Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/m8xrj-X9PK7QFpd2GvLrjxt3xY4.roa
File: m8xrj-X9PK7QFpd2GvLrjxt3xY4.roa (raw, json)
Hash identifier: JBRfouL00j+GLyBfbuK+tAuGpxVjAGyadqpl7r/p/1I=
Subject key identifier: 9B:CC:6B:8F:E5:FD:3C:AE:D0:16:97:76:1A:F2:EB:8F:1B:77:C5:8E
Certificate issuer: /CN=53550b2382e00fa7df194e6485fe1425836213ff
Certificate serial: 01856F42897AD1BEDAA02BB79C4B575C8DB1
Authority key identifier: 53:55:0B:23:82:E0:0F:A7:DF:19:4E:64:85:FE:14:25:83:62:13:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1ULI4LgD6ffGU5khf4UJYNiE_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/m8xrj-X9PK7QFpd2GvLrjxt3xY4.roa
Signing time: Sun 01 Jan 2023 21:35:09 +0000
ROA not before: Sun 01 Jan 2023 21:35:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13244
IP address blocks: 194.153.171.0/24 maxlen: 24
194.9.170.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:89:7a:d1:be:da:a0:2b:b7:9c:4b:57:5c:8d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53550b2382e00fa7df194e6485fe1425836213ff
Validity
Not Before: Jan 1 21:35:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9bcc6b8fe5fd3caed01697761af2eb8f1b77c58e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ef:2d:ef:0b:e2:71:1b:f1:86:57:f7:bc:0d:
65:8f:27:51:b7:d7:3f:70:20:17:e9:69:36:e8:f5:
33:2b:24:2e:d9:2b:a9:fb:fa:e6:dd:0a:30:70:a1:
68:3b:6f:e4:98:ed:fe:04:9d:01:8f:b8:d6:ee:70:
42:1f:47:62:8d:8b:e9:f5:7b:a3:48:b9:6c:57:5a:
f3:91:18:69:bb:9e:e7:27:7e:56:79:aa:af:55:b9:
1b:70:9a:cc:1d:bf:55:94:64:68:6b:24:ba:85:99:
66:b2:d5:35:6c:ed:c7:e0:a7:02:5c:24:48:74:69:
82:8f:b5:3d:5b:a3:1f:ae:1d:48:54:22:83:f6:8a:
df:e8:88:1c:10:f8:3d:c8:73:65:b2:c6:41:23:64:
4b:43:e3:89:cb:e1:4e:28:4f:72:66:58:1b:90:d2:
5d:70:6e:40:ca:9f:57:2e:13:91:3f:2b:58:60:79:
8e:a0:df:82:2d:ae:6d:2f:bf:80:1d:2e:81:9c:33:
c7:9f:56:5d:8d:b0:3f:48:35:cc:76:cd:45:73:b8:
03:ef:c4:31:17:96:0c:5f:df:47:fe:63:b8:40:9c:
68:41:44:4d:50:93:bb:6c:11:87:5a:71:7d:df:f9:
6c:7d:88:7b:71:24:f9:b0:a3:d0:c6:fe:c7:ba:2a:
f4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CC:6B:8F:E5:FD:3C:AE:D0:16:97:76:1A:F2:EB:8F:1B:77:C5:8E
X509v3 Authority Key Identifier:
keyid:53:55:0B:23:82:E0:0F:A7:DF:19:4E:64:85:FE:14:25:83:62:13:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1ULI4LgD6ffGU5khf4UJYNiE_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/m8xrj-X9PK7QFpd2GvLrjxt3xY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.9.170.0/24
194.153.171.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:8b:b6:08:3b:42:3b:5b:ef:b8:de:52:02:47:4b:56:b0:cb:
7a:4f:23:55:7b:57:5a:43:f9:00:ae:4e:c2:73:87:81:c9:1f:
38:24:86:62:e3:86:27:44:0c:f1:0d:3b:43:51:cf:a0:84:6a:
5d:8a:4e:93:af:fc:58:08:67:d7:01:ba:0a:53:8d:9c:a7:26:
cf:dd:9f:f8:b1:6f:13:16:d5:62:7a:48:df:e6:bb:0c:3b:af:
8b:32:e5:c4:9a:3c:59:29:33:d1:b5:e2:29:27:fc:07:39:4b:
d9:77:b9:e2:cf:70:b3:8f:c4:24:d3:54:2a:32:43:ee:c1:18:
67:d1:7e:fb:e9:70:a2:77:4c:d7:e4:6f:36:95:ed:5a:f0:38:
e0:fe:2e:26:6c:82:95:bf:91:57:20:8c:10:bc:42:9d:3d:ba:
14:50:f8:5a:ae:74:67:d9:fa:d1:fc:0c:82:ff:f9:ea:f5:9e:
c4:56:8d:b8:d0:3d:44:19:9a:7f:78:a8:d4:48:e3:be:40:af:
b1:d7:8e:79:54:1b:7e:73:2d:48:40:78:a7:63:9d:48:ee:33:
d7:df:ec:dd:6b:4a:3f:d9:ec:fa:72:ad:67:a1:58:c9:1b:89:
76:e1:52:a0:37:46:4d:88:8f:47:d7:e3:69:6f:f8:0b:29:fe:
64:93:83:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:12 2025 by rpki-client