Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1-f2dAAgS2wf9pRZ-goZFs70zwrs.roa
File: 1-f2dAAgS2wf9pRZ-goZFs70zwrs.roa (raw, json)
Hash identifier: 5ZahZx7xoUiM5wpxVWB+JSzOVN7AeVo72eaj5a7JEMk=
Subject key identifier: F9:FD:9D:00:08:12:DB:07:FD:A5:16:7E:82:86:45:B3:BD:33:C2:BB
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCAD71F521210FB1526FE19A182E9EA
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1-f2dAAgS2wf9pRZ-goZFs70zwrs.roa
Signing time: Sun 01 Jan 2023 10:05:10 +0000
ROA not before: Sun 01 Jan 2023 10:05:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12552
IP address blocks: 193.235.44.0/24 maxlen: 24
192.71.200.0/24 maxlen: 24
193.182.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:d7:1f:52:12:10:fb:15:26:fe:19:a1:82:e9:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9fd9d000812db07fda5167e828645b3bd33c2bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3a:ce:36:bb:5e:14:8a:0f:56:9e:a3:0d:f4:
b6:69:7c:76:36:9c:ad:ae:f4:7d:0f:7a:d4:5f:2e:
2b:65:88:6b:4a:91:e7:62:a7:59:0d:88:01:b6:f0:
d5:9d:7d:a2:f5:fc:d6:86:d9:c1:35:f0:af:e6:80:
fc:56:fb:d4:c4:68:8b:01:63:94:ff:35:b6:f6:51:
99:22:7e:00:d1:e0:cf:37:0a:15:71:8d:76:1a:73:
36:00:8f:1b:11:7c:4a:ce:8a:86:e8:d4:d9:4e:e1:
4c:3c:6b:0b:94:3c:21:4c:4f:71:42:57:62:f9:8e:
26:05:b7:de:e7:f0:38:a6:0c:37:97:03:86:7c:12:
d5:7e:fa:dd:17:e8:92:ab:8f:65:13:01:ba:f9:88:
82:e8:ca:5a:e5:ed:75:58:39:e9:28:ea:15:9e:74:
eb:2b:cd:23:f7:8d:b7:8d:c1:0f:d9:30:01:b4:57:
87:4a:71:a0:01:8f:2e:d4:3f:65:bd:1b:09:77:8b:
10:67:5b:bf:39:59:25:8b:95:1f:2c:93:26:44:d2:
70:cb:98:e8:5d:ef:e8:3b:d7:aa:64:e4:01:12:c1:
40:9a:61:09:fc:3f:91:1d:9d:e3:90:2f:48:bc:34:
11:f1:9e:86:90:51:9f:ab:82:28:3a:ed:f6:95:5d:
2c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:FD:9D:00:08:12:DB:07:FD:A5:16:7E:82:86:45:B3:BD:33:C2:BB
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1-f2dAAgS2wf9pRZ-goZFs70zwrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.200.0/24
193.182.6.0/24
193.235.44.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:6e:a9:a2:56:2d:a0:89:bb:6c:34:85:b0:da:b5:23:8d:62:
80:7b:69:bd:eb:eb:f7:1b:6d:a5:af:b8:3f:2b:e1:44:c5:13:
a2:61:03:25:d6:ae:90:b9:0e:ad:09:9d:93:95:b8:f8:8d:68:
97:a6:06:28:2b:9c:d2:90:65:50:e6:30:0b:ca:6d:03:c1:77:
fc:a0:c8:a6:a1:9e:55:84:0c:86:37:34:07:4f:60:b7:38:8a:
84:3d:b4:3f:42:48:a4:73:2b:1b:49:44:41:14:38:14:22:03:
0d:ac:de:f4:55:9d:d1:65:b7:2c:48:fa:58:20:e7:99:5d:7c:
7a:2a:15:64:78:15:48:84:20:fe:f2:67:7f:99:e6:b9:0c:39:
82:7d:46:d3:f7:3c:7c:98:f4:92:ff:a1:66:2a:a4:7b:1e:b9:
3c:53:a9:6e:5e:42:5e:99:b2:90:5b:3d:51:76:30:93:b2:7e:
c7:90:4e:34:1b:1b:50:1e:46:5d:21:9a:63:e3:38:2c:b0:51:
cc:9c:15:8d:3c:62:61:d2:77:27:f6:04:15:f3:3b:86:19:02:
b3:81:12:e0:44:1d:dc:80:00:2b:36:09:cf:a7:44:11:bb:6c:
3d:c7:98:ab:3e:e3:f5:91:61:a2:79:86:57:35:f1:0f:11:43:
4b:5d:27:9d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:34 2025 by rpki-client