Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/e9QQWEygSzh6X9KYM9opc7O_iV4.roa
File: e9QQWEygSzh6X9KYM9opc7O_iV4.roa (raw, json)
Hash identifier: AOcwPU981EYpyMd90Q5du51cE1fEigUXbRV4qXkl0RU=
Subject key identifier: 7B:D4:10:58:4C:A0:4B:38:7A:5F:D2:98:33:DA:29:73:B3:BF:89:5E
Certificate issuer: /CN=77ca53a8a5a03b055cb3f340fcbeb85d7ad487a8
Certificate serial: 01856E38E14E6982B5CB531E88ABAF6F390E
Authority key identifier: 77:CA:53:A8:A5:A0:3B:05:5C:B3:F3:40:FC:BE:B8:5D:7A:D4:87:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8pTqKWgOwVcs_NA_L64XXrUh6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/e9QQWEygSzh6X9KYM9opc7O_iV4.roa
Signing time: Sun 01 Jan 2023 16:44:59 +0000
ROA not before: Sun 01 Jan 2023 16:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16019
IP address blocks: 188.94.232.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:38:e1:4e:69:82:b5:cb:53:1e:88:ab:af:6f:39:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77ca53a8a5a03b055cb3f340fcbeb85d7ad487a8
Validity
Not Before: Jan 1 16:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7bd410584ca04b387a5fd29833da2973b3bf895e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:79:2c:d7:53:42:0e:74:0b:ea:9a:1f:67:72:
cf:37:b3:3b:80:f2:ef:3c:4a:ac:fd:15:d6:4e:b5:
bd:65:87:12:cf:75:7f:f2:f6:ef:73:81:78:a2:d2:
f1:40:e3:fb:b4:02:3b:75:79:b6:d1:27:21:a4:15:
71:24:f5:73:36:4a:1b:db:1a:a3:ab:1c:ed:68:61:
1c:ea:8e:03:34:7f:a6:89:73:e5:2d:e1:1c:00:db:
f7:f0:a5:76:b2:c1:62:32:bc:58:65:a2:e1:33:96:
d1:a2:4e:f0:cd:8f:ee:0f:ba:f3:d3:68:2e:cc:51:
e5:03:e5:b8:a4:40:ad:17:30:5d:8a:8c:f0:9e:af:
c5:42:d5:ef:a0:e8:92:88:38:c7:ed:8a:80:22:57:
f5:b3:46:da:90:3d:ee:41:c2:1b:b0:c8:25:40:65:
04:2e:e6:50:b8:41:aa:6e:37:ec:a6:4d:8f:0f:8c:
80:e7:d9:c5:e6:bd:de:e6:36:6e:36:01:1c:d1:42:
96:2b:56:79:17:f5:6b:d7:39:32:f7:8b:ba:a7:bf:
37:c7:5e:28:cb:7d:44:1b:0b:8a:01:b0:29:a0:9b:
86:32:64:cd:25:eb:64:16:ec:f5:4d:94:3d:be:bb:
a0:2d:80:34:3e:75:9b:f1:19:7e:40:a8:0e:89:4b:
eb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D4:10:58:4C:A0:4B:38:7A:5F:D2:98:33:DA:29:73:B3:BF:89:5E
X509v3 Authority Key Identifier:
keyid:77:CA:53:A8:A5:A0:3B:05:5C:B3:F3:40:FC:BE:B8:5D:7A:D4:87:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8pTqKWgOwVcs_NA_L64XXrUh6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/e9QQWEygSzh6X9KYM9opc7O_iV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.94.232.0/21
Signature Algorithm: sha256WithRSAEncryption
03:7c:7a:fd:d5:f8:8a:d3:46:90:0d:4a:e2:9d:9d:03:08:1d:
87:01:96:e3:6d:54:09:36:2b:c4:01:0f:63:8e:48:28:d8:b0:
21:79:56:95:43:e8:52:7d:28:01:65:64:64:b6:20:5d:6b:51:
3e:f9:21:99:76:06:3f:94:fb:25:be:72:41:c3:d6:3a:b0:62:
76:90:5b:80:34:06:50:4e:9d:e4:02:31:e5:08:b6:a4:c3:ed:
1b:da:7f:95:36:d4:5e:ab:4f:cf:ba:f5:0d:a8:18:6e:e3:4c:
14:a3:2f:8d:15:cd:fa:b4:e3:6a:b6:3f:e2:33:7e:c1:c2:fb:
39:fd:36:8e:42:22:05:0a:96:22:ea:82:f0:4d:7b:c7:06:da:
9d:74:b5:4e:05:06:a4:9e:cf:74:5a:f6:85:a5:d0:4f:b0:33:
11:45:8d:f2:40:9b:80:6f:72:2b:e3:b8:ae:9b:0d:c6:0b:f6:
9f:73:7d:7d:c5:a1:01:43:26:bb:d7:11:17:85:19:dc:e7:17:
e8:28:7a:93:d5:6c:65:89:6e:9c:28:94:c9:af:be:72:7c:db:
87:d7:fa:55:93:da:19:48:5b:9f:4f:8c:02:93:60:cf:a6:93:
c1:92:28:bc:4d:98:c0:15:be:fb:60:9d:a0:ff:93:a7:b6:01:
fd:86:d4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:19 2025 by rpki-client