Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/wZwy8qJINGwgemeJoR6rlTYVXAI.roa
File: wZwy8qJINGwgemeJoR6rlTYVXAI.roa (raw, json)
Hash identifier: b06XdAMMf1ttQECMXl6+m+a+k2Hq4cgkSa4WFg5ISc0=
Subject key identifier: C1:9C:32:F2:A2:48:34:6C:20:7A:67:89:A1:1E:AB:95:36:15:5C:02
Certificate issuer: /CN=9c8a1876fddc2b63748b457b770b79a7e66e793c
Certificate serial: 01856DE67A94D478677AD0DB344BC4B5CB57
Authority key identifier: 9C:8A:18:76:FD:DC:2B:63:74:8B:45:7B:77:0B:79:A7:E6:6E:79:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nIoYdv3cK2N0i0V7dwt5p-ZueTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/wZwy8qJINGwgemeJoR6rlTYVXAI.roa
Signing time: Sun 01 Jan 2023 15:14:59 +0000
ROA not before: Sun 01 Jan 2023 15:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209585
IP address blocks: 193.16.97.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:e6:7a:94:d4:78:67:7a:d0:db:34:4b:c4:b5:cb:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c8a1876fddc2b63748b457b770b79a7e66e793c
Validity
Not Before: Jan 1 15:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c19c32f2a248346c207a6789a11eab9536155c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:41:13:3b:1f:fe:31:75:e9:ce:06:91:0a:5c:
4c:dc:eb:17:aa:05:8b:28:b0:6f:e2:4d:dd:4a:6a:
2f:13:b6:98:39:78:71:cc:83:da:0e:f8:6b:35:9c:
52:0f:ed:24:20:97:0f:10:98:8a:c5:9a:5b:5f:6c:
64:ee:12:fd:0b:8d:c8:b1:cc:1f:98:27:4f:7e:f5:
7b:1e:a1:8f:e5:76:c8:65:50:75:6c:bf:e2:49:54:
e9:54:41:a3:f3:84:2b:5c:1f:cf:41:98:16:42:3c:
d8:11:c2:3d:29:d1:52:ef:62:b1:ce:e9:d9:9b:44:
3a:8a:86:07:8c:35:38:ab:f5:e0:6e:fa:77:3a:7d:
e0:84:1e:bd:68:1a:34:9a:ec:a7:50:29:0e:6c:9a:
33:b2:c3:5c:69:2e:cb:e5:66:09:db:73:23:5f:91:
36:6c:aa:88:57:7b:2a:c1:f7:be:e4:18:b3:62:0e:
33:4b:15:8d:e6:d1:e7:e6:e6:73:9f:a0:3a:c7:99:
c0:5b:c6:f0:dd:1e:34:3b:00:93:66:ae:df:a1:b8:
4b:29:a3:fa:2b:8b:06:fc:22:4c:f3:a3:12:25:7b:
5c:2c:8b:7b:f6:e2:55:7d:24:51:e9:af:9f:3e:ba:
9a:5d:8a:87:b3:68:6e:5a:3d:27:9e:e5:11:07:b3:
3d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:9C:32:F2:A2:48:34:6C:20:7A:67:89:A1:1E:AB:95:36:15:5C:02
X509v3 Authority Key Identifier:
keyid:9C:8A:18:76:FD:DC:2B:63:74:8B:45:7B:77:0B:79:A7:E6:6E:79:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nIoYdv3cK2N0i0V7dwt5p-ZueTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/wZwy8qJINGwgemeJoR6rlTYVXAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.97.0/24
Signature Algorithm: sha256WithRSAEncryption
43:26:4f:66:c4:7e:cf:11:47:19:ad:07:94:14:5f:a8:10:fd:
c5:38:0b:d4:2e:d0:07:00:20:44:62:f3:82:25:29:00:ba:44:
a6:77:e2:ce:39:2f:20:38:26:b0:88:08:74:c0:eb:33:e8:f2:
02:51:b5:09:18:c3:fa:34:b1:65:a1:3c:06:64:10:96:44:2c:
76:81:70:73:76:62:ea:de:bb:25:d3:46:e3:2d:95:37:e9:a3:
a7:b7:8a:01:b8:f9:a5:86:6c:7f:64:67:a0:06:b5:ac:55:da:
d0:05:1f:9b:00:99:6c:43:bc:d9:1c:88:a2:6b:2f:34:04:f7:
4d:4c:7b:3e:39:3b:36:cb:ee:6e:46:eb:de:fd:30:50:ef:e7:
61:c8:78:79:c0:59:c7:67:49:a2:47:2a:64:27:d5:00:bf:36:
3f:96:e3:fb:e5:91:35:ab:47:6c:de:87:1a:6e:ca:a5:7c:a6:
13:d3:5d:aa:51:ce:47:5c:74:7e:53:44:de:96:51:8d:09:8a:
e6:1e:2d:44:7d:77:4a:3d:27:5b:86:11:44:cd:e7:a3:c2:65:
e6:8b:29:8c:b9:cd:42:e9:3e:3d:db:d9:4a:0f:e5:8d:04:eb:
5f:50:2c:ef:b3:4b:b5:2d:67:02:06:c8:22:44:52:4c:f5:41:
b3:24:d8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:59 2025 by rpki-client