Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/76pqCUHHK1vRVm6lz00ScYKrnOI.roa
File: 76pqCUHHK1vRVm6lz00ScYKrnOI.roa (raw, json)
Hash identifier: lv0/uYPP3VaWUDsiA85fnT2t6S3KDq77XZVmg9j345M=
Subject key identifier: EF:AA:6A:09:41:C7:2B:5B:D1:56:6E:A5:CF:4D:12:71:82:AB:9C:E2
Certificate issuer: /CN=2091a77f7c424e9127398473bfa3a2b9727ebb45
Certificate serial: 018703A1C721E557B694B945B46B5A7C65FA
Authority key identifier: 20:91:A7:7F:7C:42:4E:91:27:39:84:73:BF:A3:A2:B9:72:7E:BB:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/76pqCUHHK1vRVm6lz00ScYKrnOI.roa
Signing time: Tue 21 Mar 2023 10:05:46 +0000
ROA not before: Tue 21 Mar 2023 10:05:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201434
IP address blocks: 193.29.207.0/24 maxlen: 24
185.75.36.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:03:a1:c7:21:e5:57:b6:94:b9:45:b4:6b:5a:7c:65:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2091a77f7c424e9127398473bfa3a2b9727ebb45
Validity
Not Before: Mar 21 10:05:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=efaa6a0941c72b5bd1566ea5cf4d127182ab9ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:96:a3:33:68:df:11:cf:2e:39:1f:b5:5b:8d:
7b:64:28:49:24:72:87:61:8f:b8:52:b2:b4:4f:e9:
fc:61:5d:f2:ec:81:a6:e4:43:65:af:03:c8:9c:72:
46:8f:28:2b:99:89:fc:27:ce:78:9b:6d:08:67:cc:
1d:11:d7:f3:a8:f6:b5:b7:df:6c:2a:4d:63:f2:9c:
00:8a:c9:fa:24:b6:13:77:be:37:dc:17:02:c6:8b:
c4:28:82:22:6e:de:d8:f8:60:97:6a:17:c8:a5:c7:
36:d5:75:94:64:f7:f2:3b:99:09:d2:0b:7e:c6:23:
e5:e2:2f:aa:24:c2:62:65:3e:68:01:d3:d7:49:18:
d6:40:a3:39:42:16:7e:4b:7d:b3:ff:ff:f7:2d:50:
36:c5:ef:3f:66:cf:d1:39:6d:f5:de:d3:2f:e8:f0:
8a:36:36:fd:a9:11:80:b5:81:1e:2e:84:50:d7:f4:
46:df:b1:38:5e:41:24:9c:bf:25:f3:4c:db:55:7d:
74:3a:76:6b:3d:a4:34:f1:06:25:ae:51:4f:78:39:
57:20:6d:a1:ed:d0:b3:19:f7:7a:49:d6:37:d4:19:
07:7c:3a:d4:f8:22:19:a5:36:db:bd:50:ca:75:b7:
35:75:52:8e:46:d5:b6:c6:33:1d:20:ba:c3:15:39:
36:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:AA:6A:09:41:C7:2B:5B:D1:56:6E:A5:CF:4D:12:71:82:AB:9C:E2
X509v3 Authority Key Identifier:
keyid:20:91:A7:7F:7C:42:4E:91:27:39:84:73:BF:A3:A2:B9:72:7E:BB:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/76pqCUHHK1vRVm6lz00ScYKrnOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.36.0/22
193.29.207.0/24
Signature Algorithm: sha256WithRSAEncryption
98:03:1e:86:7b:53:23:24:65:12:6d:82:a7:49:f3:90:7a:17:
cc:96:04:3a:19:0b:f0:6a:f5:9c:be:c2:4a:05:28:2b:14:1d:
86:b4:9a:1c:5a:a5:80:bc:37:90:25:e9:93:d7:cf:c9:51:7e:
7e:65:b6:e9:7e:80:69:84:0f:29:5a:9f:41:98:ec:5d:00:e6:
94:95:f4:fb:86:73:b5:54:63:c5:18:3f:66:b0:10:bb:fe:fa:
24:e7:20:69:82:d8:76:f6:b0:78:f0:9e:a3:f9:b3:4d:73:78:
83:22:d7:76:c7:d0:55:b1:2a:04:12:9a:6c:ed:7d:fb:22:a6:
8c:ce:56:d5:eb:2a:5b:7f:e7:cc:6f:76:58:60:72:82:6f:81:
e9:a1:83:f5:cb:49:8f:c4:12:c9:fd:e9:b1:07:a5:e9:16:2f:
3e:62:f2:c4:60:96:2b:41:5d:1b:9f:43:c2:5a:fd:a5:87:83:
ad:ed:ed:8a:1c:4d:0e:e7:b9:20:17:28:8a:56:e8:13:d2:61:
ed:78:d0:bf:90:10:53:83:4a:20:7f:73:eb:2c:ef:34:a9:32:
40:9c:ee:9c:03:48:95:7a:0e:8c:f4:89:81:b2:d4:87:9a:40:
86:30:7a:90:a4:ac:22:d8:76:bd:bf:40:1d:e1:96:e6:de:eb:
ac:46:c9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:17 2025 by rpki-client