Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/dtdTDQpOicFaaz7OB8D1tZO3WTc.roa
File: dtdTDQpOicFaaz7OB8D1tZO3WTc.roa (raw, json)
Hash identifier: PEweCla6dsP23bateYWH7/qm/OQl2T/wnTTq09MQeZc=
Subject key identifier: 76:D7:53:0D:0A:4E:89:C1:5A:6B:3E:CE:07:C0:F5:B5:93:B7:59:37
Certificate issuer: /CN=ae209c92646ae342caa5d46dc1d3735a0d2e7b14
Certificate serial: 01856CCABFD5D7581DCCF832CB4017F44585
Authority key identifier: AE:20:9C:92:64:6A:E3:42:CA:A5:D4:6D:C1:D3:73:5A:0D:2E:7B:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/riCckmRq40LKpdRtwdNzWg0uexQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/dtdTDQpOicFaaz7OB8D1tZO3WTc.roa
Signing time: Sun 01 Jan 2023 10:05:04 +0000
ROA not before: Sun 01 Jan 2023 10:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58188
IP address blocks: 193.27.42.0/24 maxlen: 24
91.193.244.0/22 maxlen: 22
91.193.244.0/24 maxlen: 24
91.193.245.0/24 maxlen: 24
91.193.246.0/24 maxlen: 24
91.193.247.0/24 maxlen: 24
2a0e:9ac0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:bf:d5:d7:58:1d:cc:f8:32:cb:40:17:f4:45:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae209c92646ae342caa5d46dc1d3735a0d2e7b14
Validity
Not Before: Jan 1 10:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76d7530d0a4e89c15a6b3ece07c0f5b593b75937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:99:9b:3e:63:cc:fe:81:9f:38:c1:b6:56:6f:
01:51:f8:32:a8:9e:05:cb:aa:53:06:f2:03:c1:9c:
a7:52:8b:52:19:a6:d1:06:77:7f:46:93:47:1c:17:
03:d8:dc:2c:b4:44:1f:b3:2a:cc:a6:56:1a:d6:37:
e2:41:9c:5b:30:a5:dc:38:a4:10:78:5f:fc:bc:94:
b4:ae:5c:e3:18:b1:f3:fb:24:cb:99:7c:04:13:6d:
9d:36:7c:da:07:3b:be:06:56:95:a8:58:59:ce:d7:
eb:98:05:dd:1d:28:69:98:21:ae:3f:5f:46:b7:f2:
7f:ee:bc:90:57:83:c9:4c:a2:70:bc:0a:db:24:0b:
d0:6c:be:de:40:07:97:ad:a3:6a:50:25:57:9c:ba:
57:78:1b:0f:ec:79:30:33:38:87:58:b2:4d:be:fd:
72:61:3e:f0:f4:e8:72:62:ae:c9:67:22:b2:dd:a4:
f8:ad:88:d2:f6:55:cd:d6:bd:76:26:39:f9:4e:b9:
05:c6:42:72:f5:f3:49:2b:30:31:2b:ec:68:ca:98:
36:98:db:56:d2:13:20:0d:b7:2d:65:5a:08:50:10:
8e:23:68:de:0c:01:fb:eb:b1:e4:ce:d1:27:cc:1e:
1b:2c:ca:1c:b7:e9:a8:67:30:ac:b4:ef:b2:48:c2:
84:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D7:53:0D:0A:4E:89:C1:5A:6B:3E:CE:07:C0:F5:B5:93:B7:59:37
X509v3 Authority Key Identifier:
keyid:AE:20:9C:92:64:6A:E3:42:CA:A5:D4:6D:C1:D3:73:5A:0D:2E:7B:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riCckmRq40LKpdRtwdNzWg0uexQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/dtdTDQpOicFaaz7OB8D1tZO3WTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.244.0/22
193.27.42.0/24
IPv6:
2a0e:9ac0::/32
Signature Algorithm: sha256WithRSAEncryption
5e:5e:8b:ab:12:75:d2:1e:6c:33:37:13:3b:97:5a:2b:11:c2:
bd:cd:12:e1:15:7c:6f:f1:f5:c1:b6:f2:54:f8:dc:03:51:ae:
ad:59:94:4e:54:af:b9:0a:6f:2b:e0:48:cc:eb:4c:b7:f3:e3:
5d:4b:c9:43:7c:bc:53:27:4b:35:92:f4:09:a7:dd:36:62:b7:
6d:7a:b8:72:49:99:14:36:52:5f:96:18:b8:59:33:67:8d:6a:
1b:bf:27:0d:d3:d1:78:d0:d3:2c:59:94:42:dc:b9:d5:c9:59:
20:a3:56:4f:73:69:c5:f9:54:12:82:f9:78:d7:86:90:0e:c2:
b5:55:c9:bb:0b:56:3b:2d:2d:a8:ba:9d:c2:73:b4:28:7a:5d:
06:05:81:22:a5:ee:41:13:22:59:6e:7e:ff:82:d4:ee:73:37:
13:29:7a:2b:04:db:14:46:2a:12:4a:e0:83:e9:1b:11:6f:d2:
a4:5d:26:e3:9e:45:36:a2:a6:09:27:da:71:b0:bf:b3:e2:94:
75:51:68:1a:45:a7:41:03:fc:f0:5b:66:7d:fc:d4:51:38:39:
fe:25:7d:fa:4c:c4:20:ea:32:0a:59:74:b7:37:e1:5f:e5:3a:
03:78:3c:b3:1d:07:94:31:b0:96:96:af:57:16:b9:7b:74:03:
9c:c3:c8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:13 2025 by rpki-client