Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/R3cQK0ZP7zS3lr-xhsMd_FRG6AQ.roa
File: R3cQK0ZP7zS3lr-xhsMd_FRG6AQ.roa (raw, json)
Hash identifier: TSMK01zmh2CvrDBXD8azEe2Fh7P/FK4GyBEBQ0pD59U=
Subject key identifier: 47:77:10:2B:46:4F:EF:34:B7:96:BF:B1:86:C3:1D:FC:54:46:E8:04
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018722E6159E50902F4B0E70CFC3913BCB9A
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/R3cQK0ZP7zS3lr-xhsMd_FRG6AQ.roa
Signing time: Mon 27 Mar 2023 11:48:36 +0000
ROA not before: Mon 27 Mar 2023 11:48:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57829
IP address blocks: 193.234.1.0/24 maxlen: 24
194.14.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:22:e6:15:9e:50:90:2f:4b:0e:70:cf:c3:91:3b:cb:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Mar 27 11:48:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4777102b464fef34b796bfb186c31dfc5446e804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:be:af:78:d9:e3:4d:34:18:62:80:78:26:d4:
56:4c:31:56:18:b5:e0:01:fb:07:07:99:d5:1d:50:
d2:4b:6f:0f:6e:f2:78:15:db:ba:fc:ff:e1:5b:ef:
0e:51:34:7d:84:9d:32:ca:8c:be:79:37:46:a3:13:
dc:49:03:9e:da:f6:95:c9:2b:8e:30:c1:49:d7:76:
c8:a0:76:39:e0:e1:dd:04:d8:aa:8a:29:1e:2c:8c:
68:cf:4d:69:5e:cd:28:3e:20:74:6f:26:45:dd:c6:
bc:df:e2:65:ff:33:1e:a6:c2:25:18:16:7c:a8:6d:
f8:f7:5f:db:80:e9:ca:ea:8a:48:d0:a7:c3:5d:67:
c7:8d:22:06:79:60:0d:ec:d8:ca:da:65:e0:b7:eb:
e0:1c:9d:5e:0a:9a:8f:0b:49:9d:a4:bc:64:be:c3:
66:65:63:d9:db:cb:88:b4:c2:f8:6b:99:d9:16:99:
6b:04:09:b4:76:dd:19:f5:96:08:c2:ee:f5:ae:02:
98:79:ae:98:0d:32:a9:fc:c2:1e:bc:e9:5f:95:47:
d0:f6:92:7c:63:76:b2:33:10:66:ca:18:25:f3:2b:
1c:68:96:47:92:ea:78:4e:44:a6:17:fb:0e:2d:f2:
99:89:29:fe:33:ff:ba:a9:77:6e:e4:dd:d2:71:e7:
45:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:77:10:2B:46:4F:EF:34:B7:96:BF:B1:86:C3:1D:FC:54:46:E8:04
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/R3cQK0ZP7zS3lr-xhsMd_FRG6AQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.234.1.0/24
194.14.195.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:ca:09:c4:42:1c:aa:0f:cc:36:ae:f8:af:fb:5d:6c:72:aa:
3c:78:cf:8b:2a:c7:75:fa:31:60:d2:99:cf:33:b9:e2:9c:37:
0f:9c:13:59:af:68:5c:f7:70:f2:61:c0:16:22:94:17:fd:95:
89:13:ca:30:b9:81:b7:0b:8a:18:2f:6b:c8:c0:31:ee:12:29:
88:cb:8b:98:28:13:0e:21:9d:7e:e1:ae:2f:28:e8:8a:5f:bc:
dc:b7:9d:9c:f9:85:d9:8a:be:c1:4a:51:41:5f:95:96:64:09:
e5:c6:bc:67:63:59:6b:a0:bc:98:b7:6b:f2:62:f0:81:cb:de:
2d:7f:2d:cb:cd:56:52:cc:07:24:76:4f:ca:0d:cb:2a:f2:44:
c1:be:45:79:a7:4c:1e:9f:a3:eb:cf:6c:c4:d4:dd:b7:9c:a4:
dd:e5:65:0b:55:00:4b:bf:8c:e0:21:5a:58:2e:5d:59:38:6d:
a2:47:ad:5c:5a:7d:01:33:6b:49:43:26:7e:45:28:57:f7:e6:
21:a6:f9:5e:7e:bd:b3:bf:7c:d2:20:e6:6e:82:a5:0b:62:8a:
10:ec:0d:e2:b0:52:0e:bd:8d:7b:e4:a4:f9:1c:d9:74:45:17:
bb:99:58:07:f6:f1:7d:d0:c1:06:6a:b1:b5:44:d2:47:99:87:
a5:e4:63:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:22 2025 by rpki-client