Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/C5GMQH63H2f2drKzjs1MtDLYpO4.roa
File: C5GMQH63H2f2drKzjs1MtDLYpO4.roa (raw, json)
Hash identifier: BNlPGBiKn0omy0H5qJ2ONCF588JQAEHs8mkhOAIFhTU=
Subject key identifier: 0B:91:8C:40:7E:B7:1F:67:F6:76:B2:B3:8E:CD:4C:B4:32:D8:A4:EE
Certificate issuer: /CN=9c83133a7e0593bb398eadb92758cbc92c9d65a5
Certificate serial: 024BAF30
Authority key identifier: 9C:83:13:3A:7E:05:93:BB:39:8E:AD:B9:27:58:CB:C9:2C:9D:65:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nIMTOn4Fk7s5jq25J1jLySydZaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/C5GMQH63H2f2drKzjs1MtDLYpO4.roa
Signing time: Sat 01 Jan 2022 06:58:20 +0000
ROA not before: Sat 01 Jan 2022 06:58:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51262
IP address blocks: 193.17.26.0/24 maxlen: 24
193.17.55.0/24 maxlen: 24
193.17.64.0/24 maxlen: 24
2a0f:7940::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38514480 (0x24baf30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c83133a7e0593bb398eadb92758cbc92c9d65a5
Validity
Not Before: Jan 1 06:58:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b918c407eb71f67f676b2b38ecd4cb432d8a4ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:8e:a9:35:22:38:88:5d:6c:fb:3f:fe:9f:b6:
1d:44:f3:a6:03:ad:dc:c5:94:f3:d1:78:7d:3b:ce:
87:34:7d:70:a9:a8:22:36:ad:b5:aa:bc:16:d8:30:
86:3e:d1:ed:4d:4d:d7:a8:95:72:23:43:b0:a3:ed:
a2:96:c2:7e:9e:de:29:fa:e6:cf:d8:30:71:fd:0d:
1a:a2:c3:6b:9a:cc:88:5b:96:72:cd:bd:d5:1a:0e:
83:8d:3f:65:8b:9f:c7:e3:b4:2c:09:7c:2a:32:59:
4b:e0:16:b7:cb:77:75:a6:f9:3b:40:a6:00:8b:f7:
73:c5:68:fd:d0:98:c8:ca:f9:f0:f1:09:45:7a:cc:
51:53:b0:df:2d:18:b6:de:ed:78:17:2d:25:9f:e2:
a3:2f:85:63:cb:a9:04:fe:bf:fc:a3:bf:72:7c:67:
e9:db:ae:13:fb:53:da:99:cc:15:c4:29:8d:c6:72:
15:0b:2a:31:7d:8a:31:2f:09:77:c7:c5:e3:d5:06:
cb:6e:3a:91:6c:52:61:d4:c1:23:55:f6:c6:9f:ab:
57:ad:37:be:eb:d8:3b:cf:c7:a3:d6:91:31:c4:26:
d1:bc:f2:c3:b6:3c:b7:85:a6:95:74:7d:10:eb:6d:
66:66:15:0c:01:2a:96:0a:a2:1b:86:8f:35:93:58:
29:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:91:8C:40:7E:B7:1F:67:F6:76:B2:B3:8E:CD:4C:B4:32:D8:A4:EE
X509v3 Authority Key Identifier:
keyid:9C:83:13:3A:7E:05:93:BB:39:8E:AD:B9:27:58:CB:C9:2C:9D:65:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nIMTOn4Fk7s5jq25J1jLySydZaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/C5GMQH63H2f2drKzjs1MtDLYpO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.26.0/24
193.17.55.0/24
193.17.64.0/24
IPv6:
2a0f:7940::/29
Signature Algorithm: sha256WithRSAEncryption
99:1b:f8:ed:ac:5c:74:ed:19:69:fe:1c:31:84:01:32:0f:49:
a1:d1:0a:ef:dc:7e:3e:1c:22:23:20:d9:e6:d5:9e:2e:e3:f7:
42:7f:f2:c5:2b:dd:8f:63:8f:6a:ba:7b:d2:c2:86:bc:78:5a:
56:38:aa:ab:16:34:1e:19:9c:7a:69:c6:7d:52:40:3f:5a:34:
90:fc:92:60:1d:f9:e6:29:04:99:e8:01:cf:85:73:a2:f2:11:
e7:8c:63:61:0a:5d:6e:cc:b2:32:91:1a:d1:82:4f:09:04:f9:
84:56:64:2d:38:5c:05:ae:41:4e:b1:53:d3:38:2d:d7:cb:a9:
07:6e:02:fd:02:28:86:5b:a5:3e:ad:43:54:f1:d0:91:1a:5f:
bf:c5:78:f9:4c:1f:80:b8:e3:64:5a:88:a2:99:7c:36:96:5d:
8c:16:9f:c8:65:4b:19:f8:b1:25:c0:86:bf:6d:d5:dd:5c:0c:
57:39:30:0f:5e:47:52:0e:fd:ea:82:cc:88:93:0a:5b:0d:ed:
3e:77:60:2c:eb:eb:70:4f:e7:7e:6f:e4:1c:d7:51:79:1d:c6:
62:4b:9f:92:52:c2:c6:4d:80:e4:44:6a:cf:75:7a:f6:f0:df:
d2:39:62:eb:95:cb:3d:fb:a3:89:c3:b9:b1:c6:2d:6b:dd:0c:
73:21:95:f4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:08 2025 by rpki-client