Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/T7Fob1x0Uiol1vKRwYIFoFPThTo.roa
File: T7Fob1x0Uiol1vKRwYIFoFPThTo.roa (raw, json)
Hash identifier: bOK/yj/Y9uQZrgLi8mP0T9/rjES/L8txHLUwFFU6lP4=
Subject key identifier: 4F:B1:68:6F:5C:74:52:2A:25:D6:F2:91:C1:82:05:A0:53:D3:85:3A
Certificate issuer: /CN=cc7ac47a19f66f418397eea5fef15a07ff2c0023
Certificate serial: 018708F2423279DB1F49F4FB6341D3077BDE
Authority key identifier: CC:7A:C4:7A:19:F6:6F:41:83:97:EE:A5:FE:F1:5A:07:FF:2C:00:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/T7Fob1x0Uiol1vKRwYIFoFPThTo.roa
Signing time: Wed 22 Mar 2023 10:51:46 +0000
ROA not before: Wed 22 Mar 2023 10:51:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213334
IP address blocks: 193.176.82.0/24 maxlen: 24
193.176.81.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:08:f2:42:32:79:db:1f:49:f4:fb:63:41:d3:07:7b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc7ac47a19f66f418397eea5fef15a07ff2c0023
Validity
Not Before: Mar 22 10:51:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4fb1686f5c74522a25d6f291c18205a053d3853a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d0:8e:a9:c3:01:13:d1:19:2e:75:62:95:9b:
89:6f:e0:8e:4f:0e:bc:05:eb:fe:6c:94:94:7e:4c:
65:50:6f:53:6a:4d:e2:c9:20:64:d3:76:c6:ca:bb:
63:b6:8f:6c:78:35:6e:5b:21:15:07:99:31:b8:66:
c6:f5:13:0f:6a:25:b9:a9:7b:4f:9a:fe:0a:8a:55:
8e:50:d9:38:4d:87:83:e3:88:57:1e:bf:72:4d:5e:
a1:86:5f:5b:cb:31:7a:a6:59:ba:ae:d0:39:76:97:
9c:e7:83:3c:14:9e:37:a1:24:85:7c:60:4b:99:d5:
80:5e:a4:8f:eb:00:5b:4b:64:cc:f1:94:f0:9b:7b:
57:f6:e3:c3:27:a8:b8:54:6a:a0:4a:c0:0e:09:f4:
2a:ce:56:2d:43:e7:14:8a:08:40:79:14:f4:0b:e6:
30:15:05:7d:99:78:e5:6f:48:75:a4:a9:17:24:ea:
fa:f3:37:ff:2c:6a:9c:56:33:72:3b:64:5c:52:c1:
4a:c8:db:16:c3:2e:40:7c:48:15:d8:68:85:70:18:
ac:a5:8d:87:e7:63:84:90:e2:f5:17:17:d7:f2:3b:
c2:50:e5:b4:51:52:c7:d7:c6:0b:8d:e7:ab:98:bc:
f9:f6:bf:5c:49:00:06:65:56:37:78:bf:27:a9:6b:
98:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B1:68:6F:5C:74:52:2A:25:D6:F2:91:C1:82:05:A0:53:D3:85:3A
X509v3 Authority Key Identifier:
keyid:CC:7A:C4:7A:19:F6:6F:41:83:97:EE:A5:FE:F1:5A:07:FF:2C:00:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/T7Fob1x0Uiol1vKRwYIFoFPThTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.81.0-193.176.82.255
Signature Algorithm: sha256WithRSAEncryption
a2:67:71:a2:88:eb:2e:b1:dd:7d:34:7f:e2:2e:28:60:9b:30:
06:e8:e0:b3:44:2b:48:65:59:95:ab:23:28:e7:cf:42:b1:eb:
db:4d:d7:bf:47:a6:07:f7:f7:f4:09:25:b8:f9:4f:7e:9d:44:
a2:04:93:14:2f:de:8a:8e:19:83:03:fb:d0:0e:43:4a:8d:ea:
42:55:3e:53:db:56:88:54:d9:b5:13:bf:3a:16:bf:e2:3a:4b:
db:9d:04:ac:e0:92:e4:c3:23:ac:31:7c:54:b1:e0:b2:6e:2a:
43:9c:5a:39:77:ed:e8:1d:0c:f3:ba:5c:6b:42:30:21:79:eb:
d5:f1:6b:bd:c3:ac:10:66:c0:b1:8e:c0:91:28:64:89:1e:a2:
fe:e3:f8:fb:b7:b4:d1:0c:be:f6:5c:48:2e:00:1d:87:61:49:
e0:d9:fb:1b:11:a7:28:d9:d3:9e:16:64:2d:46:a0:fb:a2:28:
40:29:3f:4a:63:9d:2e:f1:a0:18:d7:23:c6:d7:d3:96:e6:c5:
02:67:74:8b:9c:71:22:81:e2:32:61:f6:e5:f6:fc:4e:74:b7:
a6:04:24:76:75:ed:1e:63:4d:80:21:c6:c2:fa:85:15:d3:e9:
39:cb:28:e5:99:5b:0d:8d:99:6c:b7:af:b3:e1:0e:3b:57:28:
12:10:b3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:34:21 2025 by rpki-client