Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/9skVXmTzAwwJGcWb_dXnDtKTPrs.roa
File: 9skVXmTzAwwJGcWb_dXnDtKTPrs.roa (raw, json)
Hash identifier: L3gjj756uTs/fYN7oZMMOpxf9VE1IeEe9FCkoCWnhhY=
Subject key identifier: F6:C9:15:5E:64:F3:03:0C:09:19:C5:9B:FD:D5:E7:0E:D2:93:3E:BB
Certificate issuer: /CN=97d9ef7bd30324dedf70bace4bbda5760c326b1a
Certificate serial: 7063D3
Authority key identifier: 97:D9:EF:7B:D3:03:24:DE:DF:70:BA:CE:4B:BD:A5:76:0C:32:6B:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l9nve9MDJN7fcLrOS72ldgwyaxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/9skVXmTzAwwJGcWb_dXnDtKTPrs.roa
Signing time: Sat 01 Jan 2022 02:58:13 +0000
ROA not before: Sat 01 Jan 2022 02:58:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203637
IP address blocks: 185.127.190.0/24 maxlen: 24
185.127.189.0/24 maxlen: 24
185.127.188.0/24 maxlen: 24
185.127.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7365587 (0x7063d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97d9ef7bd30324dedf70bace4bbda5760c326b1a
Validity
Not Before: Jan 1 02:58:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f6c9155e64f3030c0919c59bfdd5e70ed2933ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ef:de:f4:f2:53:72:f9:d7:d9:be:4f:27:9a:
73:2e:0a:83:e4:05:a9:ed:46:cd:71:f3:3e:c1:45:
f8:d1:84:8f:97:e7:86:26:3f:22:61:11:23:f5:a6:
6b:22:a5:67:6b:bd:00:3d:5a:cb:c9:17:bb:e9:5c:
b1:b8:95:06:99:fb:46:99:22:77:21:90:48:b3:13:
22:78:18:56:0d:c3:46:f8:12:91:4b:c7:88:ea:6c:
ea:da:5b:d9:e0:8d:7e:c5:65:61:87:d0:07:02:f0:
dc:39:78:2f:ae:07:b7:d8:65:71:e0:d1:15:ee:50:
7a:30:17:53:43:86:cf:b9:54:1d:e3:43:73:54:17:
8d:c7:e8:20:70:26:eb:53:a0:03:fc:ec:30:32:70:
a8:6d:b8:ef:c6:49:47:3d:bc:d4:ba:e1:3e:82:e0:
2d:cd:2c:a6:1b:92:42:39:40:30:7d:cc:a6:86:05:
e0:a8:92:38:ac:c3:83:20:f1:d8:2c:0d:af:2f:2c:
c3:f5:39:ca:15:c4:37:e0:68:1d:eb:d6:6d:0f:de:
58:57:d2:fb:ed:14:e8:ed:d4:cc:c1:d4:b5:93:8a:
a1:c0:ae:b1:5e:e3:94:82:27:53:05:5e:ce:f2:77:
63:62:10:f7:95:ca:ea:ae:83:13:7d:da:89:76:c4:
19:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C9:15:5E:64:F3:03:0C:09:19:C5:9B:FD:D5:E7:0E:D2:93:3E:BB
X509v3 Authority Key Identifier:
keyid:97:D9:EF:7B:D3:03:24:DE:DF:70:BA:CE:4B:BD:A5:76:0C:32:6B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9nve9MDJN7fcLrOS72ldgwyaxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/9skVXmTzAwwJGcWb_dXnDtKTPrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.188.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:29:54:ef:d3:4b:35:a9:dc:b6:08:08:8b:84:17:33:be:dd:
91:e0:e7:e9:ae:09:cc:aa:c0:b4:00:ab:2a:44:0c:6e:67:73:
dd:ca:30:9a:34:db:00:3d:4d:8b:5c:1a:58:90:fc:ba:dd:62:
21:12:18:91:b6:f4:44:d5:6c:a8:72:47:7d:27:df:15:54:e0:
13:13:0d:59:3d:2f:e6:e5:b5:ed:e1:a8:b6:80:e3:f0:d6:b9:
42:a6:74:42:59:69:61:8b:d6:d1:d3:3f:98:ff:3a:08:50:54:
9b:fb:df:dd:3c:57:53:09:f7:de:67:c2:ca:af:4e:72:55:14:
b3:20:b7:05:af:7e:95:8c:e7:52:cb:cd:bc:ca:37:41:fe:8f:
4d:11:c9:2b:20:6f:10:36:c8:af:2b:c4:28:ac:8e:81:78:d5:
48:51:d9:8c:55:4e:e7:2b:6f:ce:5a:fd:87:3f:15:97:e6:7a:
9b:5c:14:06:f0:08:4c:e0:b8:1a:d8:ef:33:2b:3d:8e:a1:ce:
ca:57:81:fd:19:c2:66:bd:8b:69:cd:83:b9:c6:64:16:26:da:
37:b6:c0:ba:8d:28:28:eb:42:40:e0:43:e4:5a:c2:68:ac:a6:
d9:b3:61:d4:75:3d:95:24:bf:88:e6:86:e2:db:a4:6d:a5:4c:
0a:19:c3:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:11 2025 by rpki-client