Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/n3JLvby-N6Lb42j5P0fPSGPzXlw.roa
File: n3JLvby-N6Lb42j5P0fPSGPzXlw.roa (raw, json)
Hash identifier: 2BUgicgeyqu7wpuE8R3LEPe8s9NNZgNmtKgLzLUw2tE=
Subject key identifier: 9F:72:4B:BD:BC:BE:37:A2:DB:E3:68:F9:3F:47:CF:48:63:F3:5E:5C
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018823A62063194631E3B2A166EC766F7854
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/n3JLvby-N6Lb42j5P0fPSGPzXlw.roa
Signing time: Tue 16 May 2023 08:21:09 +0000
ROA not before: Tue 16 May 2023 08:21:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199470
IP address blocks: 194.103.162.0/24 maxlen: 24
194.103.176.0/24 maxlen: 24
194.103.184.0/23 maxlen: 24
194.103.182.0/24 maxlen: 24
194.103.180.0/24 maxlen: 24
194.103.183.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:23:a6:20:63:19:46:31:e3:b2:a1:66:ec:76:6f:78:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: May 16 08:21:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f724bbdbcbe37a2dbe368f93f47cf4863f35e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8a:93:5b:7e:54:42:31:c7:6d:05:39:5d:4b:
dd:77:e9:97:68:88:18:c7:b3:52:ed:d0:25:34:b5:
9d:5a:ed:fb:26:0a:2e:04:0c:4d:9a:48:12:13:35:
a4:e1:3d:16:94:3c:3e:41:06:d3:3d:ac:3e:34:06:
8c:c6:aa:04:5a:96:8b:85:64:b4:9c:0e:a5:89:b6:
a2:b9:45:79:a6:e8:a6:1e:0d:4a:67:dd:92:d9:e0:
23:17:ec:5f:1b:6b:a9:52:75:78:79:79:67:dc:ab:
78:c9:23:ef:65:84:a7:30:ea:84:05:76:49:80:be:
f6:0b:cb:00:f2:cc:5f:b3:c7:ff:89:c6:bf:61:c9:
bc:db:9e:71:a0:9c:dc:33:08:e9:fc:a7:11:2a:b3:
53:fb:f9:dd:55:21:53:ba:a5:e1:61:b4:a1:5c:88:
0a:3f:a8:fc:37:6c:54:63:de:77:47:b4:d2:c0:82:
4b:0b:12:1c:dd:66:37:d7:96:a0:41:57:59:6b:b6:
81:6f:41:1c:aa:a0:25:81:15:0e:b0:ee:b9:49:d6:
e0:4f:5f:66:88:96:c1:54:a6:c2:14:69:61:68:f8:
a2:95:eb:35:47:8e:52:8a:ac:37:4e:52:3f:1f:5e:
06:60:bd:ca:43:3d:d1:63:af:3e:fd:d4:ec:d7:0b:
0e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:72:4B:BD:BC:BE:37:A2:DB:E3:68:F9:3F:47:CF:48:63:F3:5E:5C
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/n3JLvby-N6Lb42j5P0fPSGPzXlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.103.162.0/24
194.103.176.0/24
194.103.180.0/24
194.103.182.0-194.103.185.255
Signature Algorithm: sha256WithRSAEncryption
8f:67:06:5b:65:ae:bc:4c:a0:1c:b6:44:bf:4c:79:38:99:6a:
98:8a:ec:9c:2f:d6:89:38:90:0d:74:70:ce:f7:e5:fa:5c:9a:
76:57:2e:8d:37:6c:a9:1e:96:19:97:75:a3:2a:62:f6:88:e8:
cb:cf:65:38:8a:7c:3c:2f:2b:00:d9:82:d6:b0:36:c3:39:70:
da:c5:ad:e0:ff:7c:50:88:49:b1:9a:ea:42:01:5f:50:1b:8b:
32:ce:bf:ed:ff:25:96:80:15:7a:ed:2d:f2:da:b5:93:28:9c:
16:3e:07:e3:e0:f8:17:5c:8c:52:0f:bd:d0:e0:8e:1c:8d:59:
fa:e8:6c:40:28:c2:b6:a4:c0:05:0a:b7:6d:12:a4:e8:b2:76:
3b:ad:74:6a:fa:b6:2c:2f:5a:6e:82:86:60:22:24:03:65:ec:
69:9f:dd:26:d4:77:56:90:46:89:75:68:32:63:6f:76:6a:a5:
b1:5a:02:bc:c8:28:67:4e:75:d5:fa:91:9f:86:bb:fa:60:1f:
99:b0:ab:78:8c:09:0c:a4:5f:05:0e:1b:f7:e4:df:a4:47:2f:
a9:5d:ae:1a:51:1e:48:60:27:23:4e:a6:d3:02:3b:68:99:c4:
de:53:a9:da:32:10:4b:23:c0:31:c2:f2:9b:00:06:31:d2:35:
32:c7:03:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:06 2025 by rpki-client