Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/5b46bb-0af4-47d6-a4b8-7ba2686ea518/1/1aeA9l-wyEpIXccJzQoHTVvfv00.roa
File: 1aeA9l-wyEpIXccJzQoHTVvfv00.roa (raw, json)
Hash identifier: W88Q5sL3rtarBwakQBhevDbC7V2jXCmHIvVXuhZpL6Q=
Subject key identifier: D5:A7:80:F6:5F:B0:C8:4A:48:5D:C7:09:CD:0A:07:4D:5B:DF:BF:4D
Certificate issuer: /CN=95ea283635cb3bd1523a85ddc9caf530568d2f81
Certificate serial: 01857230E2ABF0B8D1DC340B29E51597C714
Authority key identifier: 95:EA:28:36:35:CB:3B:D1:52:3A:85:DD:C9:CA:F5:30:56:8D:2F:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/leooNjXLO9FSOoXdycr1MFaNL4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/5b46bb-0af4-47d6-a4b8-7ba2686ea518/1/1aeA9l-wyEpIXccJzQoHTVvfv00.roa
Signing time: Mon 02 Jan 2023 11:14:44 +0000
ROA not before: Mon 02 Jan 2023 11:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24920
IP address blocks: 193.111.122.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:30:e2:ab:f0:b8:d1:dc:34:0b:29:e5:15:97:c7:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95ea283635cb3bd1523a85ddc9caf530568d2f81
Validity
Not Before: Jan 2 11:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d5a780f65fb0c84a485dc709cd0a074d5bdfbf4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:33:69:4a:8c:da:93:b0:ba:ba:e5:71:21:ba:
ed:c2:0a:33:7e:0a:aa:2d:d2:cc:ff:13:07:d4:ef:
fc:25:c0:5f:44:4a:6a:72:ab:73:d8:73:eb:13:5c:
6d:86:cf:6a:a9:b9:bf:76:ed:fb:c1:44:13:de:c6:
eb:ef:66:0a:b3:ce:45:58:37:17:02:9a:09:da:ba:
fd:d4:18:ff:08:ae:cb:d5:3b:5a:7d:2e:26:bc:34:
64:26:29:d8:21:94:2b:05:03:f3:1c:8d:7c:f4:ee:
73:de:eb:05:f7:25:0d:54:27:07:c4:e7:d2:a2:e1:
d6:79:47:f4:51:1c:49:ef:de:a2:b8:05:d5:8a:c7:
22:25:41:3f:7f:10:18:3c:2b:b6:44:7c:3a:a7:52:
8a:6c:1c:33:8e:6b:28:e0:b6:81:ab:35:e0:91:63:
0f:b7:00:07:5e:52:13:0a:6a:f1:1a:ff:d2:32:ca:
b7:af:17:9d:b2:a7:17:56:f6:c6:a1:3b:c0:07:b8:
1b:ab:ae:cd:32:c0:b2:60:af:07:af:a7:17:5b:a4:
fb:db:4c:9a:9b:49:8f:4e:87:9a:11:ba:85:19:8c:
b7:f5:2b:e1:5a:6d:32:9c:cc:97:77:aa:d1:7f:64:
37:ee:1e:a7:00:08:50:64:21:f8:6e:36:15:79:d5:
51:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A7:80:F6:5F:B0:C8:4A:48:5D:C7:09:CD:0A:07:4D:5B:DF:BF:4D
X509v3 Authority Key Identifier:
keyid:95:EA:28:36:35:CB:3B:D1:52:3A:85:DD:C9:CA:F5:30:56:8D:2F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/leooNjXLO9FSOoXdycr1MFaNL4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/5b46bb-0af4-47d6-a4b8-7ba2686ea518/1/1aeA9l-wyEpIXccJzQoHTVvfv00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/5b46bb-0af4-47d6-a4b8-7ba2686ea518/1/leooNjXLO9FSOoXdycr1MFaNL4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.122.0/23
Signature Algorithm: sha256WithRSAEncryption
17:59:47:91:a8:d5:50:4d:24:63:28:1c:4d:49:47:2c:09:a5:
95:0f:4a:10:35:de:fe:e8:28:cf:07:ff:95:c3:76:87:53:a4:
cd:7d:72:53:93:9a:5f:6e:09:41:8c:e0:75:12:fa:75:f7:e9:
42:a1:f6:8d:a9:3f:35:09:fa:23:e6:df:98:0b:c8:e2:fe:6d:
87:43:51:c1:70:3b:fe:87:b3:f6:ff:f8:07:e8:00:4a:2f:00:
5d:08:16:23:53:4d:30:d4:75:64:0c:08:79:f2:56:c6:84:0f:
f1:a6:0d:8c:c3:39:ee:92:24:6a:e5:fd:41:8a:87:e0:e7:10:
48:d2:4b:36:b2:6f:c7:d5:18:0a:13:10:4a:f5:29:09:c7:d4:
12:81:6f:01:4a:bf:f8:e5:0e:26:1e:d3:01:cc:90:1a:63:6f:
b0:55:0a:98:ad:46:76:50:fe:8a:3b:1b:7f:c0:7a:dc:ad:c1:
f6:ac:75:66:cf:f2:4a:0e:f6:24:57:48:54:a5:e5:e5:f9:08:
46:1e:2d:01:26:3f:b1:06:28:db:c5:c4:df:0d:a2:fd:7a:b5:
a1:49:87:06:45:16:6a:60:9b:96:fe:83:a2:7b:79:97:25:d2:
ca:6b:e5:70:52:07:00:9f:c4:fe:d8:dd:d7:b8:dc:81:cc:9a:
1f:4a:1b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:03:37 2025 by rpki-client