Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/DSjhCkdDFhQo4tqLPMtN1YVQ2-E.roa
File: DSjhCkdDFhQo4tqLPMtN1YVQ2-E.roa (raw, json)
Hash identifier: Cq3ZA7pjVFn9hM/suAevKHzOgCgYsLhlVrTWwcbpF9s=
Subject key identifier: 0D:28:E1:0A:47:43:16:14:28:E2:DA:8B:3C:CB:4D:D5:85:50:DB:E1
Certificate issuer: /CN=93d43d499868091bbdc47d95aee1c9099f005620
Certificate serial: 018570CBF881660EC4CB9779947470C408C6
Authority key identifier: 93:D4:3D:49:98:68:09:1B:BD:C4:7D:95:AE:E1:C9:09:9F:00:56:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9Q9SZhoCRu9xH2VruHJCZ8AViA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/DSjhCkdDFhQo4tqLPMtN1YVQ2-E.roa
Signing time: Mon 02 Jan 2023 04:44:53 +0000
ROA not before: Mon 02 Jan 2023 04:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6707
IP address blocks: 193.28.225.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cb:f8:81:66:0e:c4:cb:97:79:94:74:70:c4:08:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93d43d499868091bbdc47d95aee1c9099f005620
Validity
Not Before: Jan 2 04:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d28e10a4743161428e2da8b3ccb4dd58550dbe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a3:ef:ea:4d:04:be:e1:f1:f7:4d:7a:21:a4:
e4:38:4a:81:05:e4:26:60:a6:cf:e2:8f:17:db:5b:
94:64:d5:69:f2:bd:c1:a2:c8:07:e1:17:44:0a:02:
b3:45:e5:cb:7d:c4:13:7e:07:74:f3:6e:92:a4:fb:
0d:6c:fa:8f:88:d4:bd:9f:6e:77:7b:3a:ee:34:84:
3e:e6:49:be:17:ad:0a:bd:ff:c4:19:01:df:a0:4a:
2b:fb:df:50:3e:bc:ab:f2:d5:81:bf:10:e0:95:a7:
d0:8c:54:53:a8:72:d5:bc:ac:b1:a3:d2:67:e0:08:
68:38:ed:96:37:36:43:18:6b:40:df:d7:af:bb:42:
c5:bf:95:99:17:1a:8c:8c:9b:41:73:c2:93:35:39:
c4:aa:e1:f7:37:a3:ff:95:20:2c:ae:f2:4e:bd:ca:
e9:62:a2:8e:26:89:d0:07:d0:a0:b1:a9:94:f8:20:
b6:df:80:c1:19:29:2c:7a:cb:13:57:86:30:8e:f3:
ee:53:d9:b5:8b:82:3c:ec:93:f8:5b:26:19:43:fa:
b8:ac:8e:fc:56:2c:9c:e9:c6:ff:3d:be:0c:bf:f0:
d3:fa:32:7b:3a:5a:d5:58:0b:0d:1f:db:e9:96:fe:
82:43:a9:68:9e:66:00:15:77:75:95:d4:92:62:27:
e0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:28:E1:0A:47:43:16:14:28:E2:DA:8B:3C:CB:4D:D5:85:50:DB:E1
X509v3 Authority Key Identifier:
keyid:93:D4:3D:49:98:68:09:1B:BD:C4:7D:95:AE:E1:C9:09:9F:00:56:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9Q9SZhoCRu9xH2VruHJCZ8AViA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/DSjhCkdDFhQo4tqLPMtN1YVQ2-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.28.225.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:0e:74:33:e8:9c:1d:3c:11:00:5d:d7:7a:94:dc:24:75:8f:
63:1b:0e:9f:eb:17:30:fb:79:0d:96:aa:9d:33:47:48:fb:ee:
a7:d5:90:ef:5b:a0:f5:e9:ba:2b:a3:38:8a:7d:2e:56:ae:00:
b5:95:dd:41:b7:b7:eb:9a:3d:00:01:5d:8e:88:81:34:e6:81:
fa:da:00:02:64:ce:cc:10:42:c6:6b:97:42:57:95:93:06:84:
91:20:50:93:11:25:31:f7:69:ec:79:0e:f7:ab:a9:14:2a:a5:
a9:9d:1f:67:93:80:79:cf:ea:68:e0:02:bc:fb:0f:e0:5c:a5:
7a:1c:ec:f8:26:72:28:6f:f6:d6:8a:66:23:d0:7d:85:c9:7c:
b1:af:4e:46:80:d6:1e:8f:8a:ce:c3:34:fe:18:40:c7:b0:04:
2b:c3:9a:93:7a:d9:59:c1:f7:e4:f9:e4:a3:73:aa:35:c6:76:
0a:ec:80:dd:39:49:2e:31:ef:57:d5:24:5d:f1:05:a1:38:4c:
d2:b5:8e:ed:3c:9a:19:7b:25:cf:6c:9c:20:8f:3b:c5:ba:a8:
60:56:08:96:50:57:78:da:20:fe:1c:1f:0a:36:e9:d5:5b:e1:
6f:bc:88:76:fa:b6:48:2a:33:35:3f:d0:c7:25:7a:12:e0:34:
aa:17:48:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:30:32 2025 by rpki-client