Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/cbsytMuUwhn0ez4NzLzupgSy10k.roa
File: cbsytMuUwhn0ez4NzLzupgSy10k.roa (raw, json)
Hash identifier: g9PBK7iH4kiUTzE2thoJSv5DY2eEX/ZKdmah2M0ryjs=
Subject key identifier: 71:BB:32:B4:CB:94:C2:19:F4:7B:3E:0D:CC:BC:EE:A6:04:B2:D7:49
Certificate issuer: /CN=3f296fe945a23180753f67f7748e6f299d2e672a
Certificate serial: 01857142DE943B4702EE28AEC2E840C4295B
Authority key identifier: 3F:29:6F:E9:45:A2:31:80:75:3F:67:F7:74:8E:6F:29:9D:2E:67:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/cbsytMuUwhn0ez4NzLzupgSy10k.roa
Signing time: Mon 02 Jan 2023 06:54:45 +0000
ROA not before: Mon 02 Jan 2023 06:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12213
IP address blocks: 193.19.188.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:42:de:94:3b:47:02:ee:28:ae:c2:e8:40:c4:29:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f296fe945a23180753f67f7748e6f299d2e672a
Validity
Not Before: Jan 2 06:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=71bb32b4cb94c219f47b3e0dccbceea604b2d749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ed:87:c9:6f:e7:ed:e6:d6:5d:8a:ea:3f:34:
41:84:aa:1a:52:68:0c:b7:69:d7:7f:26:ba:ef:bd:
6d:50:4a:72:97:7f:45:e2:c6:43:fd:18:24:1c:98:
28:41:74:b3:18:a3:ed:b1:38:10:2b:75:00:43:73:
89:37:08:14:93:da:46:c7:9c:04:72:52:09:83:4b:
7e:5e:66:b1:90:bf:77:fc:da:38:f1:fc:4c:92:4e:
6e:aa:43:2f:d5:a8:ed:9f:fe:36:dd:6e:40:da:71:
5a:2e:6f:17:9b:2b:7e:b5:18:79:06:41:54:b8:28:
49:00:73:3c:f6:d6:db:84:5b:97:10:70:de:43:7b:
2c:a1:af:78:af:cf:94:50:8d:02:bc:a0:2e:24:b9:
4a:54:20:99:db:8b:d6:30:5e:e7:be:30:b7:a5:25:
68:ad:bc:82:ae:f5:1f:34:b7:b4:bc:23:18:79:c5:
3c:76:71:74:1b:07:81:f1:b0:5a:34:55:5a:f5:69:
e0:fc:1b:0a:e1:ec:4d:0d:0f:58:8b:93:40:02:72:
b5:3d:40:f6:f2:95:f5:0f:ee:e9:8f:0e:92:10:55:
b3:2e:01:db:07:0c:b7:a4:e6:f0:e4:ae:a9:5e:84:
45:61:06:c4:39:68:5a:58:4f:6e:3e:3e:fe:cf:12:
e1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:BB:32:B4:CB:94:C2:19:F4:7B:3E:0D:CC:BC:EE:A6:04:B2:D7:49
X509v3 Authority Key Identifier:
keyid:3F:29:6F:E9:45:A2:31:80:75:3F:67:F7:74:8E:6F:29:9D:2E:67:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/cbsytMuUwhn0ez4NzLzupgSy10k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.19.188.0/24
Signature Algorithm: sha256WithRSAEncryption
36:89:69:6c:f3:49:e4:d3:f9:87:e4:dd:2b:a1:07:95:ca:33:
4a:91:a5:7b:8c:e3:ad:f6:6e:7e:17:e7:8f:e5:58:82:b2:cf:
52:ea:05:a4:fe:57:42:47:4a:2d:3c:7b:35:6c:ea:ce:d7:15:
0a:ed:6e:c0:7b:ec:ac:d9:d4:99:3e:6b:8e:09:02:a4:49:14:
31:b2:5c:2b:16:5b:5d:44:42:f4:64:9b:55:6f:b1:c0:d5:76:
41:d9:d5:fa:a0:55:be:d5:e3:a0:4f:29:73:a8:49:78:18:c8:
10:ed:9f:f1:78:da:f1:da:f8:72:c2:d5:4d:75:8a:1b:bf:66:
f6:3e:17:76:02:c2:9f:f0:ef:50:aa:e9:ba:f6:3c:40:5a:8e:
a8:10:c5:c8:9d:30:0e:a1:f5:1e:19:64:e6:6a:e4:4a:d9:5a:
f5:e2:61:db:43:a8:3b:d8:a8:11:29:ab:62:9f:74:ce:69:db:
d6:df:00:df:a6:54:ac:3a:85:c3:2d:7d:49:53:e5:35:a3:d8:
32:ff:49:1e:34:41:44:ba:8c:1c:24:b8:eb:a8:e8:d2:59:06:
3c:fa:9d:6f:35:3d:0d:89:81:ab:b9:e8:3e:87:c0:a3:56:75:
ca:e5:7f:e8:1e:24:95:d7:ac:06:8a:19:c9:4a:7c:57:17:10:
44:65:82:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:51:35 2025 by rpki-client