Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/95a6f4-8220-46dc-b238-34ad1c853599/1/4FppId3aIMgTEZZA_g48n5WIYGA.roa
File: 4FppId3aIMgTEZZA_g48n5WIYGA.roa (raw, json)
Hash identifier: p+1N19eYSOfLItydKVzc470XEPZ+mWAL66cU8LF9xUY=
Subject key identifier: E0:5A:69:21:DD:DA:20:C8:13:11:96:40:FE:0E:3C:9F:95:88:60:60
Certificate issuer: /CN=6c6f6391139638cef8318114132ccf26e167d3a4
Certificate serial: 018570E747B5A6BD0EA673568E05449A9E13
Authority key identifier: 6C:6F:63:91:13:96:38:CE:F8:31:81:14:13:2C:CF:26:E1:67:D3:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bG9jkROWOM74MYEUEyzPJuFn06Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/95a6f4-8220-46dc-b238-34ad1c853599/1/4FppId3aIMgTEZZA_g48n5WIYGA.roa
Signing time: Mon 02 Jan 2023 05:14:43 +0000
ROA not before: Mon 02 Jan 2023 05:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212373
IP address blocks: 193.163.168.0/24 maxlen: 24
2a10:8ac0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:47:b5:a6:bd:0e:a6:73:56:8e:05:44:9a:9e:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c6f6391139638cef8318114132ccf26e167d3a4
Validity
Not Before: Jan 2 05:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e05a6921ddda20c813119640fe0e3c9f95886060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:23:b5:82:ba:0a:03:db:42:43:88:67:e4:f9:
8f:b5:93:62:2e:f5:1d:ef:a0:74:20:cf:94:aa:7b:
f9:11:be:ec:5a:97:e0:16:84:f0:3e:7c:fb:a5:82:
86:16:b5:ec:15:4d:ab:b5:40:85:23:75:c6:96:03:
33:07:34:a2:17:27:66:e5:d1:a0:30:0e:4e:e5:6b:
89:f2:23:6a:e1:1b:83:bd:e6:73:73:83:8a:af:a0:
18:5e:d4:01:32:b1:91:0f:c1:f0:8f:a1:97:7a:72:
c2:18:7a:6d:d7:6f:19:21:d0:1d:68:83:a5:24:1a:
e4:c8:2d:70:27:c5:4e:c8:a0:5c:1a:60:50:17:5c:
c7:7c:df:25:8f:44:85:1c:37:0e:a6:c3:0e:d3:e2:
78:28:0c:a9:a9:66:b2:26:43:1d:1b:28:4b:db:9c:
fc:ec:3f:b5:1b:d5:0b:7b:d0:bb:af:a4:f7:3e:93:
1b:3b:3e:6e:a3:16:d7:af:1e:be:f8:b9:ff:00:c1:
eb:3d:96:0a:ce:87:b0:68:34:62:99:b9:9a:80:0b:
68:ea:97:96:6c:d6:eb:ac:77:90:9a:b8:23:4e:b0:
da:c6:1f:0f:94:15:b2:dd:ad:8e:3e:02:0a:bd:bd:
3a:46:91:e3:92:1f:28:0a:61:ca:d3:48:e1:c9:9b:
3d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:5A:69:21:DD:DA:20:C8:13:11:96:40:FE:0E:3C:9F:95:88:60:60
X509v3 Authority Key Identifier:
keyid:6C:6F:63:91:13:96:38:CE:F8:31:81:14:13:2C:CF:26:E1:67:D3:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bG9jkROWOM74MYEUEyzPJuFn06Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/95a6f4-8220-46dc-b238-34ad1c853599/1/4FppId3aIMgTEZZA_g48n5WIYGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/95a6f4-8220-46dc-b238-34ad1c853599/1/bG9jkROWOM74MYEUEyzPJuFn06Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.168.0/24
IPv6:
2a10:8ac0::/29
Signature Algorithm: sha256WithRSAEncryption
12:b4:b4:f9:65:39:5a:dd:79:95:eb:dc:b0:02:77:99:58:4f:
28:44:c0:6c:b3:dd:59:4e:c7:95:4a:14:a2:5d:dd:95:e4:fb:
62:ae:2b:f7:96:c8:7a:74:29:b6:ba:e7:90:7c:da:39:2a:66:
8d:88:4f:89:3d:07:b1:c9:3b:92:d5:a2:77:62:17:c7:e0:33:
e9:89:f3:b6:88:ff:b4:7a:16:2a:9f:1c:9b:c9:a4:a5:fd:e8:
f5:d9:8f:62:b8:42:57:43:e4:50:eb:8c:77:cf:36:00:22:31:
bd:aa:a1:12:8a:39:81:53:91:01:a7:bb:af:8c:ad:d4:a4:3a:
49:2c:96:c0:fc:ac:02:0f:ec:e6:66:1d:b1:3b:81:ff:0d:20:
2a:03:f3:e4:d0:db:04:de:d1:16:b7:eb:56:89:df:8f:16:f7:
5d:a2:b4:7c:1b:9c:5e:86:20:e5:a4:d1:e1:c4:89:d4:f4:67:
0b:db:28:e9:8c:22:82:dd:35:99:28:ba:23:a8:af:2c:8e:cf:
18:51:d8:71:cc:dc:f6:cd:9d:5f:0e:55:1d:0c:f1:3b:19:c0:
61:f0:48:9c:31:75:80:2e:7f:c0:59:f5:cb:5d:45:b3:e3:62:
14:09:37:1d:1b:d0:3c:b2:9d:51:f4:6e:b7:aa:7b:09:71:8e:
14:02:34:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:21:02 2025 by rpki-client