Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/XVkDGmz5pz89AphyPYVj3_ZFD3A.roa
File: XVkDGmz5pz89AphyPYVj3_ZFD3A.roa (raw, json)
Hash identifier: ZAKuQULvjRz/q+8Mm3JxC+uTQvxJb+6yZeyniGhhZfg=
Subject key identifier: 5D:59:03:1A:6C:F9:A7:3F:3D:02:98:72:3D:85:63:DF:F6:45:0F:70
Certificate issuer: /CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Certificate serial: 01857079856B40343586332B062A37000A7E
Authority key identifier: 7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/XVkDGmz5pz89AphyPYVj3_ZFD3A.roa
Signing time: Mon 02 Jan 2023 03:14:50 +0000
ROA not before: Mon 02 Jan 2023 03:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64267
IP address blocks: 193.228.90.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:85:6b:40:34:35:86:33:2b:06:2a:37:00:0a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Validity
Not Before: Jan 2 03:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5d59031a6cf9a73f3d0298723d8563dff6450f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a1:9b:41:91:d3:d3:38:6c:d0:29:52:d3:35:
e7:ad:53:24:52:54:33:1e:e7:7d:23:cb:ae:5f:04:
89:65:b1:9a:b1:43:1f:0f:c7:8b:b0:51:5b:81:85:
1f:43:5f:21:6d:89:a5:de:1d:23:74:1f:fc:dc:b2:
1a:90:73:f7:fb:20:31:1c:b2:4b:74:90:21:b1:3b:
00:56:07:f4:05:8f:4e:40:81:85:56:10:20:92:8c:
42:90:ed:34:7f:5d:22:95:ea:85:36:12:01:f0:ce:
86:d5:7b:6e:2f:2e:de:12:4e:ec:e3:3d:1c:b7:4f:
4b:1f:ef:8d:a2:e4:aa:34:f6:fa:78:79:06:3e:b9:
1c:04:9a:80:f4:1f:5e:4f:72:b9:2e:c1:29:ba:8a:
0e:f7:48:a3:eb:83:42:c0:65:d5:20:8b:b0:46:9e:
7f:cb:58:7f:d6:0e:a9:f8:7c:0d:f8:7c:6c:97:f3:
c3:9c:88:f0:91:1f:0d:99:17:91:fa:c8:a1:7e:de:
5d:38:f7:f8:eb:4d:67:2b:32:db:b8:23:4d:d8:88:
29:5d:82:51:11:6c:6e:f8:42:39:52:9c:0e:d3:39:
9e:11:08:3b:70:44:a4:12:e7:de:2e:cc:4c:ea:b4:
f9:31:47:9b:da:22:66:db:e6:2e:14:1e:f3:ba:2e:
56:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:59:03:1A:6C:F9:A7:3F:3D:02:98:72:3D:85:63:DF:F6:45:0F:70
X509v3 Authority Key Identifier:
keyid:7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/XVkDGmz5pz89AphyPYVj3_ZFD3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.90.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:0b:82:b9:2f:17:d4:29:4a:42:ea:78:df:a0:d9:8b:a9:44:
66:30:a5:87:25:30:af:17:43:81:14:13:03:ec:22:b1:8a:4c:
46:ad:f4:99:fd:6f:22:84:0f:5e:fb:ff:6e:ac:a1:14:85:21:
c8:c3:91:a3:37:16:81:d6:79:ea:27:06:fb:64:d4:a2:09:c8:
12:45:cb:eb:ae:f8:6b:8d:39:23:1b:f4:8c:9e:79:4b:9b:34:
83:d5:29:81:06:6f:4d:38:66:e6:c8:16:86:da:78:68:ca:a7:
c0:ab:22:7f:d5:ff:64:cb:53:18:ca:cb:42:15:95:7a:cd:8a:
06:5b:f5:17:3a:bb:92:18:ae:2c:07:21:eb:05:47:ab:73:00:
0b:f2:c9:0f:27:04:04:a3:10:b9:28:aa:54:1a:4c:f6:11:24:
3f:1c:51:74:95:34:fb:c9:61:bd:78:65:f4:46:b4:86:a1:40:
1e:de:9f:20:46:0e:e1:88:89:8e:7b:86:c5:bb:f8:2b:5f:6d:
6e:91:ee:5d:37:25:1d:76:e9:69:5f:cf:05:06:56:31:9a:6a:
7c:7c:b9:ce:8b:87:14:e7:22:54:91:25:6b:d4:35:df:86:d2:
50:38:63:23:dc:c1:e8:e0:34:73:96:a9:a0:10:82:be:1b:2f:
81:17:8e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:01:46 2025 by rpki-client