Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/1-NeP1bdXqVNh4914X12TXg2CMmQ.roa
File: 1-NeP1bdXqVNh4914X12TXg2CMmQ.roa (raw, json)
Hash identifier: Kt1BYDyhOiN3g7SGEFrzEr0pr38qRlayiY7tgLLX8yU=
Subject key identifier: F8:D7:8F:D5:B7:57:A9:53:61:E3:DD:78:5F:5D:93:5E:0D:82:32:64
Certificate issuer: /CN=ec757603b171af34e1c6231e5e82e77f2d589db9
Certificate serial: 01856F14C2DF257AE8E9C562567C3E360BCF
Authority key identifier: EC:75:76:03:B1:71:AF:34:E1:C6:23:1E:5E:82:E7:7F:2D:58:9D:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/1-NeP1bdXqVNh4914X12TXg2CMmQ.roa
Signing time: Sun 01 Jan 2023 20:45:09 +0000
ROA not before: Sun 01 Jan 2023 20:45:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202635
IP address blocks: 193.3.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:c2:df:25:7a:e8:e9:c5:62:56:7c:3e:36:0b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec757603b171af34e1c6231e5e82e77f2d589db9
Validity
Not Before: Jan 1 20:45:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8d78fd5b757a95361e3dd785f5d935e0d823264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:56:0e:7b:db:07:62:ea:aa:3c:9f:ee:5f:4f:
08:f2:a9:f1:ee:7d:78:24:be:42:bf:92:23:df:05:
a5:6e:c5:d9:e9:c5:a5:cd:f3:e4:e8:cf:28:e0:1f:
ac:de:13:e8:d8:d8:cc:ee:da:02:7b:4a:32:ac:e3:
17:d9:48:42:05:04:07:36:3f:43:2f:dd:81:76:52:
45:3f:62:89:6a:f8:c1:90:d5:aa:8b:4f:a5:e6:6b:
d3:f8:b1:2a:fa:a1:af:56:da:0e:73:ff:97:9e:90:
18:ff:16:36:ac:99:21:74:d4:6d:e6:39:47:f9:47:
10:0c:4b:8c:bf:99:85:b2:f5:11:f9:97:3c:7b:64:
67:50:c9:45:42:41:be:80:dc:31:f6:f1:29:8b:19:
d8:7d:7e:99:d1:65:87:7d:c5:09:b8:da:10:fb:70:
b7:0a:75:a8:aa:d0:51:00:44:e8:34:f7:6f:ae:19:
eb:88:9d:69:26:21:83:ef:2d:b0:89:ac:de:a3:63:
17:a1:03:da:f6:14:f6:ac:1d:8d:29:33:88:b5:ed:
65:e6:a7:08:4f:72:1d:87:e7:a5:07:dc:0d:cd:22:
f7:7b:c5:90:6c:3d:85:fb:56:2d:cc:52:5e:6b:08:
74:b2:77:f7:85:8b:38:76:02:45:a1:f8:73:c1:88:
5d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D7:8F:D5:B7:57:A9:53:61:E3:DD:78:5F:5D:93:5E:0D:82:32:64
X509v3 Authority Key Identifier:
keyid:EC:75:76:03:B1:71:AF:34:E1:C6:23:1E:5E:82:E7:7F:2D:58:9D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/1-NeP1bdXqVNh4914X12TXg2CMmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.30.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:9d:12:e0:4e:00:17:83:91:55:e2:2e:5f:ca:5a:60:bd:c1:
72:70:70:7d:7d:d5:57:f2:d2:66:67:06:c6:94:14:1b:16:54:
1f:c0:b1:80:c1:79:c5:46:69:c3:d8:e4:dd:5a:a7:74:51:02:
eb:a9:39:f7:78:10:87:1d:f3:05:4b:bf:18:38:7c:c8:65:4f:
01:5c:06:73:39:a4:4f:39:77:23:a3:27:39:09:c9:f9:53:29:
2e:c6:bc:77:b6:a1:54:e2:0c:ce:7e:d1:20:7d:af:06:b6:7d:
1d:9f:fd:93:63:db:5b:85:ba:f6:43:35:56:0e:c7:3f:eb:20:
6f:e1:f7:94:a6:57:31:4e:dc:f4:26:95:4c:9e:5b:44:cb:59:
a9:e5:72:66:fc:a2:1a:d3:14:99:24:da:36:ee:60:e7:7b:e8:
20:8b:bb:ee:d0:19:28:71:98:39:f2:6f:f7:4a:eb:3f:51:1e:
a1:2a:90:b9:ed:67:c8:4e:58:fd:43:12:7b:ad:4e:f4:30:97:
4c:43:7b:6e:43:f3:55:7a:27:ed:45:06:f4:31:f6:fc:78:b4:
7c:17:4f:8c:61:07:ab:25:6b:1d:4f:b3:cb:88:9a:de:61:b4:
dc:8d:9b:6b:f5:66:f8:54:aa:c6:c8:fd:5a:ee:3d:a6:62:4b:
93:5c:6d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:57 2025 by rpki-client