:ce:3a:
ee:35:26:0a:61:06:5a:d2:10:7b:1b:ab:a3:f0:34:1c:b1:d4:
09:88:7f:75:8d:62:12:bd:ba:23:bf:34:0e:6f:a0:22:e6:21:
09:fd:c1:fd:01:8f:b7:58:7e:a6:54:70:06:69:94:d5:74:a5:
61:1c:dc:da:87:2a:de:ce:11:19:26:a8:da:ad:36:ff:2f:3c:
df:79:f6:7d:4f:66:a3:76:d5:ca:86:fc:79:b4:32:58:12:55:
79:d9:b9:4c:a5:38:f3:47:4a:da:d8:c3:ed:73:11:1d:4c:49:
d7:7b:28:05:9a:d6:79:81:a8:ab:08:89:d4:4c:1c:cd:31:f4:
94:ba:d6:bb:fa:c8:f2:9d:f2:ee:ff:97:43:56:f1:7d:e6:19:
26:fb:c7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:04 2025 by rpki-client