Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/ucR3llBaJ0bc9_Fh0NdyHPJI-nw.roa
File: ucR3llBaJ0bc9_Fh0NdyHPJI-nw.roa (raw, json)
Hash identifier: QIovehPylR2PQppOL7wR3uOHh0Y6zACssD7ixEtTdCw=
Subject key identifier: B9:C4:77:96:50:5A:27:46:DC:F7:F1:61:D0:D7:72:1C:F2:48:FA:7C
Certificate issuer: /CN=d4c0d694d59d7d36ba421a3050f4ec7dd3781efd
Certificate serial: 0185718333930B869A60C7EE6083A0A0218D
Authority key identifier: D4:C0:D6:94:D5:9D:7D:36:BA:42:1A:30:50:F4:EC:7D:D3:78:1E:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1MDWlNWdfTa6QhowUPTsfdN4Hv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/ucR3llBaJ0bc9_Fh0NdyHPJI-nw.roa
Signing time: Mon 02 Jan 2023 08:05:01 +0000
ROA not before: Mon 02 Jan 2023 08:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39121
IP address blocks: 195.66.89.0/24 maxlen: 24
193.105.126.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:83:33:93:0b:86:9a:60:c7:ee:60:83:a0:a0:21:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4c0d694d59d7d36ba421a3050f4ec7dd3781efd
Validity
Not Before: Jan 2 08:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9c47796505a2746dcf7f161d0d7721cf248fa7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:0b:9b:5c:64:5b:7e:ec:ae:3e:47:ce:ac:be:
70:00:10:05:e3:49:46:26:6d:c5:cf:bf:39:67:2a:
4f:e3:cf:0a:6f:9c:18:14:d9:52:6e:6f:b9:f6:e2:
bc:48:1f:c1:0c:86:23:2c:eb:74:8e:22:92:91:db:
2e:67:d9:7b:8c:54:50:3d:99:58:f9:5c:2e:b1:9b:
f9:bb:22:8e:33:11:82:55:f6:17:f2:71:ab:52:de:
ae:3c:f5:a3:23:36:ec:d6:08:a2:e9:15:e2:55:4d:
db:69:ae:a8:56:cc:f6:14:02:86:09:8f:23:4b:e7:
35:f5:d6:ae:d4:c8:73:7f:a3:22:b7:85:7e:6f:c7:
00:6f:34:4e:15:f0:b4:e0:81:d7:59:5e:3f:3a:6f:
04:0e:15:a8:26:8a:e3:33:b0:87:28:00:64:6e:f7:
d8:97:25:b8:41:14:c9:12:a2:a4:a0:a0:03:89:1e:
3e:57:a9:c4:af:7b:07:be:4b:78:96:e5:61:b2:da:
7b:cc:e9:35:80:81:f9:27:3d:be:e1:0b:7c:4a:0d:
ef:56:8b:90:f4:92:72:52:d3:81:a0:e7:e4:df:a5:
d1:83:93:f4:0e:1f:1b:e3:f5:83:3c:e7:ae:65:24:
40:9b:2b:94:a2:85:d8:c7:b2:39:7d:cb:d3:99:b4:
61:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C4:77:96:50:5A:27:46:DC:F7:F1:61:D0:D7:72:1C:F2:48:FA:7C
X509v3 Authority Key Identifier:
keyid:D4:C0:D6:94:D5:9D:7D:36:BA:42:1A:30:50:F4:EC:7D:D3:78:1E:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MDWlNWdfTa6QhowUPTsfdN4Hv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/ucR3llBaJ0bc9_Fh0NdyHPJI-nw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.126.0/24
195.66.89.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:c7:71:19:fe:45:53:89:12:c8:d3:bd:0c:56:ae:e2:a1:df:
79:e2:f1:86:df:15:ce:09:6a:aa:0a:9c:c8:9d:70:c4:b4:d0:
11:98:dd:a6:cf:f6:c0:74:2c:31:f3:7d:b1:71:9f:6e:14:a0:
9d:ce:d3:e6:a3:e5:d8:af:85:88:d1:93:fb:3a:4d:ae:d6:60:
b0:ab:e8:c1:e3:81:52:fa:74:18:29:cd:f9:a5:0a:af:75:b7:
9f:9d:0a:37:8a:8a:ce:b6:d3:47:96:9f:a4:ec:86:8e:c3:4b:
18:cd:6a:b2:36:81:58:83:7e:22:ec:10:63:b7:bb:01:d9:62:
13:16:83:67:8c:c8:46:f9:8a:a9:1d:f4:1c:c4:8f:cc:e0:93:
67:a1:dc:d8:c4:e7:3a:77:ba:47:5d:d7:61:f6:a6:d5:b6:27:
f8:8f:8e:0c:bd:b1:53:93:a7:19:a5:4a:91:92:c7:3b:4b:8f:
4c:e4:7f:bd:5c:2b:37:bd:bb:6b:27:da:85:10:0e:f9:36:61:
90:53:fd:0a:00:ef:de:03:d8:b4:9f:e8:e7:a5:7e:3c:67:d5:
21:28:b1:87:1e:a1:0b:8c:d0:e4:c3:dc:55:19:05:33:62:8a:
d3:51:29:a5:3f:ba:d9:42:6a:31:72:c4:15:f0:61:4a:8c:55:
44:6e:78:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:12:44 2025 by rpki-client