Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/E0dv9lCMLLHZ9AX_gZCBFficgtM.roa
File: E0dv9lCMLLHZ9AX_gZCBFficgtM.roa (raw, json)
Hash identifier: FT1u0D2WU/ktwUs8TDlUfrhhL9KKlcEZgTxWHwtCXZ8=
Subject key identifier: 13:47:6F:F6:50:8C:2C:B1:D9:F4:05:FF:81:90:81:15:F8:9C:82:D3
Certificate issuer: /CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Certificate serial: 018C59C3B1543FBC9383F79A1FD881F6079C
Authority key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/E0dv9lCMLLHZ9AX_gZCBFficgtM.roa
Signing time: Mon 11 Dec 2023 16:44:06 +0000
ROA not before: Mon 11 Dec 2023 16:44:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202242
IP address blocks: 195.231.0.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:59:c3:b1:54:3f:bc:93:83:f7:9a:1f:d8:81:f6:07:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Validity
Not Before: Dec 11 16:44:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13476ff6508c2cb1d9f405ff81908115f89c82d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:df:04:b2:29:6f:ea:44:f9:57:11:63:2e:1a:
16:74:aa:8a:2f:a1:87:ba:68:aa:2e:50:f5:1a:0c:
cd:ca:02:7c:29:2f:64:c4:0e:a4:ee:e5:7b:79:af:
78:e2:90:41:a1:17:f5:fa:70:0d:b1:aa:50:ee:33:
59:02:f7:4b:6b:18:97:8c:62:ce:cd:63:07:f1:4f:
41:c5:1d:6a:74:e7:7e:91:09:9b:ae:be:7e:e7:c4:
ed:8f:cf:05:10:22:be:91:a2:b8:ea:ee:53:eb:2f:
88:6b:da:15:13:66:e4:d9:5c:7a:5c:be:0b:85:4e:
f3:45:46:5a:3c:8e:16:9a:f3:3f:db:1e:e5:ef:d3:
95:20:1f:c0:58:28:3a:4b:7c:c8:a4:5a:e1:eb:9c:
f5:e8:de:6f:a5:9e:db:64:1c:8a:51:d0:c7:45:07:
e2:58:5b:8d:70:93:26:3f:b3:90:b4:5c:22:16:23:
4c:32:5a:a6:fe:53:e7:e8:f7:d6:bd:13:f0:c3:d7:
0d:99:51:94:f6:22:d1:be:bd:0d:06:e4:d6:5d:ae:
0d:7f:5e:1c:e2:c2:8a:8f:77:3f:44:72:5a:b5:ee:
81:4c:6c:92:30:fd:2e:c4:ef:92:3e:f2:de:3d:cc:
27:1b:d4:36:01:7c:2e:0a:1f:42:a1:23:d9:52:13:
84:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:47:6F:F6:50:8C:2C:B1:D9:F4:05:FF:81:90:81:15:F8:9C:82:D3
X509v3 Authority Key Identifier:
keyid:D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/E0dv9lCMLLHZ9AX_gZCBFficgtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.231.0.0/18
Signature Algorithm: sha256WithRSAEncryption
1d:0e:5a:3d:a9:bf:a6:0d:63:b0:df:8b:5d:54:7a:8a:b4:72:
c5:61:24:a8:fc:a1:fb:14:c8:22:66:dc:1a:23:ee:4a:9c:7c:
91:be:b3:63:95:ed:07:90:37:c8:61:43:44:e5:f0:32:25:ac:
0f:f2:12:59:40:cb:63:57:51:19:34:4a:03:aa:4e:69:cc:ae:
42:d2:ae:c6:7e:27:60:0c:8e:99:0b:1e:8c:d1:84:5e:19:bb:
55:43:42:07:0c:01:5e:23:a0:f3:03:c1:69:15:6e:e6:84:51:
4e:aa:83:1b:af:d0:5e:e2:0e:99:41:a9:1f:58:ab:b8:72:d4:
91:11:64:bb:f8:38:2f:5b:3c:af:8b:db:44:fc:bf:02:5c:92:
05:b5:9b:ac:fc:36:56:39:d6:95:80:8a:62:a4:94:49:f0:82:
c6:91:7f:83:6a:5e:88:cd:9e:f5:dd:ac:a5:1b:bb:cc:70:da:
c2:44:e9:ca:de:f6:f2:54:b9:83:b9:66:38:45:da:e9:f7:e7:
d8:24:21:1f:59:6a:6d:3c:30:d6:43:02:06:86:75:cc:0f:5c:
c8:3b:8d:1e:4b:0d:ac:0c:c7:63:30:8e:b4:0f:2c:31:1b:46:
59:d9:5f:62:30:8b:62:72:08:4d:dc:81:8f:b4:23:9d:63:2b:
cf:2c:26:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:47:05 2025 by rpki-client