Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/2WrDM9CR5I6-ZWimkU_3DgOYae0.roa
File: 2WrDM9CR5I6-ZWimkU_3DgOYae0.roa (raw, json)
Hash identifier: 2JMQGXDTJCBlJZMAlPZbEqFsZk3b6rkJ6OPi1tDk0fE=
Subject key identifier: D9:6A:C3:33:D0:91:E4:8E:BE:65:68:A6:91:4F:F7:0E:03:98:69:ED
Certificate issuer: /CN=0c8aae189c63ceb5643cb080327bcaa3b0ef8a59
Certificate serial: 0901BFDA
Authority key identifier: 0C:8A:AE:18:9C:63:CE:B5:64:3C:B0:80:32:7B:CA:A3:B0:EF:8A:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/2WrDM9CR5I6-ZWimkU_3DgOYae0.roa
Signing time: Sat 01 Jan 2022 09:02:47 +0000
ROA not before: Sat 01 Jan 2022 09:02:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201754
IP address blocks: 193.42.218.0/24 maxlen: 24
91.198.56.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151109594 (0x901bfda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c8aae189c63ceb5643cb080327bcaa3b0ef8a59
Validity
Not Before: Jan 1 09:02:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d96ac333d091e48ebe6568a6914ff70e039869ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:08:05:de:b6:fa:f1:87:8c:94:7a:c9:59:b8:
59:ce:f9:47:49:03:05:0a:f7:53:49:c1:bc:6f:32:
d1:67:de:f4:25:e9:17:c5:93:45:89:cf:fd:cd:c5:
2a:0a:85:41:7f:40:6d:4f:d8:58:ae:a3:5c:54:70:
72:22:b8:6a:64:d8:85:a9:83:9b:67:97:ca:12:45:
ff:00:db:24:56:7f:f8:3b:42:50:89:cd:f7:fa:94:
5c:3e:73:13:f7:3e:e3:8f:10:09:80:2f:91:de:4e:
da:a3:e2:83:a6:20:2e:7e:dc:69:27:26:e3:75:31:
af:90:8f:e8:6d:34:2c:ce:e5:6e:f1:e3:fe:e4:fc:
30:02:79:9c:6d:27:d7:30:85:09:31:7c:f3:b3:34:
a8:25:4b:7b:e5:92:e8:11:93:f9:da:24:b6:ab:f1:
d5:08:50:bb:5e:4c:01:bb:a2:ab:e2:93:ce:4c:20:
85:9b:db:55:3c:46:71:e2:be:95:1d:26:b7:43:ff:
75:70:e3:1a:ae:cd:24:c0:50:1b:cd:f1:f6:dd:11:
2b:b9:da:07:d2:78:94:4b:5e:e6:8a:07:3d:c9:dd:
c2:f2:2e:15:71:ac:65:5b:03:d1:e7:c4:e1:fa:df:
85:9d:2b:c2:93:10:fb:67:8a:83:50:53:98:0c:00:
21:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:6A:C3:33:D0:91:E4:8E:BE:65:68:A6:91:4F:F7:0E:03:98:69:ED
X509v3 Authority Key Identifier:
keyid:0C:8A:AE:18:9C:63:CE:B5:64:3C:B0:80:32:7B:CA:A3:B0:EF:8A:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/2WrDM9CR5I6-ZWimkU_3DgOYae0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.56.0/24
193.42.218.0/24
Signature Algorithm: sha256WithRSAEncryption
21:f0:9b:2f:e4:38:86:97:87:34:ff:a6:8a:8e:1f:b4:5a:a3:
23:3d:03:58:94:72:b5:4f:8b:f0:ca:5b:ca:39:bb:8c:5d:39:
33:79:bc:a2:aa:d7:0c:17:cb:84:e2:a7:80:d3:87:5a:dd:16:
dc:d8:8b:1b:c3:78:1a:ff:60:fb:78:10:1b:37:a4:88:f1:99:
7a:73:5c:73:1b:6e:63:96:e6:e4:31:ce:70:86:87:8f:24:55:
23:8f:69:5f:e8:f2:fb:30:b3:5f:73:d9:55:a4:f5:a9:a9:d5:
14:eb:b7:f4:55:f9:b5:51:11:23:a2:fd:33:3b:66:de:28:75:
f6:1c:56:bf:e4:e6:c5:92:68:16:be:e7:eb:b0:26:77:ad:b2:
0a:ba:22:14:52:02:b6:9a:81:ff:b8:af:55:3a:0e:5b:9b:ad:
1d:35:4f:0c:c1:7c:c2:3e:43:90:56:87:02:62:cb:c5:d7:93:
24:21:b7:57:59:52:de:1e:bc:83:bf:b8:4b:b4:14:77:f6:2b:
07:3f:5a:56:29:d5:b0:5d:c6:06:2a:43:c8:a5:49:c5:2a:36:
ea:40:10:30:e0:92:00:5d:ef:66:90:24:7e:9f:c8:92:05:1c:
2f:17:db:51:03:f1:23:33:f2:28:ce:87:bd:05:21:ed:9e:4f:
09:82:c2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:52 2025 by rpki-client