Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/lUdrkFEp_tg-j4W-iqmhFyua4K0.roa
File: lUdrkFEp_tg-j4W-iqmhFyua4K0.roa (raw, json)
Hash identifier: KJZgyl9/+t3BYOdckYujdaI5qr4EGFrKODNAVhhpC18=
Subject key identifier: 95:47:6B:90:51:29:FE:D8:3E:8F:85:BE:8A:A9:A1:17:2B:9A:E0:AD
Certificate issuer: /CN=99dd6f08822ae0ba5054542456923faf9040f5d0
Certificate serial: 0184E2B9637167364F4CC2907B646F0056C8
Authority key identifier: 99:DD:6F:08:82:2A:E0:BA:50:54:54:24:56:92:3F:AF:90:40:F5:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/md1vCIIq4LpQVFQkVpI_r5BA9dA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/lUdrkFEp_tg-j4W-iqmhFyua4K0.roa
Signing time: Mon 05 Dec 2022 14:38:31 +0000
ROA not before: Mon 05 Dec 2022 14:38:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59752
IP address blocks: 193.109.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e2:b9:63:71:67:36:4f:4c:c2:90:7b:64:6f:00:56:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99dd6f08822ae0ba5054542456923faf9040f5d0
Validity
Not Before: Dec 5 14:38:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=95476b905129fed83e8f85be8aa9a1172b9ae0ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:47:cf:ab:ce:43:48:89:97:a8:25:ad:44:56:
6b:57:93:61:47:cf:13:48:03:56:89:71:75:3c:31:
10:9f:1a:ae:04:42:3f:b1:b5:86:de:a9:70:8c:0c:
17:16:24:3c:58:86:6d:26:ca:be:ab:78:53:bf:6a:
10:80:d9:a5:f5:a7:b7:c9:0e:3d:f8:63:43:45:b7:
ea:f1:23:0b:15:08:fb:01:0d:be:da:81:c6:43:0a:
eb:a2:88:8b:dc:a0:9b:0e:cd:34:10:9c:60:4a:64:
36:43:44:89:04:bc:40:01:0d:bb:3e:fc:06:1f:b3:
e1:f4:da:67:e7:30:bb:32:07:f4:a5:51:ee:91:82:
4e:98:0d:d4:25:1b:d1:36:11:8b:76:bd:a8:be:f3:
ab:b4:47:86:2b:f2:d1:b4:63:d0:be:2d:12:af:3f:
d4:74:2c:11:d0:10:96:b2:60:b1:e7:10:b5:03:a6:
90:6e:f8:94:2e:0e:0a:80:fe:ef:7a:6d:8d:4c:2d:
16:59:b4:2e:fa:35:d2:fd:6a:f9:41:06:a8:05:1d:
67:c4:f0:9f:8c:15:f7:0a:e2:61:d8:3e:41:51:1d:
04:fb:64:aa:2a:c2:53:69:a1:ac:ed:49:a5:f5:c4:
20:1f:9d:ad:7b:cd:90:80:a9:6c:c4:8b:b7:bb:91:
f7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:47:6B:90:51:29:FE:D8:3E:8F:85:BE:8A:A9:A1:17:2B:9A:E0:AD
X509v3 Authority Key Identifier:
keyid:99:DD:6F:08:82:2A:E0:BA:50:54:54:24:56:92:3F:AF:90:40:F5:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/md1vCIIq4LpQVFQkVpI_r5BA9dA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/lUdrkFEp_tg-j4W-iqmhFyua4K0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.237.0/24
Signature Algorithm: sha256WithRSAEncryption
34:3e:9e:8c:14:d1:79:de:ea:74:05:c0:7b:1e:29:54:6a:56:
6c:49:b4:8d:a1:42:6c:b7:31:1b:a5:57:ea:9a:b1:81:4e:36:
fb:85:8b:2f:35:54:3f:38:f1:07:c3:78:6a:4a:e9:94:b7:9b:
9e:28:32:fc:ee:1d:50:19:da:2b:2b:e8:51:2f:76:c0:b9:81:
cd:d4:e9:3d:31:18:63:1b:88:81:3d:f6:47:3e:ea:33:9b:82:
6f:54:87:9f:8a:7d:21:32:84:f4:5a:d8:e6:d4:9b:cd:71:4b:
8a:a9:9d:60:00:b1:43:9b:f3:57:b1:3f:bc:29:8d:a9:3c:2e:
a8:17:37:ad:c4:8e:01:93:7f:28:e3:de:c8:ce:88:42:29:19:
29:74:79:25:a2:7a:8a:db:01:bd:cc:8a:75:7d:af:22:19:a2:
ff:ab:21:6b:fd:6b:04:a7:c0:3f:35:9f:dd:b8:19:9a:dc:c7:
58:f2:46:c3:a6:f5:26:ce:29:df:26:30:b4:09:bf:59:15:ef:
34:4e:2a:4c:74:b7:ba:10:0f:07:76:b0:52:62:6d:45:08:11:
36:fe:de:3b:04:db:56:43:61:b3:19:80:a4:c5:7e:2b:4a:f1:
f4:7d:cc:8a:55:59:d1:20:ff:0a:3f:13:51:8b:f6:6a:09:e6:
b7:26:43:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:06:02 2025 by rpki-client