Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/9fmD5nVNzXA_6An0sfwNp2MTMIk.roa
File: 9fmD5nVNzXA_6An0sfwNp2MTMIk.roa (raw, json)
Hash identifier: QgZAfkZduCpInagTrex+JkC0gG680Bk9Gz9O3YiqNzE=
Subject key identifier: F5:F9:83:E6:75:4D:CD:70:3F:E8:09:F4:B1:FC:0D:A7:63:13:30:89
Certificate issuer: /CN=c32cc7a964f4f370929291e19fff7de53f19be44
Certificate serial: 01834058F9CC8AF88B601B786BF03C2598D9
Authority key identifier: C3:2C:C7:A9:64:F4:F3:70:92:92:91:E1:9F:FF:7D:E5:3F:19:BE:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wyzHqWT083CSkpHhn_995T8ZvkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/9fmD5nVNzXA_6An0sfwNp2MTMIk.roa
Signing time: Thu 15 Sep 2022 08:51:56 +0000
ROA not before: Thu 15 Sep 2022 08:51:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48037
IP address blocks: 193.177.248.0/21 maxlen: 24
193.176.225.0/24 maxlen: 24
193.176.224.0/24 maxlen: 24
193.176.223.0/24 maxlen: 24
193.176.222.0/24 maxlen: 24
193.176.226.0/24 maxlen: 24
193.176.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:40:58:f9:cc:8a:f8:8b:60:1b:78:6b:f0:3c:25:98:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c32cc7a964f4f370929291e19fff7de53f19be44
Validity
Not Before: Sep 15 08:51:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f5f983e6754dcd703fe809f4b1fc0da763133089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:26:f0:bc:9b:34:11:38:14:91:6b:ae:45:11:
17:77:6c:12:9f:a5:13:a5:d0:b3:3f:1a:bb:d3:88:
86:d3:90:dd:4e:ee:52:74:ba:c0:ad:bf:cc:a2:da:
f5:78:44:87:8a:02:23:80:30:f4:fa:45:14:b3:46:
75:e0:3c:2c:5d:63:9c:21:fe:33:1d:34:2e:e1:6e:
ad:35:cc:7a:94:78:95:25:b6:3f:b0:b2:2b:02:87:
b7:95:b3:65:d8:1e:05:93:88:57:36:cb:d4:4c:5d:
0c:f7:c9:f1:b0:39:06:d1:d4:b3:c8:01:47:20:87:
4b:e3:60:85:7c:31:b2:f7:79:25:9d:6c:7e:71:f0:
d2:22:00:bd:d7:43:bd:a1:df:3a:f5:3d:ec:5d:23:
73:4b:7e:8d:7b:51:cd:3f:2b:e8:e3:74:d1:cf:44:
19:ea:91:59:eb:cf:cd:28:75:e9:93:b1:88:fe:b6:
5e:c4:2f:1d:8f:c9:c2:41:75:05:b1:88:05:f8:ae:
00:62:7f:d9:ab:40:3d:99:61:b8:b6:23:dd:3f:08:
d0:6a:2f:1c:04:12:fb:6d:d3:ac:cb:02:4a:c1:c7:
ef:88:d0:3e:98:88:30:28:b6:0e:f1:f9:a9:04:67:
b8:21:d0:f8:bf:91:0c:b5:60:9a:89:88:ca:7b:19:
f3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F9:83:E6:75:4D:CD:70:3F:E8:09:F4:B1:FC:0D:A7:63:13:30:89
X509v3 Authority Key Identifier:
keyid:C3:2C:C7:A9:64:F4:F3:70:92:92:91:E1:9F:FF:7D:E5:3F:19:BE:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wyzHqWT083CSkpHhn_995T8ZvkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/9fmD5nVNzXA_6An0sfwNp2MTMIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/wyzHqWT083CSkpHhn_995T8ZvkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.222.0-193.176.226.255
193.176.234.0/24
193.177.248.0/21
Signature Algorithm: sha256WithRSAEncryption
3b:7f:c3:24:b1:a4:be:d2:b4:5b:ce:70:67:96:37:50:bf:e5:
12:a3:d1:78:84:2f:87:d4:0e:3f:f0:c7:d6:d1:12:f2:9e:49:
dd:4b:0c:2d:60:13:61:9f:da:33:0f:71:6f:a0:de:a1:2f:7d:
84:8a:0d:5b:7b:08:a5:3f:8f:91:df:0a:16:fa:95:ec:60:ff:
f5:60:d5:9c:e5:31:91:a7:d0:b0:5a:a5:0a:f8:00:74:3f:d4:
1b:d1:58:a3:57:6a:b7:db:d8:72:56:24:01:72:af:b1:d0:8d:
f7:ef:36:d2:48:ab:19:e0:d3:d4:6c:e0:0a:31:d3:da:3d:c6:
37:66:1d:5c:7a:8b:c3:ec:6b:a3:73:a6:90:02:bc:08:c2:17:
d1:79:be:75:54:ed:1d:ac:0d:68:f1:2d:c1:2f:74:18:8f:35:
8f:75:aa:24:a3:35:a6:4b:5b:47:74:5d:96:3e:63:71:f4:e2:
65:f9:2f:31:d2:d3:29:09:29:e0:87:31:ff:d9:77:e4:27:01:
7a:77:7c:b4:d9:7b:9c:73:b5:1c:30:ce:22:b2:0b:fd:20:58:
82:31:79:db:1b:0c:87:43:de:d6:dc:74:1d:b7:1a:b7:e3:6d:
14:54:4e:64:a9:32:40:93:c9:80:59:e6:5a:a0:cd:3d:1c:a6:
c4:8d:ac:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:36:03 2025 by rpki-client