Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/l_uyRx4yDiMvdasYszHN7K8NYJk.roa
File: l_uyRx4yDiMvdasYszHN7K8NYJk.roa (raw, json)
Hash identifier: XjOwQvTy4lpgwU4QBSHVAYQU+UKrefSyH3XpCeH45dk=
Subject key identifier: 97:FB:B2:47:1E:32:0E:23:2F:75:AB:18:B3:31:CD:EC:AF:0D:60:99
Certificate issuer: /CN=2c0ceb81ebce859f50928e8ed3e1f0a8511152db
Certificate serial: 0185A4FB33DD42469A4ED2FEF596405A0F14
Authority key identifier: 2C:0C:EB:81:EB:CE:85:9F:50:92:8E:8E:D3:E1:F0:A8:51:11:52:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LAzrgevOhZ9Qko6O0-HwqFERUts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/l_uyRx4yDiMvdasYszHN7K8NYJk.roa
Signing time: Thu 12 Jan 2023 07:56:44 +0000
ROA not before: Thu 12 Jan 2023 07:56:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 193.201.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a4:fb:33:dd:42:46:9a:4e:d2:fe:f5:96:40:5a:0f:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c0ceb81ebce859f50928e8ed3e1f0a8511152db
Validity
Not Before: Jan 12 07:56:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97fbb2471e320e232f75ab18b331cdecaf0d6099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f2:54:00:9e:a4:3a:a4:f5:16:2f:a1:e1:81:
0b:ae:2f:75:26:0c:89:d9:be:d6:d1:6d:cd:f1:8e:
6b:7a:e1:8b:84:ea:a6:c4:1c:f3:cc:df:37:b9:c9:
cf:c8:3f:7b:83:4c:43:10:ff:5b:a5:6d:94:c3:57:
27:70:fd:71:33:ed:87:a4:34:80:76:89:33:81:f8:
dc:74:b3:36:4b:8e:b0:bd:84:2f:47:13:d5:ff:b9:
31:20:8f:7e:3e:f7:35:cc:fd:e8:3f:dc:0f:0a:5b:
3f:ad:93:71:3f:20:73:2e:13:55:a3:cb:a2:08:63:
95:ab:e6:65:b5:7d:60:3d:e2:75:01:95:78:08:06:
7e:30:98:eb:e7:0e:db:c2:07:eb:9c:42:a6:f2:6c:
cd:3b:1f:cd:f9:51:60:f0:23:29:7f:e7:31:fe:29:
a9:61:f9:9c:fe:49:cc:b2:9c:03:55:a7:bc:84:82:
ab:79:c9:32:d8:f4:66:2b:48:df:87:76:28:cb:4f:
66:f5:11:37:03:5a:ba:0d:f5:5c:49:4d:9f:5e:f0:
8b:87:41:2f:6b:ca:f5:da:27:cf:54:8c:66:d0:f9:
2d:bc:99:68:11:4a:f6:06:7e:f5:96:37:6b:8e:ab:
47:f9:33:54:aa:37:ca:9f:d7:09:6a:59:71:51:91:
89:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:FB:B2:47:1E:32:0E:23:2F:75:AB:18:B3:31:CD:EC:AF:0D:60:99
X509v3 Authority Key Identifier:
keyid:2C:0C:EB:81:EB:CE:85:9F:50:92:8E:8E:D3:E1:F0:A8:51:11:52:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LAzrgevOhZ9Qko6O0-HwqFERUts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/l_uyRx4yDiMvdasYszHN7K8NYJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.33.0/24
Signature Algorithm: sha256WithRSAEncryption
78:ee:06:44:96:2c:80:16:4f:6e:b2:19:bf:84:a1:45:92:51:
56:4f:5a:2b:f9:5d:64:13:b7:e8:b6:e9:14:a2:a7:b1:12:3a:
b8:8f:03:4b:e9:fe:da:29:9f:7c:63:f7:ca:1a:27:69:5e:bc:
0b:6a:72:42:f9:9e:93:c4:62:de:c4:a2:65:69:5b:9e:12:9d:
1e:e9:93:8c:a3:b7:67:5c:a9:a4:66:8f:3d:72:b6:f7:c0:7a:
44:9c:de:af:a2:17:04:23:6f:a2:95:25:49:ee:cd:7d:77:d5:
89:d0:8f:8a:23:e4:c9:bc:de:0e:e5:0b:6b:a1:35:88:fd:08:
b4:33:f3:c7:31:7c:12:eb:a1:9d:b0:61:10:3e:9d:48:10:d7:
d9:93:fa:67:da:c6:ef:c5:49:ca:5b:c5:d2:9f:45:89:b5:b3:
52:87:1f:ed:6d:4a:35:ff:96:e2:4d:1b:8f:14:56:c6:37:c1:
60:3b:b0:31:30:be:c2:da:ed:41:d4:76:d9:51:11:95:60:19:
94:13:4a:48:5a:35:e4:3d:68:c8:0c:bd:f7:50:d4:9c:e9:ee:
03:54:af:bb:49:a4:29:9a:3b:44:15:3b:44:72:35:c1:c8:0b:
7e:3f:e2:d6:3e:de:06:a4:99:73:5b:d0:1f:79:92:e8:5b:7c:
40:40:46:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:11 2025 by rpki-client