Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/t7jhCiXmxIeqJ1VYsAxI_M8t9CQ.roa
File: t7jhCiXmxIeqJ1VYsAxI_M8t9CQ.roa (raw, json)
Hash identifier: GJGSBQ/iNE6AnP4INwAk5FBV9z/8cX7LsV9MopzXmkQ=
Subject key identifier: B7:B8:E1:0A:25:E6:C4:87:AA:27:55:58:B0:0C:48:FC:CF:2D:F4:24
Certificate issuer: /CN=98f02b5cfb4172508e0737bf25cd5d22a01dc45a
Certificate serial: 018A6BCD0AC5A9F3DDBC00B0BAFB205E8666
Authority key identifier: 98:F0:2B:5C:FB:41:72:50:8E:07:37:BF:25:CD:5D:22:A0:1D:C4:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/t7jhCiXmxIeqJ1VYsAxI_M8t9CQ.roa
Signing time: Wed 06 Sep 2023 18:41:54 +0000
ROA not before: Wed 06 Sep 2023 18:41:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59796
IP address blocks: 193.104.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6b:cd:0a:c5:a9:f3:dd:bc:00:b0:ba:fb:20:5e:86:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98f02b5cfb4172508e0737bf25cd5d22a01dc45a
Validity
Not Before: Sep 6 18:41:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7b8e10a25e6c487aa275558b00c48fccf2df424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d1:de:59:63:bb:be:c9:f3:4e:be:ed:45:53:
03:cb:3c:97:80:86:95:37:b3:db:b0:32:8a:7d:8a:
97:b0:34:fd:f1:ba:a7:c1:d7:db:08:e2:3e:7d:85:
a8:29:c0:6f:04:2f:c4:51:8d:77:f6:b7:41:89:ec:
25:da:bd:5e:06:95:7b:d3:7d:91:3d:1b:cb:2b:c3:
cd:fb:c7:27:08:27:27:3c:ea:b8:82:df:a3:03:2b:
95:74:a9:44:e1:47:f7:17:0b:d2:0a:53:98:14:a2:
a6:f6:a0:c1:2a:61:c5:29:68:3d:4f:dc:ba:de:0a:
0b:ee:00:e1:cd:97:47:41:64:f9:7d:95:fb:0f:92:
35:a0:98:4c:37:b1:10:52:c4:23:03:57:07:29:39:
27:b6:38:bb:2b:6e:6b:b2:52:aa:c4:2f:e8:fe:64:
46:82:67:bd:d3:cb:aa:a5:66:77:8d:9c:e7:07:8c:
f2:a0:20:32:73:d4:0f:89:11:2a:a8:a5:7b:b5:6f:
1b:cb:c4:b0:92:d1:3e:64:c6:c0:47:33:20:1f:2e:
4f:a0:58:61:b7:fd:83:10:2b:4e:9c:e2:b6:0a:5b:
50:18:21:c4:03:1a:68:5e:b4:a3:42:1f:6b:c4:00:
25:c9:6b:6c:ab:85:35:e1:1d:45:66:bf:3d:53:d1:
d8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B8:E1:0A:25:E6:C4:87:AA:27:55:58:B0:0C:48:FC:CF:2D:F4:24
X509v3 Authority Key Identifier:
keyid:98:F0:2B:5C:FB:41:72:50:8E:07:37:BF:25:CD:5D:22:A0:1D:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/t7jhCiXmxIeqJ1VYsAxI_M8t9CQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.120.0/24
Signature Algorithm: sha256WithRSAEncryption
19:f1:be:c8:a5:b8:87:01:fd:29:72:84:50:3f:a6:c4:8e:8b:
c9:cc:38:ad:50:1e:02:6d:ac:ef:03:ab:95:7f:97:36:a4:49:
d7:4f:45:eb:0a:dd:c2:0d:a8:54:3a:83:1f:cd:28:4b:57:b9:
40:99:cf:46:df:37:f3:33:a2:f8:e7:91:48:e0:c1:7e:18:7f:
55:4d:74:ec:84:96:a5:e5:d7:25:30:18:95:a5:4d:ee:5d:9d:
9c:79:91:2a:a0:01:b1:5a:5d:98:59:ba:d3:b7:45:55:e2:44:
18:a3:20:bc:3c:5b:07:ff:61:0b:7e:f7:bb:35:da:ef:68:a1:
c4:cd:ed:5a:7b:75:f0:85:5f:49:b2:50:c4:72:44:2a:5a:c6:
64:fe:9b:28:c3:b0:0c:82:f0:19:8a:cb:02:0d:7b:62:e4:92:
63:b7:a2:86:2f:4d:25:79:c7:f2:9c:cc:12:1f:fa:03:13:73:
fa:91:16:2c:29:64:55:6d:44:6b:d6:6c:b4:64:20:aa:03:c6:
48:95:ac:45:c2:4e:03:69:a8:bf:0b:f8:cf:f3:67:26:b3:0e:
ae:f0:5d:b6:57:51:4c:22:85:6a:51:c1:a5:5e:ad:7f:d6:dc:
64:ee:cb:f8:02:ad:3d:8b:b4:75:ec:05:f7:b7:f2:ef:5d:de:
12:5e:b7:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:51 2025 by rpki-client