Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/9k9fkgg7DDTBDHlewfjSEoKb9Qs.roa
File: 9k9fkgg7DDTBDHlewfjSEoKb9Qs.roa (raw, json)
Hash identifier: e9tSWhPPe/wqFCjBj9yCtXGTFyc/x8fOdEFbYN8Okk8=
Subject key identifier: F6:4F:5F:92:08:3B:0C:34:C1:0C:79:5E:C1:F8:D2:12:82:9B:F5:0B
Certificate issuer: /CN=323ab5ba98bef5d0d9bd0cea031a1fe13777a486
Certificate serial: 01856F2FD31C03746E617B4BED6A60701FE1
Authority key identifier: 32:3A:B5:BA:98:BE:F5:D0:D9:BD:0C:EA:03:1A:1F:E1:37:77:A4:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mjq1upi-9dDZvQzqAxof4Td3pIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/9k9fkgg7DDTBDHlewfjSEoKb9Qs.roa
Signing time: Sun 01 Jan 2023 21:14:43 +0000
ROA not before: Sun 01 Jan 2023 21:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201622
IP address blocks: 188.126.96.0/19 maxlen: 19
188.126.96.0/20 maxlen: 20
188.126.112.0/21 maxlen: 21
188.126.120.0/21 maxlen: 21
2a09:f400::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:d3:1c:03:74:6e:61:7b:4b:ed:6a:60:70:1f:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=323ab5ba98bef5d0d9bd0cea031a1fe13777a486
Validity
Not Before: Jan 1 21:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f64f5f92083b0c34c10c795ec1f8d212829bf50b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:34:87:c7:8c:d0:8f:39:b9:79:d8:55:df:3f:
07:43:84:c3:b0:8c:45:9e:0b:05:88:7d:f8:46:7b:
5a:e2:12:1d:05:98:e5:71:0c:a6:9b:7d:cd:29:0f:
86:45:4d:56:76:1f:b4:ba:d4:37:47:ac:9b:21:15:
53:18:69:09:54:e3:81:7a:7d:ac:69:7d:8d:65:50:
fa:61:46:3f:51:18:20:0d:a3:9d:03:d7:5f:be:01:
6d:ab:80:ec:00:45:f6:d7:0d:79:7f:14:72:a4:bc:
f4:e8:56:c4:16:b3:0e:2d:d0:29:bd:31:d9:f4:80:
f3:c5:a8:d5:fd:0d:f8:f0:ef:ee:f5:ea:22:f1:63:
ee:5a:f9:6c:be:e7:c9:28:11:a1:cd:9f:fa:05:8b:
36:36:7a:06:9f:2d:74:6d:e9:29:e1:ef:ec:07:4d:
b3:8f:eb:6e:30:9b:1f:9a:c8:6a:73:16:dd:7c:19:
2a:d1:db:41:44:36:c2:e2:0b:93:af:d0:f0:55:30:
23:87:05:5e:ea:19:23:3b:be:3f:30:b6:ad:da:89:
25:8a:7f:ec:5e:d3:ea:4c:e3:e5:03:09:d8:39:c6:
bf:65:bf:84:8b:25:f2:c7:e3:21:9f:fb:51:12:7f:
3f:56:c6:a4:f2:95:25:29:11:64:c1:2d:4e:6d:73:
e8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:4F:5F:92:08:3B:0C:34:C1:0C:79:5E:C1:F8:D2:12:82:9B:F5:0B
X509v3 Authority Key Identifier:
keyid:32:3A:B5:BA:98:BE:F5:D0:D9:BD:0C:EA:03:1A:1F:E1:37:77:A4:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mjq1upi-9dDZvQzqAxof4Td3pIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/9k9fkgg7DDTBDHlewfjSEoKb9Qs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/Mjq1upi-9dDZvQzqAxof4Td3pIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.126.96.0/19
IPv6:
2a09:f400::/29
Signature Algorithm: sha256WithRSAEncryption
68:12:4b:c9:5d:77:13:be:fd:90:99:85:1a:15:af:8d:1a:d0:
a6:16:ef:4d:80:d4:12:5c:2d:7d:86:b6:a7:10:5a:fa:21:a0:
8b:7e:d3:4a:fa:44:d6:c6:83:da:ee:45:50:bd:07:80:00:86:
26:c4:cd:9c:8a:73:0a:7f:8b:4a:d2:06:ab:22:2b:85:d9:33:
eb:ea:8d:e4:d0:6e:a3:12:52:6a:f0:1f:ae:a4:7a:76:3f:18:
b6:d5:22:c1:b0:85:ef:1e:f4:1c:14:ce:b5:4f:14:7c:e8:f2:
d9:c3:ee:44:2f:95:59:54:9d:7d:92:91:00:10:11:09:7c:bd:
98:e2:43:96:d1:dc:16:5f:79:21:d1:a1:cb:3e:43:1f:0e:d1:
54:a3:39:38:f5:13:da:bd:e6:00:0c:25:d0:b2:ef:dd:ac:b4:
39:96:ef:09:f3:a9:67:c0:cf:9d:43:c7:9e:b6:ac:19:1e:e2:
c1:b3:ce:a1:0a:32:41:6d:92:20:4f:0f:90:5b:da:67:b5:a5:
96:7c:c7:a2:14:cd:22:41:be:da:7c:50:36:c4:83:18:bd:31:
4c:cb:f0:31:0b:2a:ee:8d:df:f0:5e:e9:12:b9:1b:d8:7d:e8:
7e:de:78:c3:a6:d5:14:8a:48:cb:6b:81:82:bd:0c:5f:8c:bd:
c6:59:11:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:27:10 2025 by rpki-client