Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/m_w17xoRsQGSh5eO1HP7EpIuVsc.roa
File: m_w17xoRsQGSh5eO1HP7EpIuVsc.roa (raw, json)
Hash identifier: PCL242w1EPEk5pZ0tUa2XZ0sBpcH7yN7WB0h0b8819w=
Subject key identifier: 9B:FC:35:EF:1A:11:B1:01:92:87:97:8E:D4:73:FB:12:92:2E:56:C7
Certificate issuer: /CN=b50df65a2fcb9b117a853a6b56854b0718ec3343
Certificate serial: 018750CD95BA2FD4B4D31C264ED20CAFE124
Authority key identifier: B5:0D:F6:5A:2F:CB:9B:11:7A:85:3A:6B:56:85:4B:07:18:EC:33:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/m_w17xoRsQGSh5eO1HP7EpIuVsc.roa
Signing time: Wed 05 Apr 2023 09:44:23 +0000
ROA not before: Wed 05 Apr 2023 09:44:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62371
IP address blocks: 194.0.147.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:50:cd:95:ba:2f:d4:b4:d3:1c:26:4e:d2:0c:af:e1:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b50df65a2fcb9b117a853a6b56854b0718ec3343
Validity
Not Before: Apr 5 09:44:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9bfc35ef1a11b1019287978ed473fb12922e56c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:82:87:15:47:5d:77:66:95:be:b0:74:9c:c0:
13:64:b2:f2:07:f3:ae:1c:0f:2a:1b:c1:81:76:a9:
55:af:8c:65:9b:3b:38:76:32:2e:5b:5d:7f:5f:31:
5d:66:a6:c9:1b:9a:20:23:14:18:b8:ca:a8:ea:4d:
d6:03:e2:4c:98:7e:a5:af:92:75:de:0c:4e:ef:78:
8b:76:52:f1:ce:79:e9:f0:ce:7f:88:20:db:28:cd:
06:52:85:d0:63:16:7f:b8:45:48:67:77:a0:ae:1b:
a9:21:68:69:ed:8c:8e:46:95:4d:c3:b6:57:70:bb:
c4:d2:b6:db:c7:c9:15:3a:e7:ce:fa:c5:b6:89:19:
77:a3:80:0b:2b:1b:26:6c:31:93:fa:fb:63:7c:7a:
d1:1d:5d:c2:c2:20:56:00:30:9e:3a:36:c5:17:e2:
3a:37:eb:02:2e:7a:5d:67:3e:30:a6:e5:4f:b6:e1:
1f:5a:d1:a8:af:eb:2a:88:72:95:3c:d5:b2:45:5f:
99:28:cd:b1:2e:06:ab:0d:cb:6c:ff:c5:2d:65:9f:
cc:80:b3:dd:b5:7c:88:b2:3c:f6:59:42:09:ce:a3:
35:6c:f0:9d:01:cb:55:e5:e1:e2:95:83:75:01:9e:
c8:99:e9:2c:1f:62:5f:9f:3b:b1:cf:35:03:bf:3a:
b4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:FC:35:EF:1A:11:B1:01:92:87:97:8E:D4:73:FB:12:92:2E:56:C7
X509v3 Authority Key Identifier:
keyid:B5:0D:F6:5A:2F:CB:9B:11:7A:85:3A:6B:56:85:4B:07:18:EC:33:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/m_w17xoRsQGSh5eO1HP7EpIuVsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.147.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:fa:89:03:de:b3:1a:56:aa:ce:d0:b6:2e:06:54:12:b5:78:
7d:93:fa:fc:04:5e:47:34:de:81:9d:b9:8d:1e:3e:a4:03:64:
11:de:f0:39:f4:c9:91:bc:7e:47:7f:46:8d:cd:65:46:6f:28:
1b:b9:ff:59:11:03:7b:56:a3:2c:ce:15:87:e3:6e:25:35:d8:
88:fb:91:d4:4b:44:95:bc:7b:41:a9:49:5b:2d:4e:8e:73:1f:
d0:ed:a8:9f:f5:86:99:a0:79:6f:17:92:f8:a2:5d:67:55:16:
55:71:be:a0:06:83:30:54:a1:75:15:d3:21:a4:90:28:8c:d7:
fd:19:f0:db:3b:77:78:62:72:0d:f2:85:ab:ed:96:2a:20:2f:
c2:62:b0:a7:f4:55:46:39:33:22:33:22:eb:c8:21:f3:68:b6:
2a:0e:2a:fc:0d:f7:2d:b1:b8:08:7e:c4:57:8d:c1:61:bf:4c:
71:e8:a3:59:09:35:b3:82:0c:5d:2b:27:3f:e6:af:cf:54:5a:
b1:56:62:1f:9c:8a:b7:c6:9e:96:70:d9:06:39:40:29:99:fe:
93:e8:d6:03:2b:ef:75:cb:a8:57:68:b9:dd:e8:f0:27:1b:b9:
66:f5:b3:83:db:78:13:a5:cd:5a:4b:1a:ea:3b:e3:77:17:4e:
39:81:71:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:35 2025 by rpki-client