Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/782fb2-48f5-4e7c-a068-ffacd29fda3a/1/cbem9x_XS2X11gYurPUyoB1QfbM.roa
File: cbem9x_XS2X11gYurPUyoB1QfbM.roa (raw, json)
Hash identifier: R9KtpTCtZDOF4PauRvmLG6ABm0VWo/33knjjTerBoKo=
Subject key identifier: 71:B7:A6:F7:1F:D7:4B:65:F5:D6:06:2E:AC:F5:32:A0:1D:50:7D:B3
Certificate issuer: /CN=83680ac0e84fc12fc72237b8aed8e5ed85f8debd
Certificate serial: 096498D8
Authority key identifier: 83:68:0A:C0:E8:4F:C1:2F:C7:22:37:B8:AE:D8:E5:ED:85:F8:DE:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2gKwOhPwS_HIje4rtjl7YX43r0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/782fb2-48f5-4e7c-a068-ffacd29fda3a/1/cbem9x_XS2X11gYurPUyoB1QfbM.roa
Signing time: Sat 01 Jan 2022 07:55:25 +0000
ROA not before: Sat 01 Jan 2022 07:55:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2119
IP address blocks: 193.161.32.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157587672 (0x96498d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83680ac0e84fc12fc72237b8aed8e5ed85f8debd
Validity
Not Before: Jan 1 07:55:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=71b7a6f71fd74b65f5d6062eacf532a01d507db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9a:2a:2d:9a:8a:ee:e7:01:01:6b:75:1b:cc:
3e:99:b5:20:f9:ee:68:d9:c3:eb:c6:1f:7a:c4:40:
34:7b:3a:b2:be:b4:50:2e:6d:81:05:68:9f:9d:9b:
bc:f6:10:27:bb:76:88:3e:d3:6c:8a:58:27:cf:1f:
e6:ca:97:06:27:7f:5a:f2:b4:58:5a:fa:cc:a3:29:
66:8a:eb:26:1e:7d:b0:e4:58:71:57:54:dc:76:47:
eb:87:ac:ea:ec:e1:20:52:7e:cd:f5:1a:db:61:c4:
91:30:66:14:9f:1b:ea:e3:1e:73:9f:f7:f8:dd:d9:
a8:d9:14:17:54:ae:7b:91:20:a4:1a:8d:4f:9d:c6:
08:41:49:4c:13:c3:4a:02:28:86:7a:d0:8e:28:0a:
c4:13:c4:df:83:a5:f4:4e:d1:27:f1:51:76:1b:70:
8c:bd:e9:ef:7a:f2:e6:d7:04:50:35:f9:d0:2a:93:
7d:1f:1b:8a:76:5b:2b:43:82:5b:4e:d2:f1:b2:d3:
b4:5c:09:bd:0d:f0:52:46:91:c4:b9:1c:88:56:bc:
d0:23:fe:d9:44:bc:40:ad:38:7d:fc:d5:03:35:f0:
61:3f:4f:43:b6:07:59:37:86:48:c6:2d:57:8d:2e:
e4:60:a2:e8:ec:09:2b:6c:6d:74:a9:03:5f:71:58:
0f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B7:A6:F7:1F:D7:4B:65:F5:D6:06:2E:AC:F5:32:A0:1D:50:7D:B3
X509v3 Authority Key Identifier:
keyid:83:68:0A:C0:E8:4F:C1:2F:C7:22:37:B8:AE:D8:E5:ED:85:F8:DE:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2gKwOhPwS_HIje4rtjl7YX43r0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/782fb2-48f5-4e7c-a068-ffacd29fda3a/1/cbem9x_XS2X11gYurPUyoB1QfbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/782fb2-48f5-4e7c-a068-ffacd29fda3a/1/g2gKwOhPwS_HIje4rtjl7YX43r0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.161.32.0/19
Signature Algorithm: sha256WithRSAEncryption
3e:cf:69:e9:79:1f:5a:38:27:fc:dd:e2:c6:b1:fb:4f:a8:82:
ef:8a:bb:36:09:be:84:91:82:0e:07:70:c1:f5:5c:aa:8c:04:
81:79:91:c0:1a:9f:87:3e:9b:ea:b9:dc:b7:0d:0f:f3:bd:ce:
30:1c:52:19:61:54:6d:b8:b3:26:15:a9:ae:64:f2:91:a0:c0:
ec:9e:1d:ad:d6:a1:67:80:74:1f:6c:cd:0b:7d:ca:59:ba:ca:
7e:77:f2:50:31:73:b0:b7:ae:02:c5:1f:2c:32:bd:c9:fb:64:
06:24:ca:0d:9a:34:05:9b:8a:e4:b2:0e:12:92:6b:0e:82:4c:
0e:65:da:07:fc:47:28:32:88:8d:d5:b2:83:64:0d:54:b1:a7:
72:b7:d2:ed:32:59:36:7f:f6:bf:73:61:7e:9b:95:ab:d4:4e:
fc:bd:27:b0:c3:bd:eb:96:37:60:18:1a:a3:68:c0:77:d6:ba:
28:e9:de:a4:7a:b1:9d:48:e3:87:af:a2:fe:02:51:a1:3a:0f:
05:78:98:10:0f:c1:5e:92:bf:e4:b4:21:21:c8:fe:32:92:03:
f9:d6:9b:ce:fe:4e:f7:c5:2e:8d:60:97:e0:25:26:d3:27:ff:
5d:17:4f:e2:11:05:28:cc:38:d8:bd:98:4c:4b:2e:59:f2:18:
06:db:36:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:44 2025 by rpki-client