Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/3svZYQGf_hcO7XxVIAtyH2KYBvA.roa
File: 3svZYQGf_hcO7XxVIAtyH2KYBvA.roa (raw, json)
Hash identifier: /K2IY0NVRs0rR8C1QAQ80xJSRuEkRpf1oyAesWKfJk4=
Subject key identifier: DE:CB:D9:61:01:9F:FE:17:0E:ED:7C:55:20:0B:72:1F:62:98:06:F0
Certificate issuer: /CN=1c53911705ae860c299e6a1a412e50eda1c8228e
Certificate serial: 07D2F767
Authority key identifier: 1C:53:91:17:05:AE:86:0C:29:9E:6A:1A:41:2E:50:ED:A1:C8:22:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/3svZYQGf_hcO7XxVIAtyH2KYBvA.roa
Signing time: Sat 01 Jan 2022 08:56:41 +0000
ROA not before: Sat 01 Jan 2022 08:56:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51566
IP address blocks: 193.189.142.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131266407 (0x7d2f767)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c53911705ae860c299e6a1a412e50eda1c8228e
Validity
Not Before: Jan 1 08:56:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=decbd961019ffe170eed7c55200b721f629806f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a2:88:a6:88:e9:47:0a:7a:6b:70:19:8e:4c:
37:cf:9b:38:be:36:73:9b:3f:d6:6e:b3:e6:77:f2:
f1:cb:b1:a8:b4:66:a8:a2:05:78:10:ca:e7:96:54:
92:c3:bd:24:45:9c:0c:13:a5:a8:8c:c3:9d:59:5a:
df:78:32:3d:de:da:c1:d1:5e:27:e0:ad:52:03:5a:
86:11:80:c0:46:87:d6:1e:9d:cb:23:07:60:71:0c:
35:00:d2:f9:53:ae:fb:03:bc:c5:01:17:f4:f4:60:
c5:fd:0b:bd:be:03:42:83:a1:de:99:ad:fe:9a:33:
a8:05:a1:54:91:7c:7b:77:05:18:5a:cd:81:0a:3d:
16:bc:9f:ea:e3:b5:fd:d7:1b:e9:46:44:fa:0e:eb:
1e:8b:3b:84:9c:1a:3a:85:87:f6:83:9f:49:46:7f:
fe:c7:a2:dd:54:58:94:0c:ff:2a:d6:c9:ad:be:2b:
9f:24:8f:41:79:66:4a:e0:b6:00:f9:c4:f1:b8:5b:
ba:31:5f:0e:42:ed:2a:9d:12:66:50:49:b8:b7:56:
a9:e5:8b:67:0a:4b:d5:23:10:df:a9:08:da:c2:ed:
4e:a3:46:85:4f:ec:f5:cc:19:26:f8:66:51:a4:6b:
9a:75:90:dd:90:db:eb:8a:36:4f:32:73:bb:4d:7f:
de:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:CB:D9:61:01:9F:FE:17:0E:ED:7C:55:20:0B:72:1F:62:98:06:F0
X509v3 Authority Key Identifier:
keyid:1C:53:91:17:05:AE:86:0C:29:9E:6A:1A:41:2E:50:ED:A1:C8:22:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/3svZYQGf_hcO7XxVIAtyH2KYBvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.189.142.0/24
Signature Algorithm: sha256WithRSAEncryption
34:e0:23:f0:3f:fe:46:6a:62:dd:38:dc:a8:f1:45:20:85:a5:
26:6b:bc:b8:68:e1:1f:c4:47:2a:5f:e3:a1:ae:40:b8:f9:e4:
bd:21:28:e8:f4:0c:d5:ca:c8:d4:e1:9a:a5:34:ef:69:5a:08:
3d:f9:bd:93:10:5e:8e:6e:07:4b:ce:b7:c5:26:2a:cb:e0:e1:
fc:58:9b:bb:86:5c:26:8c:e0:c5:47:11:5b:46:64:a1:bb:d5:
72:88:03:31:0d:b6:d8:a6:3b:f5:69:15:a3:7c:26:d8:2a:ec:
f9:11:c2:9c:e3:8d:45:2f:58:cf:3f:1f:6f:f0:66:58:c5:2d:
97:5e:3a:a1:13:0d:85:38:bc:fc:78:a6:a0:bb:6f:4a:60:17:
61:1c:c5:23:57:26:7e:61:d3:87:f3:21:23:d4:6e:59:95:a0:
79:83:38:15:70:dd:dc:89:77:0f:0a:51:45:ac:f2:a0:ba:a5:
33:56:9d:99:e4:9a:b4:f3:95:c2:26:ea:ae:ce:e9:26:28:97:
da:d1:82:34:74:1d:ac:99:39:60:96:7a:fa:4b:2e:56:28:91:
55:bd:35:35:4e:8a:83:9c:ad:af:ff:12:33:e3:39:29:67:3b:
9b:7e:d1:30:22:9b:74:9f:6c:7f:c1:f5:ac:f2:2a:6c:c6:0d:
fe:fa:c3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:06:51 2025 by rpki-client