Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/9VXx-mBpnNBqk_1ir_Lk8i7bQ8w.roa
File: 9VXx-mBpnNBqk_1ir_Lk8i7bQ8w.roa (raw, json)
Hash identifier: N1JTNSRg0u/B0g3lM2vgctavDHS0xeRiCoSZQ6gHQoM=
Subject key identifier: F5:55:F1:FA:60:69:9C:D0:6A:93:FD:62:AF:F2:E4:F2:2E:DB:43:CC
Certificate issuer: /CN=ae6f18416d7d470aa04ad00bca57683c789d854d
Certificate serial: 01856BAED675A13F8DD3A99732B46C7EE56D
Authority key identifier: AE:6F:18:41:6D:7D:47:0A:A0:4A:D0:0B:CA:57:68:3C:78:9D:85:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rm8YQW19RwqgStALyldoPHidhU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/9VXx-mBpnNBqk_1ir_Lk8i7bQ8w.roa
Signing time: Sun 01 Jan 2023 04:54:58 +0000
ROA not before: Sun 01 Jan 2023 04:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3303
IP address blocks: 193.73.242.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ae:d6:75:a1:3f:8d:d3:a9:97:32:b4:6c:7e:e5:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae6f18416d7d470aa04ad00bca57683c789d854d
Validity
Not Before: Jan 1 04:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f555f1fa60699cd06a93fd62aff2e4f22edb43cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7e:71:69:28:16:c6:fa:95:c3:99:5c:30:47:
c9:1c:4e:5b:81:d3:a4:d5:33:70:cf:08:12:93:a7:
15:9d:e6:f9:92:da:f2:3a:52:b6:d7:f3:f9:16:e8:
b7:25:46:99:ec:bb:3e:92:45:ca:2c:6b:0c:8a:4d:
02:6e:73:b1:25:96:b6:92:96:8c:4b:64:5c:3d:42:
3e:02:0f:72:30:38:aa:07:80:21:64:d9:d4:8a:a9:
8d:c7:3d:e0:94:66:1c:fb:dd:10:6b:39:b0:bb:e4:
97:62:b3:66:64:b7:24:ac:59:f8:35:8b:3f:d7:11:
19:b4:a6:aa:d0:9b:fe:b6:72:c3:25:3e:9c:96:cf:
d0:ac:25:fe:fd:99:d2:05:ad:c4:ac:c6:a5:ce:88:
c6:89:b3:c2:d2:ef:14:f7:7f:8c:97:03:d1:39:58:
3a:d2:ca:18:ec:60:6f:df:5f:f2:e5:52:e7:d3:6a:
88:79:3f:01:a4:e6:c4:51:0a:6d:8d:20:2b:74:81:
7a:08:ae:28:b9:be:17:e7:28:1a:17:ee:fc:34:83:
06:28:9b:b9:94:16:39:63:72:54:10:d7:5b:ff:93:
c0:08:da:76:fe:2c:1a:08:57:ec:6d:c4:24:ac:a1:
d4:05:d2:2c:d6:5f:d1:71:84:86:eb:ad:82:b1:a1:
d9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:55:F1:FA:60:69:9C:D0:6A:93:FD:62:AF:F2:E4:F2:2E:DB:43:CC
X509v3 Authority Key Identifier:
keyid:AE:6F:18:41:6D:7D:47:0A:A0:4A:D0:0B:CA:57:68:3C:78:9D:85:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rm8YQW19RwqgStALyldoPHidhU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/9VXx-mBpnNBqk_1ir_Lk8i7bQ8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.73.242.0/23
Signature Algorithm: sha256WithRSAEncryption
98:5d:bd:c1:53:6a:fc:55:56:d6:46:f3:6c:9f:bd:fe:c7:1d:
8d:c2:7a:f1:ce:6c:09:5b:f9:82:87:03:fa:bc:0b:e4:aa:00:
d4:64:65:fb:82:3c:15:cb:f4:c5:02:52:9e:58:fc:e9:bb:57:
65:66:73:42:4d:91:54:56:7d:7a:bf:92:d5:76:a4:dc:20:74:
58:34:78:45:66:04:43:12:5f:f6:81:a0:31:15:27:71:45:46:
7d:0e:aa:2c:12:32:83:a5:05:30:cf:8a:be:fb:73:e5:43:c0:
c6:30:5d:c6:cd:3c:65:4b:3a:61:2c:ba:2e:ca:af:6f:58:05:
f0:2e:66:47:03:ef:8c:cc:e7:ae:69:71:89:53:ad:ad:2a:e1:
fc:8b:95:65:79:d8:f7:51:be:ed:02:de:5d:33:b7:29:11:56:
5d:57:f1:63:e6:dc:60:1d:11:b7:45:8d:e3:1e:e0:c2:30:ae:
7a:0d:76:e1:ac:dc:3f:2b:78:da:b2:0b:2c:50:b5:34:17:52:
c7:8c:9b:b6:4f:0f:be:39:85:e8:7a:0b:b9:c4:b2:d7:52:9a:
51:18:82:46:10:bc:dd:1d:a6:d0:d3:0e:b9:f7:17:f3:99:87:
ab:0b:eb:2a:5d:b6:24:5f:df:11:28:0b:22:7b:da:b6:49:e2:
c0:5a:fa:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:00 2025 by rpki-client