Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ewInu9guvDZ8d-NRuspi-m1zMA4.roa
File: ewInu9guvDZ8d-NRuspi-m1zMA4.roa (raw, json)
Hash identifier: tqC4llfWehgF/Q4CMs6yUlzf3IcOepucsIUDYpdh8VY=
Subject key identifier: 7B:02:27:BB:D8:2E:BC:36:7C:77:E3:51:BA:CA:62:FA:6D:73:30:0E
Certificate issuer: /CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6
Certificate serial: 018602002684DE786CC047F61ED93831C051
Authority key identifier: B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ewInu9guvDZ8d-NRuspi-m1zMA4.roa
Signing time: Mon 30 Jan 2023 09:26:49 +0000
ROA not before: Mon 30 Jan 2023 09:26:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203949
IP address blocks: 193.111.148.0/24 maxlen: 24
94.126.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:02:00:26:84:de:78:6c:c0:47:f6:1e:d9:38:31:c0:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6
Validity
Not Before: Jan 30 09:26:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b0227bbd82ebc367c77e351baca62fa6d73300e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:9b:3b:f6:bb:d9:fc:7f:8f:68:46:ec:04:55:
08:af:f0:da:2a:cd:4a:1f:26:ff:fe:6d:f6:8a:e5:
0e:9f:ac:a6:25:fb:29:db:ea:3f:a5:eb:79:b5:f7:
0e:aa:9e:dc:e2:16:3d:94:ec:8f:c1:5d:1b:94:31:
ae:8d:1c:e4:5f:53:a2:f9:14:f7:a0:1f:52:97:cd:
d9:bc:a6:65:18:4d:a9:66:11:0c:03:fc:c2:2a:81:
2f:85:9b:6c:92:ef:6e:38:9d:3b:3d:f8:a1:40:c3:
46:19:58:de:74:87:7e:75:9a:43:f7:27:f3:3c:5a:
2e:be:80:50:ec:83:3d:3d:7d:d6:81:d0:1a:7f:50:
fc:6e:5b:51:5d:9f:99:82:bf:a5:b7:1a:73:f9:e2:
dd:fb:fe:b5:bd:02:61:00:99:33:3d:b2:35:ca:1c:
77:f6:d6:b5:d3:83:de:58:00:9b:9f:cd:e0:98:5a:
e9:77:22:51:d6:25:e0:64:57:72:ce:0a:ca:15:25:
af:a3:b1:fc:3c:a4:ee:3e:1e:9f:d4:f7:54:b3:fe:
bd:4c:9e:5c:e8:92:43:f4:90:96:29:74:40:21:91:
fb:61:52:e3:2e:8d:a7:9c:a9:72:e1:cd:5e:f4:b9:
b1:d0:75:94:70:64:97:db:cd:0b:e8:ff:ac:1c:da:
41:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:02:27:BB:D8:2E:BC:36:7C:77:E3:51:BA:CA:62:FA:6D:73:30:0E
X509v3 Authority Key Identifier:
keyid:B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ewInu9guvDZ8d-NRuspi-m1zMA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.126.87.0/24
193.111.148.0/24
Signature Algorithm: sha256WithRSAEncryption
63:44:c7:61:35:2b:61:dd:94:bc:1f:10:a1:46:36:d0:2d:98:
3a:bf:c8:7f:80:53:e5:85:ce:f0:ab:6c:87:ae:2a:58:4e:f0:
b7:75:28:df:c2:86:cd:8a:33:b2:fb:34:07:f8:49:6a:20:4c:
b6:29:2d:2b:df:70:92:3a:e5:52:a6:fb:04:5b:cd:5d:07:bd:
76:9f:ef:46:77:5c:9d:9f:2f:20:7e:de:e6:22:ae:a2:cf:88:
30:eb:dd:c7:08:cd:ae:68:8e:99:2a:aa:17:16:cc:4b:c2:56:
7b:59:6d:9a:e1:61:85:dd:03:75:30:82:9f:0a:d9:59:6d:2f:
57:21:97:44:9c:b4:0f:26:4b:4b:95:6c:03:f4:17:30:2f:02:
47:2f:14:01:3b:3e:53:61:b5:f0:32:c6:bc:fc:7b:d6:a4:6f:
a2:00:48:c2:26:c6:df:05:a8:47:26:fd:bb:0b:a7:e4:73:6b:
ce:2c:fe:4b:2e:0f:e2:e8:ad:ce:0e:db:cf:11:f2:dd:98:fe:
55:c0:ab:a1:29:7d:f9:06:24:b5:54:96:46:a9:6c:96:04:03:
76:9e:5f:bd:47:f1:72:7e:98:75:d8:95:97:53:1b:5d:1c:6f:
c0:e9:4f:47:9c:de:21:5a:06:14:ad:12:9a:d2:d5:15:d5:8e:
2f:20:5d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:49 2025 by rpki-client