Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/D4AtA7QqJ0HltC3RfaMhchKI8Sc.roa
File: D4AtA7QqJ0HltC3RfaMhchKI8Sc.roa (raw, json)
Hash identifier: ro9yUOUhKv31DNoP4lnT23TK3CRHsmN+kraYumsjo/k=
Subject key identifier: 0F:80:2D:03:B4:2A:27:41:E5:B4:2D:D1:7D:A3:21:72:12:88:F1:27
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 0BA545B4
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/D4AtA7QqJ0HltC3RfaMhchKI8Sc.roa
Signing time: Sat 01 Jan 2022 05:51:50 +0000
ROA not before: Sat 01 Jan 2022 05:51:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211715
IP address blocks: 194.163.93.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 195380660 (0xba545b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jan 1 05:51:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0f802d03b42a2741e5b42dd17da321721288f127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f7:f3:14:9c:3f:14:fb:84:f8:2e:7a:ff:93:
8e:a1:59:a9:fa:2b:99:0b:bc:67:91:a0:e5:d3:61:
41:55:d6:b1:85:e9:a6:1b:c9:66:3c:05:e9:94:29:
54:72:dc:ca:ee:02:05:4b:e7:99:08:04:89:e6:b8:
b9:14:49:65:1c:c2:ed:2b:c1:2f:72:31:f7:c4:23:
75:be:f0:5a:29:9e:13:c9:a9:a0:91:21:11:4b:8f:
12:85:f8:c3:c9:5e:25:1d:fd:0e:a7:89:32:60:00:
76:c4:19:0f:80:c8:a3:37:92:a7:7a:ec:80:27:cf:
b3:75:36:c5:91:47:c1:71:f3:6f:9b:98:ae:5a:ed:
80:d5:7c:36:63:51:8b:dd:eb:48:4d:9e:9e:08:14:
6b:9c:f1:23:51:ee:90:23:c5:ee:42:6d:9d:a1:c9:
b7:15:4d:5b:0f:f1:b4:4b:2a:cb:01:9f:8a:a1:9e:
30:48:11:5d:84:e4:f2:b9:54:8b:5b:68:c1:7e:24:
ad:b7:02:23:91:e7:a6:06:fd:cf:41:6e:ea:97:d7:
51:66:2a:d0:ff:69:d7:a4:b8:e3:ea:a3:8c:09:44:
5b:27:ce:5c:57:1d:d2:f5:9d:c7:6a:c5:3f:66:70:
fb:39:11:5c:16:10:cd:23:57:1b:ea:5a:43:74:d5:
93:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:80:2D:03:B4:2A:27:41:E5:B4:2D:D1:7D:A3:21:72:12:88:F1:27
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/D4AtA7QqJ0HltC3RfaMhchKI8Sc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.163.93.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:ad:2c:00:d9:89:22:0c:31:e1:c2:ed:2a:f4:2b:71:91:74:
ab:ac:d2:1c:60:7f:95:eb:36:d9:00:33:8d:a3:87:55:58:84:
1f:1f:f1:7b:19:00:33:ae:a1:51:a2:02:04:15:62:4c:65:23:
91:a4:b5:47:9b:62:b1:93:8f:f7:96:e0:dc:03:0e:cf:14:b2:
4a:1d:65:65:dc:de:90:b5:34:6b:f2:3a:1b:8b:96:55:1d:32:
0b:7b:a1:66:c1:30:1c:5a:2d:b0:db:d6:fe:29:6f:46:6d:03:
b7:06:9a:3d:88:6d:16:2e:68:6f:4a:e8:42:55:81:02:03:55:
eb:90:2e:3d:24:23:85:cd:63:3f:47:bc:1f:6f:80:5a:57:1c:
6c:45:2f:a4:46:a1:00:24:20:c5:4a:08:f5:c9:d7:09:9a:eb:
71:e2:f7:45:18:9b:51:d3:46:8f:ae:fb:28:3b:d4:86:f8:7d:
39:64:96:26:55:fa:d3:dc:d1:cf:60:85:11:ac:6f:4d:9f:d5:
04:5a:95:bf:7c:6f:e5:7b:0e:99:d0:0d:84:63:0b:75:47:1c:
96:e8:ca:3b:ec:bf:59:ff:6e:fb:bd:72:63:d7:3b:c6:39:8f:
ea:64:0c:a1:b1:75:7d:b6:83:7f:d5:68:b2:88:87:26:c4:5d:
dd:bb:1d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:44 2025 by rpki-client