Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/T1rDgBwp3QJzBIBO7ZXCGZM-miw.roa
File: T1rDgBwp3QJzBIBO7ZXCGZM-miw.roa (raw, json)
Hash identifier: iV2GvTT9K8zx8ficuJ4wANqclTQldnUn62r4FFZnzrY=
Subject key identifier: 4F:5A:C3:80:1C:29:DD:02:73:04:80:4E:ED:95:C2:19:93:3E:9A:2C
Certificate issuer: /CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Certificate serial: 0185726B770BB8E1514BB236116C8303AF3A
Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/T1rDgBwp3QJzBIBO7ZXCGZM-miw.roa
Signing time: Mon 02 Jan 2023 12:18:43 +0000
ROA not before: Mon 02 Jan 2023 12:18:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212043
IP address blocks: 193.38.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:6b:77:0b:b8:e1:51:4b:b2:36:11:6c:83:03:af:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Validity
Not Before: Jan 2 12:18:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f5ac3801c29dd027304804eed95c219933e9a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:11:0d:c2:43:89:7b:90:e9:61:15:e7:86:ca:
e1:9e:8e:05:65:90:80:04:27:6f:86:8a:9d:94:69:
ff:f6:42:73:c2:6c:ad:f5:b7:48:59:a6:e1:83:68:
8f:14:72:b3:9b:a9:b3:ea:b8:95:ce:11:7b:86:94:
e9:5b:ea:fe:22:ad:0e:a2:09:c9:e9:e8:6c:2b:74:
6c:a4:3d:4d:9d:e0:41:c2:45:c6:f7:69:0f:19:c5:
e3:f2:27:61:bf:16:16:ce:47:7f:1b:3d:2b:a8:06:
06:24:2a:ec:03:ae:38:89:cb:75:20:0c:91:ad:11:
69:80:6e:c9:e3:ad:bd:ea:72:d1:75:b7:cd:04:89:
24:18:49:cc:b6:3a:30:36:f3:e9:2b:14:75:75:f4:
5f:73:14:08:88:37:88:4e:e4:04:2e:1e:73:d9:0e:
e6:d6:9a:29:2e:af:84:d0:86:ed:09:ee:e8:7b:59:
ba:f4:d6:0e:5e:c9:3b:e8:a5:3f:65:9d:fe:9b:d4:
9c:4a:dd:5a:99:37:2b:de:45:b7:05:75:be:8a:70:
b2:92:1b:ad:02:17:53:bb:e5:80:0b:9b:7d:a5:ea:
68:74:5e:c1:73:4a:b4:36:b3:23:ff:96:5a:23:40:
0e:ce:ab:aa:ad:4b:5e:f5:ee:48:aa:18:47:8d:fa:
0c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:5A:C3:80:1C:29:DD:02:73:04:80:4E:ED:95:C2:19:93:3E:9A:2C
X509v3 Authority Key Identifier:
keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/T1rDgBwp3QJzBIBO7ZXCGZM-miw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.254.0/24
Signature Algorithm: sha256WithRSAEncryption
45:b2:8e:7e:fa:b4:8f:a5:71:e0:49:9b:fc:25:2b:7e:cd:55:
73:66:b1:9b:26:54:77:b0:41:09:2e:a9:4a:95:8e:dd:42:ad:
e7:b3:4e:84:2a:be:8a:38:3c:7d:fc:8c:5f:60:59:9f:ff:03:
30:26:aa:66:c1:f9:56:a8:22:37:5f:66:82:79:2e:6b:46:78:
7a:36:89:cc:ec:8e:68:86:7c:b6:9d:f5:55:29:17:91:ed:ce:
3b:2d:05:50:f1:34:4d:16:1c:7a:ec:b3:60:d9:a9:ea:3e:ca:
06:7e:56:b9:f6:18:84:dc:c2:08:78:69:41:80:23:79:c5:4f:
14:4f:7c:08:4a:c9:2d:bd:cc:00:d0:25:33:07:4d:c1:c8:01:
a2:21:78:a6:22:80:64:f8:d2:00:f5:82:58:5a:a9:bd:29:5b:
0b:fc:10:da:ab:38:9b:05:44:d7:8a:ff:94:0f:97:10:e2:c1:
89:3d:4b:5d:84:f4:d3:68:84:ad:f8:cd:2e:b6:de:8e:e1:f7:
5f:a3:f7:d6:0e:47:62:76:92:63:c8:ba:88:cd:45:a5:41:a3:
f2:0c:a3:48:6a:d6:ff:d5:a7:cd:d8:6b:d9:fe:79:7b:ba:2d:
92:6e:0e:44:b4:be:c1:b0:4d:f6:48:97:9b:af:a9:71:96:bc:
17:3c:dc:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:01:16 2025 by rpki-client