Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/qZ90wOA_Bx-A-Ax1ZnwexwNOmbE.roa
File: qZ90wOA_Bx-A-Ax1ZnwexwNOmbE.roa (raw, json)
Hash identifier: Zk6lsfHmIlmlm5TDY9t+17q6Mu7Nm9TQlKkAxHI/OHE=
Subject key identifier: A9:9F:74:C0:E0:3F:07:1F:80:F8:0C:75:66:7C:1E:C7:03:4E:99:B1
Certificate issuer: /CN=9098153bde0e34584bac91fa1868d7ef24d68bcf
Certificate serial: 01856C1C9F84173B7FC44B58F00CC1F46FCF
Authority key identifier: 90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/qZ90wOA_Bx-A-Ax1ZnwexwNOmbE.roa
Signing time: Sun 01 Jan 2023 06:54:53 +0000
ROA not before: Sun 01 Jan 2023 06:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 193.218.190.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:9f:84:17:3b:7f:c4:4b:58:f0:0c:c1:f4:6f:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9098153bde0e34584bac91fa1868d7ef24d68bcf
Validity
Not Before: Jan 1 06:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a99f74c0e03f071f80f80c75667c1ec7034e99b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:47:3f:69:81:fe:cf:d0:06:2e:00:e1:e9:70:
d3:58:ba:0a:6b:be:91:30:9d:c1:ba:64:93:63:27:
36:b8:be:8f:81:b6:d2:79:13:82:2d:cd:45:96:6a:
8d:e0:c6:92:8a:f0:f6:73:d8:57:04:ce:e0:12:40:
c5:97:c8:19:4c:4f:bf:29:17:fd:33:84:6e:e2:19:
05:83:26:18:a8:06:13:ad:5d:b9:2b:98:40:a3:cc:
2b:21:d8:00:da:44:d1:a7:06:e6:ae:f7:d1:d3:3e:
79:39:39:33:32:ef:42:fe:39:72:49:ae:cd:7b:da:
97:3d:60:bb:38:e0:59:d0:fa:f9:47:57:b5:cb:94:
41:fb:de:8a:54:00:d5:71:07:7f:41:08:34:32:27:
61:fd:75:c2:28:2b:09:8e:f5:a5:53:cc:0f:3b:91:
db:3d:98:4e:25:59:75:87:99:b5:0e:95:ee:8f:83:
ac:10:c8:60:13:cd:b4:63:d3:33:a5:cd:b1:89:39:
a8:97:ae:b9:7f:0c:67:0a:d0:35:08:26:70:10:cc:
21:56:35:e0:a8:2e:1e:3e:d8:b4:f5:f9:77:1e:35:
7c:63:49:35:f5:47:27:29:ee:80:44:24:ab:4a:7d:
8b:5f:a6:b2:bc:f1:49:0c:6d:11:98:0e:ff:bb:04:
8a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:9F:74:C0:E0:3F:07:1F:80:F8:0C:75:66:7C:1E:C7:03:4E:99:B1
X509v3 Authority Key Identifier:
keyid:90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/qZ90wOA_Bx-A-Ax1ZnwexwNOmbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.218.190.0/24
Signature Algorithm: sha256WithRSAEncryption
93:b1:84:56:a9:6e:6c:96:c3:40:71:09:f4:44:cb:e3:18:a1:
e7:07:50:1a:68:8f:8a:2c:bf:56:18:6e:fc:d3:56:a9:d0:f6:
b4:b8:6c:fe:47:b0:38:87:97:7f:bc:c2:45:b4:2f:e8:62:7b:
5c:39:e7:c3:21:da:bf:73:df:47:e2:5e:31:fa:4a:33:75:ad:
91:f3:48:06:1d:b7:85:95:8d:4c:f3:e9:f5:c7:dc:fc:1b:e7:
07:06:be:97:a3:e1:1e:22:d6:4d:a0:b0:20:db:e0:1a:a8:b4:
5b:c2:42:8c:63:20:23:16:64:37:94:d9:75:8a:f7:6d:1f:9f:
92:36:81:56:82:22:75:9d:44:52:67:c9:01:49:4d:3f:35:7d:
d7:e1:37:08:ed:6b:4d:91:73:a5:6c:b4:d9:a4:6a:c9:f8:00:
94:b5:b9:af:3d:a1:d3:ad:b3:86:b3:53:44:85:b3:23:68:8c:
a8:e6:9e:1c:68:21:9c:a4:b7:6a:58:e2:0d:53:76:07:fb:6a:
28:97:ae:c6:5c:03:23:47:6e:c5:ea:7f:c6:a5:a7:15:c7:7e:
1d:03:ff:3d:d2:81:9d:35:c0:f9:cd:b4:9e:f7:3a:32:8c:94:
eb:7d:3d:14:cc:23:a1:ad:21:54:21:47:86:27:f8:11:14:3d:
0a:d2:91:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:06 2025 by rpki-client