Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/uS4YWzRq03qnLu8EFq_PRUO9VE0.roa
File: uS4YWzRq03qnLu8EFq_PRUO9VE0.roa (raw, json)
Hash identifier: tK5grbuF+hI8+pYOksLZbI2+s01qbiZzo5QNCukFPx0=
Subject key identifier: B9:2E:18:5B:34:6A:D3:7A:A7:2E:EF:04:16:AF:CF:45:43:BD:54:4D
Certificate issuer: /CN=c61850173c8d28d5afbf91091ca63e5da3c75ed4
Certificate serial: 018C21F25F6EAB434B977AF4911A5395FC5A
Authority key identifier: C6:18:50:17:3C:8D:28:D5:AF:BF:91:09:1C:A6:3E:5D:A3:C7:5E:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/uS4YWzRq03qnLu8EFq_PRUO9VE0.roa
Signing time: Thu 30 Nov 2023 20:36:21 +0000
ROA not before: Thu 30 Nov 2023 20:36:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207661
IP address blocks: 194.32.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:21:f2:5f:6e:ab:43:4b:97:7a:f4:91:1a:53:95:fc:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61850173c8d28d5afbf91091ca63e5da3c75ed4
Validity
Not Before: Nov 30 20:36:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b92e185b346ad37aa72eef0416afcf4543bd544d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9b:7c:d7:9a:69:4f:56:96:db:13:92:10:2a:
db:4b:e7:28:49:d8:b2:14:77:49:71:f7:b4:e9:72:
98:d3:18:c8:8b:3e:dd:1d:fd:f9:66:99:9a:09:fb:
b6:43:23:41:b7:3e:6b:0b:e9:92:b5:2a:a4:6a:f7:
3e:2d:9e:5a:30:e1:76:64:08:c4:99:24:2b:20:b7:
ea:37:7b:af:d7:14:67:f2:12:5a:29:5e:7b:84:e7:
fe:6c:a9:22:9f:cf:b4:da:6a:74:40:77:fd:4c:e6:
76:4e:a3:84:08:a5:77:f7:93:f1:24:cb:85:e0:0c:
a8:0f:c2:b2:09:b0:98:45:24:83:34:8c:b5:73:45:
62:49:4d:f8:64:17:ad:8e:8c:9e:8c:9d:a2:76:b9:
c6:f0:11:d7:c3:81:00:92:2f:e6:b6:b5:5e:55:59:
24:ad:88:00:30:28:60:98:c0:50:3c:59:87:a9:52:
70:c0:3e:c4:8a:13:59:e8:21:3e:ab:03:70:f4:44:
a6:fa:32:60:ad:8e:1d:0a:eb:a6:ef:b0:97:e1:90:
80:48:69:ab:ea:05:ad:59:e0:4d:44:ca:bd:6a:be:
67:e7:a1:73:7b:ef:e0:05:fd:0f:e2:fa:3f:ad:0b:
96:4f:7a:f3:6d:77:64:b2:71:d6:57:15:70:52:ed:
f9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:2E:18:5B:34:6A:D3:7A:A7:2E:EF:04:16:AF:CF:45:43:BD:54:4D
X509v3 Authority Key Identifier:
keyid:C6:18:50:17:3C:8D:28:D5:AF:BF:91:09:1C:A6:3E:5D:A3:C7:5E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/uS4YWzRq03qnLu8EFq_PRUO9VE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.32.161.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:04:52:9b:9b:bc:8a:34:ed:4d:45:9f:e5:80:41:8a:7c:f4:
20:ec:b2:7f:b5:19:33:65:19:05:71:00:04:e9:c5:ed:07:da:
5f:21:24:3d:b4:87:de:54:2a:f4:70:2f:a9:d2:c9:06:7f:4d:
0c:7e:14:86:7f:d0:fc:c5:47:cf:c6:04:3f:4d:de:05:20:94:
39:d0:cf:a1:79:bf:18:d2:60:49:c2:c1:76:24:1e:92:95:61:
90:c1:b1:88:bb:85:a9:fe:3c:dc:ff:21:27:8e:81:89:34:0c:
72:6f:05:d6:ca:e7:b6:d2:40:89:32:4f:b7:4c:19:ef:d9:a2:
4d:78:1f:4e:ec:0b:e0:09:19:ae:68:6e:3a:38:ed:24:2d:c1:
78:ed:dc:ce:d4:e7:d9:66:97:da:6d:9b:93:e5:d7:a2:62:94:
59:5d:ec:9c:93:33:00:ff:de:1f:e2:4e:89:5e:d1:e5:da:38:
b7:d5:93:4d:6a:23:37:d0:0b:5c:ab:46:de:e6:d8:a4:61:ae:
7b:99:12:72:b0:48:0d:cc:11:54:4c:bd:0b:2a:b5:37:02:16:
e1:35:dd:45:a8:74:52:8d:80:36:32:09:8b:66:bb:4e:ff:a0:
8a:6f:cf:d8:d6:20:4c:a8:1e:c0:59:c5:a2:0d:90:49:9a:eb:
98:e5:44:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:48 2025 by rpki-client