Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/9uctx7G64GDk5bSDAQHpRA_uE78.roa
File: 9uctx7G64GDk5bSDAQHpRA_uE78.roa (raw, json)
Hash identifier: 9an301zpuBWoKDrFemQm6Poj0+R8Qx8y88Qozx+voAk=
Subject key identifier: F6:E7:2D:C7:B1:BA:E0:60:E4:E5:B4:83:01:01:E9:44:0F:EE:13:BF
Certificate issuer: /CN=9b60a6a1da0f117804f07fe125387a2adc998965
Certificate serial: 018875AE863B85AD64D0F1E32CE5F72F4271
Authority key identifier: 9B:60:A6:A1:DA:0F:11:78:04:F0:7F:E1:25:38:7A:2A:DC:99:89:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2CmodoPEXgE8H_hJTh6KtyZiWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/9uctx7G64GDk5bSDAQHpRA_uE78.roa
Signing time: Thu 01 Jun 2023 06:39:11 +0000
ROA not before: Thu 01 Jun 2023 06:39:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201397
IP address blocks: 194.116.226.0/24 maxlen: 24
2a12:a9c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:75:ae:86:3b:85:ad:64:d0:f1:e3:2c:e5:f7:2f:42:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b60a6a1da0f117804f07fe125387a2adc998965
Validity
Not Before: Jun 1 06:39:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6e72dc7b1bae060e4e5b4830101e9440fee13bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:97:7a:57:86:48:74:82:de:5f:6c:86:43:6f:
2b:84:8e:30:0c:80:31:9f:ad:fd:f4:85:5d:8f:ec:
23:47:e6:85:8c:11:b1:a9:af:a7:71:84:a6:66:32:
70:00:d6:e1:0e:10:00:f8:d7:ce:4c:7f:0c:8f:8d:
e9:89:9c:44:6c:1b:d3:28:1b:5e:90:da:bb:0b:ba:
bb:ed:66:1d:fc:ec:6c:28:b4:30:27:9b:28:6b:6f:
08:71:5c:dd:e9:00:da:b9:9c:fa:07:e1:53:5e:ba:
9a:4c:9d:da:28:af:6e:6f:32:cd:58:29:3a:e0:73:
96:34:c4:e0:a9:85:1a:02:14:d5:b4:0d:be:db:f4:
0f:58:0f:a7:19:e2:98:f6:5b:b3:ce:b2:3c:4b:14:
28:fd:a0:35:04:16:47:2f:ce:54:95:46:be:2f:e6:
8b:e1:79:fd:e1:23:87:95:af:ef:2e:10:16:51:cc:
d7:23:a9:01:30:ec:a6:ab:23:d1:7a:5e:c2:80:0f:
a3:6e:39:37:b7:51:27:42:72:54:e2:5a:ed:09:03:
cf:ab:44:af:55:72:28:61:80:4d:8e:39:aa:94:46:
de:ad:00:73:de:00:aa:2a:e2:bf:6b:68:e1:fc:75:
ec:48:dd:0f:95:67:c1:2b:36:33:7c:8d:38:a2:e5:
a2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:E7:2D:C7:B1:BA:E0:60:E4:E5:B4:83:01:01:E9:44:0F:EE:13:BF
X509v3 Authority Key Identifier:
keyid:9B:60:A6:A1:DA:0F:11:78:04:F0:7F:E1:25:38:7A:2A:DC:99:89:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2CmodoPEXgE8H_hJTh6KtyZiWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/9uctx7G64GDk5bSDAQHpRA_uE78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/m2CmodoPEXgE8H_hJTh6KtyZiWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.116.226.0/24
IPv6:
2a12:a9c0::/29
Signature Algorithm: sha256WithRSAEncryption
11:7a:6f:cb:40:85:f2:de:54:98:7b:e2:fe:05:54:95:72:4a:
2a:54:34:bf:d3:3c:4e:35:a8:b4:cb:07:f4:d4:73:2f:19:71:
af:7d:9e:91:ca:89:34:7d:f6:ff:e0:14:b2:f1:24:e5:44:19:
0c:0e:2d:37:c8:8b:8d:5c:38:ed:e9:db:0a:eb:9d:cd:51:83:
9a:a4:e8:05:90:0e:30:a6:e8:c6:79:d0:af:61:07:92:8d:da:
c5:6d:97:bf:38:20:3f:16:3f:5f:4e:c6:f2:cf:4f:43:94:b2:
80:35:7e:fa:2c:b8:69:8e:0f:73:92:62:a7:51:ad:44:fe:bd:
0b:6c:13:3c:a0:c4:4c:17:e5:3e:45:1e:c5:92:31:f5:9d:cb:
b2:95:56:e7:27:bd:4b:cb:9d:0d:e1:a5:dd:ca:9b:26:07:cf:
c5:d8:3c:28:5c:f0:f4:c5:37:b2:61:7d:22:02:df:6d:84:d3:
fb:2f:55:cf:1e:c6:68:af:36:65:b1:9e:f3:d6:d2:1e:fd:83:
ae:76:61:12:b4:44:21:9c:65:c1:b6:53:ab:06:8b:85:ca:12:
d4:72:60:06:4a:16:50:98:6b:b1:ab:81:ed:1e:48:c5:9f:74:
d1:f2:8a:1a:b9:42:ec:d5:6a:98:d4:b3:8b:e8:6b:d3:23:d5:
3a:ce:a2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:45 2025 by rpki-client