Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/9JSjwZkAc9HV9s_6NiQRd8lK9oo.roa
File: 9JSjwZkAc9HV9s_6NiQRd8lK9oo.roa (raw, json)
Hash identifier: U6Xe2X82Q1saaX3uSfgPglUA5PJCDPex1zhxuh7ZOgA=
Subject key identifier: F4:94:A3:C1:99:00:73:D1:D5:F6:CF:FA:36:24:11:77:C9:4A:F6:8A
Certificate issuer: /CN=37a5b8cdfd1d797d860660e34bfa1a2ad85ff9d9
Certificate serial: 0A7F636D
Authority key identifier: 37:A5:B8:CD:FD:1D:79:7D:86:06:60:E3:4B:FA:1A:2A:D8:5F:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/9JSjwZkAc9HV9s_6NiQRd8lK9oo.roa
Signing time: Sat 01 Jan 2022 16:04:58 +0000
ROA not before: Sat 01 Jan 2022 16:04:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2852
IP address blocks: 193.84.53.0/24 maxlen: 24
193.84.55.0/24 maxlen: 24
193.84.56.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176120685 (0xa7f636d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a5b8cdfd1d797d860660e34bfa1a2ad85ff9d9
Validity
Not Before: Jan 1 16:04:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f494a3c1990073d1d5f6cffa36241177c94af68a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9e:9c:f1:c4:fe:41:6a:f6:9a:00:bd:13:6c:
da:85:87:bd:e4:67:0a:33:79:92:8c:86:5a:65:20:
36:1e:b6:08:a2:ea:97:57:7a:c5:23:b6:8d:2b:78:
c4:3f:8d:7e:97:1d:ca:38:f4:8f:c9:c8:b0:bf:65:
1b:e5:bc:52:2d:24:8b:3b:1e:8c:d9:ca:f1:f8:67:
88:03:b5:85:bc:de:9c:09:15:35:60:55:97:5c:ab:
41:95:36:0f:a6:0c:41:25:54:f3:e0:15:da:27:3e:
06:43:a8:1f:e2:95:ea:64:85:c9:09:c6:61:b4:c7:
40:69:59:e2:13:4c:6c:a3:7f:46:ea:fe:29:b5:e2:
5a:1a:c0:e8:fc:08:02:00:ca:75:85:26:b3:10:a3:
8a:65:49:9c:2d:7e:99:bb:11:51:f7:dc:6a:16:18:
0e:f9:9b:bc:ee:f1:3b:ef:0e:6f:b7:25:13:23:a5:
44:e0:d1:fa:b1:a8:58:74:4a:f3:a4:c3:32:33:4a:
c9:53:07:42:10:ec:e5:1e:e4:5a:67:8a:4c:f0:cc:
4e:3f:40:70:cb:72:c9:79:9c:36:46:a7:5b:7e:46:
72:0d:d4:8b:7f:b7:28:27:af:31:52:ab:5d:98:45:
0d:47:cd:10:e4:21:bb:dd:e7:4c:52:e0:8f:7e:44:
08:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:94:A3:C1:99:00:73:D1:D5:F6:CF:FA:36:24:11:77:C9:4A:F6:8A
X509v3 Authority Key Identifier:
keyid:37:A5:B8:CD:FD:1D:79:7D:86:06:60:E3:4B:FA:1A:2A:D8:5F:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/9JSjwZkAc9HV9s_6NiQRd8lK9oo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.53.0/24
193.84.55.0-193.84.63.255
Signature Algorithm: sha256WithRSAEncryption
c0:76:c8:f7:22:fc:32:ad:90:03:52:76:08:24:95:23:64:ab:
bf:2c:3c:9c:9e:d5:90:51:c6:8e:f7:4b:0d:e0:4d:dd:68:0d:
e5:a7:24:db:47:02:ff:f8:a3:81:3b:69:b9:9a:6f:2d:e5:8b:
c5:54:c3:e3:71:eb:31:66:c6:1a:b7:be:a4:41:6d:72:f2:97:
92:55:2c:37:1c:3d:f8:e9:22:ea:c2:73:44:f8:83:bb:97:63:
a3:43:ff:a5:f0:17:f0:ae:bb:d3:6a:21:1a:1d:20:0d:fa:21:
25:b9:f5:d8:e2:a2:e0:8b:4f:b2:ae:22:3e:73:d9:02:88:85:
bc:23:f1:71:82:97:8e:32:17:1f:52:e2:5b:96:ce:5a:ed:ad:
44:99:6d:d1:0e:4d:03:50:b5:ba:05:e7:d8:1a:e5:76:39:b2:
02:c6:52:19:02:20:e4:79:a7:6b:03:e4:0f:94:1d:06:69:05:
df:cf:9c:b4:5a:2a:e5:38:6b:89:64:a7:6b:71:1d:5d:2b:a0:
b8:a1:56:6f:ce:4f:fc:fe:3a:7e:9b:af:17:97:a5:52:8e:c0:
bb:23:ab:29:9e:77:4c:b8:6d:c0:25:81:cb:01:5d:90:d9:46:
35:a7:ad:c1:7c:96:28:8d:4c:0c:59:34:95:1e:63:c1:88:ae:
f4:cc:f6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:25 2025 by rpki-client