Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/pqCimd163WHDsNfmS_BdSG8ZKgE.roa
File: pqCimd163WHDsNfmS_BdSG8ZKgE.roa (raw, json)
Hash identifier: 6ezpsYUd9uWNue5LxQLADS00470gtJdN97/pPVoTZfw=
Subject key identifier: A6:A0:A2:99:DD:7A:DD:61:C3:B0:D7:E6:4B:F0:5D:48:6F:19:2A:01
Certificate issuer: /CN=b5ccdd883f6dd114ecf6f72716a84634f67ac977
Certificate serial: AB41
Authority key identifier: B5:CC:DD:88:3F:6D:D1:14:EC:F6:F7:27:16:A8:46:34:F6:7A:C9:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tczdiD9t0RTs9vcnFqhGNPZ6yXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/pqCimd163WHDsNfmS_BdSG8ZKgE.roa
Signing time: Mon 27 Jun 2022 12:09:02 +0000
ROA not before: Mon 27 Jun 2022 12:09:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39756
IP address blocks: 193.223.101.0/24 maxlen: 24
91.209.102.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43841 (0xab41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5ccdd883f6dd114ecf6f72716a84634f67ac977
Validity
Not Before: Jun 27 12:09:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a6a0a299dd7add61c3b0d7e64bf05d486f192a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e6:85:c9:67:5d:e3:f4:c1:99:eb:9e:87:27:
47:c1:fc:25:8a:c1:40:8b:76:73:33:3e:87:a7:2d:
0e:a8:10:3f:1e:25:02:f7:49:bf:79:49:50:12:04:
e9:86:1c:cb:7c:67:f3:f4:36:5d:5e:83:8a:c1:e3:
d8:f9:d0:74:32:e9:35:57:03:a7:b5:69:ba:38:f8:
0a:56:f1:56:1e:2f:6a:84:09:65:8e:c7:f2:ab:9e:
ba:2c:42:34:5a:0b:da:8a:ef:5d:45:5a:73:da:cd:
b8:09:53:12:e3:36:8b:45:06:49:96:44:e8:c8:a3:
59:9e:ec:eb:22:2f:4f:ed:1e:ad:49:3c:02:35:47:
02:88:c3:d6:f5:cb:b1:db:38:2d:dc:9c:e3:b8:2d:
6b:a7:dd:a4:3f:b0:e7:57:6f:12:ea:19:e2:50:af:
e7:8b:89:7a:d1:53:d1:c1:fd:5e:53:0e:61:0e:16:
5b:7d:21:e1:41:db:ff:17:c8:b8:5f:4a:49:8a:7c:
7d:88:1c:37:b9:bc:de:d5:6f:7b:32:ec:cc:90:0a:
e4:bb:d4:9c:92:c2:f2:a9:13:cf:a9:62:55:78:8f:
3a:0f:a4:d8:55:fa:c4:cf:1a:57:db:41:ff:d5:3e:
66:98:18:8c:ee:84:2e:28:d8:9f:48:90:42:a8:be:
b8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A0:A2:99:DD:7A:DD:61:C3:B0:D7:E6:4B:F0:5D:48:6F:19:2A:01
X509v3 Authority Key Identifier:
keyid:B5:CC:DD:88:3F:6D:D1:14:EC:F6:F7:27:16:A8:46:34:F6:7A:C9:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tczdiD9t0RTs9vcnFqhGNPZ6yXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/pqCimd163WHDsNfmS_BdSG8ZKgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.102.0/24
193.223.101.0/24
Signature Algorithm: sha256WithRSAEncryption
75:2f:15:40:e4:fd:2d:db:12:8d:35:4c:08:a7:5d:01:67:f5:
99:bd:47:fc:b1:fd:95:97:40:19:46:79:81:d0:46:49:ca:69:
28:6f:b0:ba:54:6c:1d:5b:e9:8a:3d:7a:3c:e9:49:47:cc:6c:
fd:f3:ff:2b:15:e4:8f:b9:67:1c:81:40:9e:75:4d:f8:b2:db:
a8:70:a1:b7:c1:f1:6a:1a:34:13:ac:76:b7:3e:e7:3c:b2:8d:
39:3e:be:69:a2:73:36:76:c3:7a:b2:7e:4e:67:fe:b2:b8:60:
b4:35:6f:21:06:3e:0d:4e:ba:29:b7:45:55:cd:89:28:14:c1:
78:f8:70:4e:04:54:98:23:3b:b8:fe:c3:59:a5:63:3c:f7:6f:
74:38:c2:a3:ce:12:b5:7e:ee:21:6b:7b:ff:4d:37:e9:26:18:
b7:23:40:25:06:57:e2:eb:13:33:a5:fc:c3:22:78:56:d0:f9:
a7:49:ee:e8:d3:55:53:23:8d:cc:dd:39:4d:6e:7c:6b:60:21:
16:83:71:e1:a3:13:29:fd:33:53:e5:6b:4e:3d:26:e3:c3:60:
d0:9d:93:a0:25:bb:72:9a:af:f8:8f:c2:ad:95:9f:fd:8a:50:
5c:69:42:40:cf:ef:82:a8:b2:5f:33:cb:a3:d5:ff:ec:c2:18:
a5:8c:33:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:02 2025 by rpki-client