Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/1-jKRbwVnY3PEEcH3DQ9bqslTfI0.roa
File: 1-jKRbwVnY3PEEcH3DQ9bqslTfI0.roa (raw, json)
Hash identifier: p0CUhPnGb3tWaIgSjDZ9wspTLYkq9v41mM48C38zrD4=
Subject key identifier: FA:32:91:6F:05:67:63:73:C4:11:C1:F7:0D:0F:5B:AA:C9:53:7C:8D
Certificate issuer: /CN=5bcd40d10b56f3b532fa0dfd01d817ef93da1a34
Certificate serial: 018479478FD8D2670728589BD5F72AAF5778
Authority key identifier: 5B:CD:40:D1:0B:56:F3:B5:32:FA:0D:FD:01:D8:17:EF:93:DA:1A:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W81A0QtW87Uy-g39AdgX75PaGjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/1-jKRbwVnY3PEEcH3DQ9bqslTfI0.roa
Signing time: Tue 15 Nov 2022 03:14:03 +0000
ROA not before: Tue 15 Nov 2022 03:14:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25682
IP address blocks: 193.57.173.0/24 maxlen: 24
2a0f:8640::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:79:47:8f:d8:d2:67:07:28:58:9b:d5:f7:2a:af:57:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bcd40d10b56f3b532fa0dfd01d817ef93da1a34
Validity
Not Before: Nov 15 03:14:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fa32916f05676373c411c1f70d0f5baac9537c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:91:98:fa:c6:ab:7b:64:1a:56:ec:40:a0:47:
bc:50:56:bc:5e:d4:f9:6f:6c:16:da:da:da:e1:70:
ea:71:3e:4f:07:fd:f8:ec:8f:2c:be:ea:28:d7:fb:
9d:40:d8:5b:09:ed:ab:dd:89:2e:eb:f0:c6:47:80:
09:25:c8:df:ef:a7:9c:2d:16:e4:7a:8f:0b:03:ac:
8a:62:2d:b3:bf:25:0a:66:27:5e:2e:57:fd:2c:51:
5b:8a:07:88:cb:ea:93:03:1a:98:ff:13:0f:06:1b:
ee:39:80:16:79:25:41:d1:b8:ac:fa:7e:e2:1a:c0:
2d:7c:b6:9a:76:77:73:7a:53:9a:99:fc:f9:ea:b2:
09:3d:d2:5d:ae:1b:7b:17:89:34:ed:27:cf:65:e5:
e1:16:35:31:18:da:82:72:16:a6:79:38:ab:a6:ff:
f6:74:cd:10:3e:6b:5c:fc:50:de:0c:eb:41:c0:18:
bf:14:11:32:2b:78:e5:25:b2:f1:d9:8e:70:0c:ab:
38:b9:17:5e:4f:99:a7:dc:a6:59:8f:01:8f:6b:2a:
fa:ad:cf:9f:86:67:97:4b:57:47:5f:52:1d:28:bb:
09:4d:ad:90:ff:ab:53:ec:fe:09:e7:c5:c3:95:77:
92:5f:55:49:9d:3f:be:52:05:d5:b9:69:ad:8c:83:
27:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:32:91:6F:05:67:63:73:C4:11:C1:F7:0D:0F:5B:AA:C9:53:7C:8D
X509v3 Authority Key Identifier:
keyid:5B:CD:40:D1:0B:56:F3:B5:32:FA:0D:FD:01:D8:17:EF:93:DA:1A:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W81A0QtW87Uy-g39AdgX75PaGjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/1-jKRbwVnY3PEEcH3DQ9bqslTfI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/W81A0QtW87Uy-g39AdgX75PaGjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.173.0/24
IPv6:
2a0f:8640::/29
Signature Algorithm: sha256WithRSAEncryption
9f:f8:65:04:bc:7c:94:86:2b:bf:c9:07:29:6b:1c:92:17:7e:
9f:80:85:14:56:1b:85:6d:25:1e:7f:aa:4a:4c:e0:61:0a:1e:
25:db:3d:46:68:36:00:74:bc:4b:30:ab:e2:05:e8:60:de:e5:
77:d2:3e:87:18:11:b0:d7:86:85:ed:d6:02:f2:7c:14:99:84:
06:3f:c8:28:05:3d:ce:69:cf:c9:5f:e5:61:93:cb:2c:9b:fa:
7d:71:e5:d6:bf:d1:49:b7:85:65:60:f4:72:4a:88:77:76:9d:
14:47:4e:85:d1:40:af:ba:b6:05:87:36:92:ae:20:2a:2b:77:
25:49:46:f7:ce:2f:b3:ed:a1:49:f3:4a:d1:0c:b6:34:2b:1a:
b7:4c:66:2c:7b:9b:fa:5e:93:13:6b:cb:55:1a:7c:3a:a7:0e:
e4:64:3b:e4:36:a3:b0:c6:2b:d1:a6:b1:cc:57:a1:10:e2:83:
f9:16:09:aa:fb:92:90:62:16:80:8a:f0:e2:3d:30:2e:47:04:
b7:8d:c2:30:6c:59:fa:6a:41:5f:3f:0e:f5:1d:ef:47:db:1c:
41:c5:40:18:a3:d2:82:ce:0e:53:37:9d:9f:c3:2d:10:e9:22:
05:16:cd:91:bb:be:49:3d:0e:ba:9e:01:22:75:f6:b2:b8:40:
b8:72:05:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:58 2025 by rpki-client