Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/Nu835zx73wmKCWalVMRV5tiVXcM.roa
File: Nu835zx73wmKCWalVMRV5tiVXcM.roa (raw, json)
Hash identifier: 79F0HTTn0iYmZnXxkIuLeO+IoldsWCORUV/UCbCVYvM=
Subject key identifier: 36:EF:37:E7:3C:7B:DF:09:8A:09:66:A5:54:C4:55:E6:D8:95:5D:C3
Certificate issuer: /CN=9c83133a7e0593bb398eadb92758cbc92c9d65a5
Certificate serial: 01851574329AA1C02DAC57955006DF85AE20
Authority key identifier: 9C:83:13:3A:7E:05:93:BB:39:8E:AD:B9:27:58:CB:C9:2C:9D:65:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nIMTOn4Fk7s5jq25J1jLySydZaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/Nu835zx73wmKCWalVMRV5tiVXcM.roa
Signing time: Thu 15 Dec 2022 11:03:34 +0000
ROA not before: Thu 15 Dec 2022 11:03:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51262
IP address blocks: 193.17.26.0/24 maxlen: 24
193.17.64.0/24 maxlen: 24
2a0f:7940::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:15:74:32:9a:a1:c0:2d:ac:57:95:50:06:df:85:ae:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c83133a7e0593bb398eadb92758cbc92c9d65a5
Validity
Not Before: Dec 15 11:03:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=36ef37e73c7bdf098a0966a554c455e6d8955dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:32:9d:45:95:7c:fd:6c:3e:57:2c:0e:7c:f3:
57:26:70:60:07:6b:ed:23:76:de:94:f0:25:1f:70:
8a:9e:ef:92:37:82:0a:84:01:d8:5e:31:cd:bc:ff:
f3:69:98:cb:c8:f2:ea:fa:b3:83:56:58:d3:9c:00:
53:10:7c:d4:5e:27:c6:12:ae:93:eb:10:df:ad:66:
a5:4a:b0:a6:0d:89:54:ed:4f:7d:e7:97:4c:6f:f9:
a9:9b:81:5b:33:69:5f:83:bc:9f:13:0e:2c:a1:d8:
09:56:70:99:79:a6:4f:6f:f2:c9:5f:c3:1a:80:ee:
d1:95:9c:2e:44:15:b9:a8:7e:5e:bf:db:61:4b:7f:
39:b6:ab:78:4d:b1:db:4d:c7:10:db:b7:9f:65:bc:
ac:bc:50:99:1e:6d:9c:5f:35:92:c2:0a:c7:06:bd:
ea:3e:bb:31:4d:8a:ef:c0:fe:87:ea:7d:4c:ae:7b:
c9:2d:a6:c3:3a:09:b8:5d:7f:11:78:3b:14:08:8a:
37:8f:e0:54:b8:13:6c:d4:53:29:0e:c8:b2:f1:67:
c1:8f:cb:b9:d1:6a:74:1d:ba:05:e9:bf:f5:b0:b5:
3e:a2:b2:d5:61:b4:10:66:45:37:77:0f:f7:72:39:
4f:41:0f:95:55:64:db:a0:25:ae:6f:10:9f:28:6b:
9d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:EF:37:E7:3C:7B:DF:09:8A:09:66:A5:54:C4:55:E6:D8:95:5D:C3
X509v3 Authority Key Identifier:
keyid:9C:83:13:3A:7E:05:93:BB:39:8E:AD:B9:27:58:CB:C9:2C:9D:65:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nIMTOn4Fk7s5jq25J1jLySydZaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/Nu835zx73wmKCWalVMRV5tiVXcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.26.0/24
193.17.64.0/24
IPv6:
2a0f:7940::/29
Signature Algorithm: sha256WithRSAEncryption
67:46:e0:e0:f1:44:3a:bb:eb:ad:3f:58:9c:2a:09:13:fc:b9:
ea:25:a9:17:23:ea:1e:e1:e9:6d:5d:3f:93:a0:49:5f:53:87:
e8:2a:a1:74:07:e2:dd:57:e9:87:46:50:dc:ca:85:1d:9e:2a:
6f:7f:81:97:5b:fa:6a:8a:9e:44:dd:a2:e8:e7:91:c7:f3:41:
4e:21:ea:51:d8:29:67:63:a0:37:7b:77:c5:ba:b1:60:93:a5:
f3:7e:f7:66:9e:89:72:16:f7:91:58:3d:18:c5:ac:25:7f:5a:
75:e6:3c:2a:4e:7e:40:df:47:56:63:35:98:b3:46:29:43:d0:
d7:ec:ac:51:9e:f4:37:59:c7:3e:13:12:05:7f:22:ed:4c:a6:
f8:1c:f2:10:2f:56:74:ae:40:e8:5f:90:80:33:48:29:9d:ae:
fe:19:86:d9:29:eb:00:ce:72:8c:e1:99:18:0b:69:65:6c:f0:
18:81:76:ed:27:be:e0:b6:46:8e:12:97:a4:82:92:77:09:67:
e1:27:78:b4:c5:46:55:8e:53:1f:91:d7:da:9b:f8:a2:32:43:
ec:a8:c5:6c:cc:ef:0c:c2:83:aa:5e:4b:5f:5b:71:34:c6:45:
db:a7:62:a5:91:1a:34:14:1d:b4:c3:c5:f9:5e:70:6e:3a:f4:
96:71:ff:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:54:47 2025 by rpki-client