Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e5b520-8d4c-4cd8-a54c-681c4a5d5b74/1/71Ij97YSfBC4ODyPBQrxfduaazI.roa
File: 71Ij97YSfBC4ODyPBQrxfduaazI.roa (raw, json)
Hash identifier: 22Quxfsiq95C/NIVD0wjbyMPMI3LCgKMUcGouFLExnA=
Subject key identifier: EF:52:23:F7:B6:12:7C:10:B8:38:3C:8F:05:0A:F1:7D:DB:9A:6B:32
Certificate issuer: /CN=e8b6e8499ffe31e1f6d6780d03017e83473f2d3c
Certificate serial: 01856F8B95A020A0581F1766D17250BB3140
Authority key identifier: E8:B6:E8:49:9F:FE:31:E1:F6:D6:78:0D:03:01:7E:83:47:3F:2D:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LboSZ_-MeH21ngNAwF-g0c_LTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/e5b520-8d4c-4cd8-a54c-681c4a5d5b74/1/71Ij97YSfBC4ODyPBQrxfduaazI.roa
Signing time: Sun 01 Jan 2023 22:54:56 +0000
ROA not before: Sun 01 Jan 2023 22:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210949
IP address blocks: 193.42.101.0/24 maxlen: 24
193.42.102.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8b:95:a0:20:a0:58:1f:17:66:d1:72:50:bb:31:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b6e8499ffe31e1f6d6780d03017e83473f2d3c
Validity
Not Before: Jan 1 22:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef5223f7b6127c10b8383c8f050af17ddb9a6b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:62:21:79:1e:2d:1a:38:d7:6a:03:6e:8f:84:
61:10:10:0d:1a:2f:1d:33:36:6f:75:7a:65:ed:1e:
eb:a8:52:54:fb:22:6b:6f:54:98:d5:e7:b2:b0:45:
de:3f:9a:5a:68:ed:6d:72:4a:5e:f9:88:ca:5e:1d:
c1:ab:cc:d7:d5:d6:6f:08:b4:3a:0c:19:de:39:64:
91:9c:fe:0b:fd:50:d8:f0:2f:de:98:45:ca:a1:d5:
f9:e9:90:d4:a9:1b:f2:2e:f2:9b:20:83:55:bd:2a:
2f:d4:e9:f0:9b:e4:8a:9e:6b:06:47:b0:5b:2a:01:
ca:03:d2:8d:88:6b:2f:4d:56:9c:09:d3:63:83:aa:
5d:86:50:04:b1:72:1a:0f:2c:e1:b2:23:86:04:3b:
3d:73:b0:77:de:0d:2d:1a:b4:e6:9f:20:e2:70:a4:
8b:2b:2f:6d:16:e6:1f:d9:c0:86:e5:6c:2d:1a:07:
0f:28:b3:81:bb:47:0d:fd:d6:0d:de:ee:ab:76:78:
43:4b:49:23:b5:19:b4:9a:70:8e:97:f9:1c:7f:ef:
19:fa:85:bd:1a:78:81:5b:66:2a:26:ed:c5:65:6f:
24:9a:32:ad:c9:e3:43:67:56:ec:d6:74:46:04:5c:
cd:31:31:25:ae:42:09:94:a2:76:37:41:33:0e:7b:
06:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:52:23:F7:B6:12:7C:10:B8:38:3C:8F:05:0A:F1:7D:DB:9A:6B:32
X509v3 Authority Key Identifier:
keyid:E8:B6:E8:49:9F:FE:31:E1:F6:D6:78:0D:03:01:7E:83:47:3F:2D:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LboSZ_-MeH21ngNAwF-g0c_LTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e5b520-8d4c-4cd8-a54c-681c4a5d5b74/1/71Ij97YSfBC4ODyPBQrxfduaazI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e5b520-8d4c-4cd8-a54c-681c4a5d5b74/1/6LboSZ_-MeH21ngNAwF-g0c_LTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.101.0-193.42.102.255
Signature Algorithm: sha256WithRSAEncryption
38:1c:c9:fb:e5:d6:7e:2b:ce:df:ab:e8:9e:00:7a:fb:be:2d:
62:a8:bd:72:5a:b8:e6:54:3c:48:db:e7:7a:1c:2f:dc:ed:d6:
fd:c7:59:cf:57:66:99:e8:65:fa:37:c2:41:d2:89:0c:e9:5a:
db:53:af:31:b9:f1:df:63:de:77:2c:1c:fe:26:be:27:47:d4:
b0:e1:e0:44:a0:21:a7:e7:14:ec:db:a9:78:b5:73:19:7e:cd:
53:14:22:26:31:27:8b:8c:1e:83:e9:c9:fe:9b:a9:00:bc:4b:
79:38:b2:65:5e:b8:46:d8:cd:a4:db:dd:09:76:fc:ee:c6:83:
bb:4a:a5:99:8a:63:4a:e6:c3:42:43:c7:67:ac:20:99:57:1b:
d4:db:bb:60:e3:b5:ab:21:87:e9:12:d2:85:ae:97:a3:91:09:
77:09:c8:3c:85:e9:a7:64:0b:14:28:c2:2b:99:de:18:09:af:
16:cd:58:ea:83:3b:9b:6d:b4:30:7d:fe:13:16:b3:55:9c:c9:
66:4e:1d:67:c4:83:f9:83:0d:51:c2:2f:fd:88:d0:db:10:d3:
bc:83:08:5e:bb:1f:58:9b:0e:4a:b0:e3:2a:25:fd:b8:7c:53:
f3:e3:52:0a:0e:d9:37:73:d5:f3:05:ec:34:d3:44:8e:97:86:
2d:1f:0e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:08:09 2025 by rpki-client