Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/B9nMP4Wx-pJpR9Wmhky3aOCIc-Q.roa
File: B9nMP4Wx-pJpR9Wmhky3aOCIc-Q.roa (raw, json)
Hash identifier: xPhQ5IfLoRFCUgXMA/zPwLAGvMDNok0sRm+jBVJrI3U=
Subject key identifier: 07:D9:CC:3F:85:B1:FA:92:69:47:D5:A6:86:4C:B7:68:E0:88:73:E4
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018A4B00E6904872B452346B94FBB2ADC4CF
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/B9nMP4Wx-pJpR9Wmhky3aOCIc-Q.roa
Signing time: Thu 31 Aug 2023 09:51:04 +0000
ROA not before: Thu 31 Aug 2023 09:51:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208583
IP address blocks: 193.181.177.0/24 maxlen: 24
192.165.198.0/24 maxlen: 24
193.235.193.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4b:00:e6:90:48:72:b4:52:34:6b:94:fb:b2:ad:c4:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Aug 31 09:51:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07d9cc3f85b1fa926947d5a6864cb768e08873e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:29:15:ab:e6:6d:ba:76:a0:5e:ef:1f:5d:07:
23:ac:9e:4f:f4:6b:f5:53:93:db:9e:a8:76:97:2f:
94:c2:cd:e1:55:ce:5e:c4:50:fc:4b:41:f7:13:62:
de:64:00:59:1b:10:71:c4:e3:2b:af:c4:5b:e8:28:
bf:9a:10:b4:1f:08:0b:9d:e9:f0:0d:34:2c:66:6b:
c0:10:61:bd:c8:d6:db:5f:75:8e:fc:74:e8:35:64:
26:aa:79:b5:22:b0:fa:ee:16:e0:19:da:81:b9:5f:
ab:a4:38:67:7c:0a:f1:58:0d:4c:8b:b8:57:25:df:
b7:bf:c2:1b:83:67:c9:14:fa:36:46:af:07:1e:71:
63:0a:5f:12:7e:af:9c:9e:31:2f:00:1b:33:a9:2c:
fa:2b:32:6e:59:42:32:86:c4:7c:6d:52:cf:d0:43:
83:1e:64:b1:1f:21:5a:db:f5:91:26:70:83:ee:a5:
a6:4c:fd:41:b5:eb:34:88:96:7a:6b:d7:a5:e5:5e:
5f:7f:42:ce:31:36:40:16:6b:50:74:a7:a0:4c:69:
a2:0b:40:73:81:06:1c:50:1e:97:2a:66:59:d7:f5:
64:ec:c7:d2:18:e9:ec:bd:59:b8:35:0b:35:7e:cb:
4b:75:79:5d:48:a2:80:02:ec:bd:5b:58:1f:a5:4d:
d0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D9:CC:3F:85:B1:FA:92:69:47:D5:A6:86:4C:B7:68:E0:88:73:E4
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/B9nMP4Wx-pJpR9Wmhky3aOCIc-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.165.198.0/24
193.181.177.0/24
193.235.193.0/24
Signature Algorithm: sha256WithRSAEncryption
17:c4:c9:ee:4b:45:08:0d:fc:d7:0c:71:73:4f:f1:23:73:11:
4f:6d:e5:40:f0:51:b2:53:ce:22:7a:de:01:10:ec:ba:44:11:
d7:b3:89:65:ce:d7:24:93:ff:de:15:c5:ba:71:15:5b:92:8b:
01:4b:a9:5c:1c:5d:47:f1:c2:70:21:e0:f8:8e:8f:e2:08:63:
54:94:b0:3c:fd:f0:0f:6b:fa:b8:b8:6b:66:e5:21:82:6d:3a:
7e:58:53:2d:1a:ea:61:f3:7e:69:6a:72:93:fa:49:30:38:06:
04:85:f7:8e:0b:46:8f:31:51:17:c1:cc:93:2c:76:da:55:46:
c2:96:67:6e:62:f5:e6:61:cb:65:76:b0:12:a9:a0:0e:67:a1:
31:d0:ac:5e:f8:fa:ed:82:bf:44:ee:61:1b:8d:7a:9a:ca:01:
72:1b:9a:ba:46:c0:aa:97:72:33:62:2a:68:68:3a:5a:cf:79:
d2:96:75:51:b5:c8:ff:1e:c5:91:e6:e6:11:2c:8e:9a:34:1e:
e8:83:1a:17:47:0a:e0:d1:0b:b4:44:5b:61:13:66:c0:79:07:
68:a9:70:89:cd:cb:50:8a:2e:bc:31:70:a5:d0:36:4b:42:dc:
86:7b:83:16:45:8e:00:27:6d:52:83:e5:75:11:0c:19:fe:f1:
1d:61:ea:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:55 2025 by rpki-client