Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/n8A77z4rYaO2RSsSujtQSHxD8Mo.roa
File: n8A77z4rYaO2RSsSujtQSHxD8Mo.roa (raw, json)
Hash identifier: Kj/S5qK+HMQmwLOVyUK0QVp8OaA23qhZTHbMoUUPHRA=
Subject key identifier: 9F:C0:3B:EF:3E:2B:61:A3:B6:45:2B:12:BA:3B:50:48:7C:43:F0:CA
Certificate issuer: /CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce
Certificate serial: 018571FA40F610280D297B83B0C7811FFCB9
Authority key identifier: 9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/n8A77z4rYaO2RSsSujtQSHxD8Mo.roa
Signing time: Mon 02 Jan 2023 10:15:04 +0000
ROA not before: Mon 02 Jan 2023 10:15:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50889
IP address blocks: 193.246.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:fa:40:f6:10:28:0d:29:7b:83:b0:c7:81:1f:fc:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce
Validity
Not Before: Jan 2 10:15:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9fc03bef3e2b61a3b6452b12ba3b50487c43f0ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cd:da:96:78:92:4a:69:25:79:a1:9e:53:ad:
41:62:32:aa:2a:fa:59:e0:27:22:06:f5:e9:81:20:
51:12:26:68:22:f8:6c:fc:ed:76:be:c1:0b:90:ac:
a7:fd:bd:c0:4c:09:f5:14:e3:d7:e0:55:a1:b8:36:
70:1d:58:5e:6b:9a:2c:7f:70:af:44:a9:99:62:fa:
5e:94:f6:f2:09:cb:34:d0:7e:70:e7:29:ef:dd:6e:
8a:5b:e1:70:17:e4:8a:73:b6:4f:d7:26:d1:a0:1e:
22:fa:45:5f:77:f0:5c:dc:dc:9c:7b:14:96:72:36:
58:7a:c9:1d:be:01:46:49:34:ee:9d:ba:53:d0:4c:
31:47:11:1c:63:57:f0:10:96:89:b6:48:55:bc:56:
ff:40:a5:72:01:a9:2c:57:71:a2:77:88:7f:f0:d0:
ce:47:4a:aa:12:fd:08:a2:b7:e7:22:db:c4:92:fb:
ee:a8:13:bf:27:13:ac:7e:01:68:f5:cd:00:27:41:
c4:13:fd:8a:3e:f6:aa:33:53:89:93:59:ed:7b:e7:
be:ec:ad:93:b7:3e:60:27:37:2e:63:4e:98:04:4c:
be:98:ab:f4:6d:74:10:0d:71:a0:7d:5e:37:19:da:
23:e1:7b:e6:33:ef:3d:92:3e:46:5b:ff:17:6d:13:
2c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C0:3B:EF:3E:2B:61:A3:B6:45:2B:12:BA:3B:50:48:7C:43:F0:CA
X509v3 Authority Key Identifier:
keyid:9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/n8A77z4rYaO2RSsSujtQSHxD8Mo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.51.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:6b:34:33:8d:d0:12:4e:48:bb:ab:e1:56:4c:b8:d0:cf:11:
66:a3:96:95:40:ca:90:e8:9b:80:21:50:e5:8f:bf:76:aa:07:
f6:1c:99:24:07:68:f6:b7:ae:ad:cc:c1:a1:90:11:39:06:29:
54:2c:5e:1f:8d:2d:03:7d:18:88:1a:a6:55:f3:7a:d4:18:14:
c2:2a:f9:7f:45:76:bf:95:21:24:aa:4e:e1:19:1c:9a:f3:28:
81:e3:bd:a0:87:31:1f:59:44:3c:04:9a:d0:a3:9e:1f:41:2f:
c2:3c:a4:79:b3:95:ac:9b:36:4d:0a:f9:45:db:cf:8d:a9:07:
52:c9:70:ad:fb:88:2b:b1:c0:7e:f6:9c:ea:42:d8:62:fe:5a:
d9:32:19:4f:9c:e6:48:4d:32:cf:a4:74:d5:15:e3:da:1e:a6:
cf:bc:56:75:09:f7:60:85:1c:73:62:9f:f4:aa:c2:47:a5:6e:
c2:59:c8:61:2d:6e:47:79:fb:9e:68:4f:40:d2:ba:96:f5:49:
31:5f:33:11:96:1a:45:52:60:67:84:a0:ac:b0:48:f1:8c:0a:
b5:f7:f6:8c:71:f2:41:cd:f8:b2:f2:ac:cb:e2:f5:e1:66:24:
e8:50:aa:1b:b4:64:75:39:ff:04:3f:b2:56:bf:32:85:30:70:
65:ec:45:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:04 2025 by rpki-client