Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/aTBnaDKG_P5NvBeYjNsc_unCfSs.roa
File: aTBnaDKG_P5NvBeYjNsc_unCfSs.roa (raw, json)
Hash identifier: EsPlEXBxI4bBA6vX4Bad+OhwE16eo54ZNei0Qaph5OA=
Subject key identifier: 69:30:67:68:32:86:FC:FE:4D:BC:17:98:8C:DB:1C:FE:E9:C2:7D:2B
Certificate issuer: /CN=88d5e09af82a96918c86a647b4edcd8ebb23820d
Certificate serial: 01856F9DF23BFF69A4A0B59DA11F11DB5693
Authority key identifier: 88:D5:E0:9A:F8:2A:96:91:8C:86:A6:47:B4:ED:CD:8E:BB:23:82:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNXgmvgqlpGMhqZHtO3Njrsjgg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/aTBnaDKG_P5NvBeYjNsc_unCfSs.roa
Signing time: Sun 01 Jan 2023 23:15:00 +0000
ROA not before: Sun 01 Jan 2023 23:15:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30761
IP address blocks: 185.73.252.0/24 maxlen: 24
193.22.7.0/24 maxlen: 24
2a05:4780::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:f2:3b:ff:69:a4:a0:b5:9d:a1:1f:11:db:56:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d5e09af82a96918c86a647b4edcd8ebb23820d
Validity
Not Before: Jan 1 23:15:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=693067683286fcfe4dbc17988cdb1cfee9c27d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b7:66:7c:6e:08:a6:14:9e:1e:4f:22:d6:20:
96:83:26:d6:51:db:07:46:09:df:57:d7:46:40:97:
4e:b1:4e:97:8b:b1:01:b9:cb:be:18:17:8d:4d:24:
69:94:9b:50:33:3f:d8:75:23:3f:ba:17:99:7d:be:
a3:67:bc:bb:cf:82:a0:d1:49:eb:6d:9a:60:7b:73:
ee:6c:20:8e:80:3f:94:5f:99:f6:55:d5:9a:b5:8a:
da:af:ff:4b:3e:93:07:83:6c:72:54:c7:a8:07:13:
84:78:be:21:93:67:15:0b:47:30:e8:57:65:4b:e6:
ef:9a:9d:e0:db:24:cc:69:ae:71:e2:e5:95:9f:35:
94:52:2f:28:94:d9:99:5e:39:7f:7b:86:d3:a1:9a:
01:bc:c4:80:cc:52:97:68:c4:2e:fb:44:e7:5b:2d:
33:da:d1:44:bf:c0:94:95:79:38:23:a5:10:51:85:
c2:f8:07:40:d5:8e:99:3d:2a:49:30:6d:51:8c:2b:
2b:31:39:17:56:72:0e:72:09:98:05:45:c0:51:c3:
80:07:d9:64:a3:77:7a:e9:a5:7a:5e:a3:ce:aa:a4:
a1:eb:61:fd:4a:9d:8d:b4:5e:af:47:b4:1e:ab:f8:
89:0c:9a:61:05:08:b6:96:34:cc:73:f6:ca:3a:2b:
2c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:30:67:68:32:86:FC:FE:4D:BC:17:98:8C:DB:1C:FE:E9:C2:7D:2B
X509v3 Authority Key Identifier:
keyid:88:D5:E0:9A:F8:2A:96:91:8C:86:A6:47:B4:ED:CD:8E:BB:23:82:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNXgmvgqlpGMhqZHtO3Njrsjgg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/aTBnaDKG_P5NvBeYjNsc_unCfSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.73.252.0/24
193.22.7.0/24
IPv6:
2a05:4780::/29
Signature Algorithm: sha256WithRSAEncryption
1e:6c:98:0a:4a:a4:68:8e:2a:5a:e2:ed:77:98:67:24:41:4e:
1d:eb:3e:10:ba:a0:9f:89:be:54:4d:98:66:54:72:4f:ad:fd:
2f:e9:24:3a:8c:59:3e:31:ee:e6:9a:b1:b8:b7:ba:07:95:20:
73:af:50:35:e6:aa:71:fc:58:9a:34:e5:43:f4:4c:e0:cf:83:
4c:12:76:d4:e6:e1:6f:ac:0d:5e:04:8a:24:73:3e:97:ba:cd:
5b:b6:f3:ea:7b:b8:79:2a:6d:05:bb:8a:32:26:97:e7:8b:68:
94:52:c7:cc:8e:10:d9:c2:41:25:0a:18:67:fd:a2:e4:92:b5:
3b:14:2f:d5:4d:e6:9b:6e:8b:26:ce:5e:5f:e3:fe:ce:d0:7f:
b1:37:49:23:6c:d3:b9:5e:11:7f:2a:0d:40:51:81:05:84:c0:
0c:45:9e:fc:76:39:e6:3f:05:28:5c:49:f6:69:76:77:e1:e3:
cb:1a:4c:09:90:d5:34:bd:ee:a6:f7:6b:65:6b:9d:6a:35:60:
1e:28:86:ef:74:9d:70:a0:4d:53:98:ff:62:19:7f:69:4f:d8:
da:4b:c8:19:72:49:7a:2c:79:16:e7:67:c5:77:b2:de:f2:47:
b7:f9:3f:79:34:df:e2:a9:32:6e:7f:69:a0:76:97:7a:e3:30:
33:10:90:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:56 2025 by rpki-client