Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/2sc2zwRx1LfsigFL0Lu_T6ig8KA.roa
File: 2sc2zwRx1LfsigFL0Lu_T6ig8KA.roa (raw, json)
Hash identifier: 3xsMNg0sJzrwn3htaOAeDB86Ymze457iTSWkS5NWcp8=
Subject key identifier: DA:C7:36:CF:04:71:D4:B7:EC:8A:01:4B:D0:BB:BF:4F:A8:A0:F0:A0
Certificate issuer: /CN=87851544a6427d2c8e279e4b94b92aaf0009ed27
Certificate serial: 0185700B8D5A2D34CB51812881E22AEAC249
Authority key identifier: 87:85:15:44:A6:42:7D:2C:8E:27:9E:4B:94:B9:2A:AF:00:09:ED:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/2sc2zwRx1LfsigFL0Lu_T6ig8KA.roa
Signing time: Mon 02 Jan 2023 01:14:43 +0000
ROA not before: Mon 02 Jan 2023 01:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208905
IP address blocks: 193.163.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:0b:8d:5a:2d:34:cb:51:81:28:81:e2:2a:ea:c2:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87851544a6427d2c8e279e4b94b92aaf0009ed27
Validity
Not Before: Jan 2 01:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dac736cf0471d4b7ec8a014bd0bbbf4fa8a0f0a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7f:4f:5f:f2:f7:91:b9:83:18:af:7b:3c:fe:
d2:c6:9f:ae:8d:08:f6:9a:9b:59:a7:43:21:c8:94:
dd:5a:41:91:ad:7c:36:87:c7:e1:8c:1c:3f:a5:ed:
e9:86:51:3e:27:e7:6c:f2:b0:97:e7:11:83:fd:01:
9a:6d:bb:7d:c1:43:f7:69:f4:cd:49:20:3e:98:8e:
02:83:c1:34:fc:43:98:b6:55:8f:d3:ee:35:7d:35:
87:f4:35:8d:10:31:55:2b:67:2f:91:f7:2d:d4:2a:
3f:e9:53:32:c5:43:8f:93:b9:09:61:01:62:d6:7e:
88:9d:2b:6a:0e:62:61:eb:a2:25:f0:1e:51:d2:d6:
65:61:8a:b6:15:c3:95:bb:60:56:3d:f5:f7:1d:dc:
73:4e:1f:98:c2:51:a3:c6:3c:f8:52:e8:dd:0c:e7:
d9:16:a5:e5:25:92:ab:e0:38:61:09:28:a3:30:58:
9b:6c:e8:ce:68:1a:e5:5b:8a:cf:92:1e:17:fc:d7:
9f:e9:65:b7:25:db:05:69:65:12:dd:00:bb:94:b7:
41:66:73:d8:3f:33:b1:ce:99:ad:fa:8a:2a:9a:cf:
61:48:d4:f8:64:79:21:f2:28:bc:43:4d:06:e9:93:
6f:86:28:ea:e6:3e:bd:e8:5e:3c:02:19:c4:73:1e:
38:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C7:36:CF:04:71:D4:B7:EC:8A:01:4B:D0:BB:BF:4F:A8:A0:F0:A0
X509v3 Authority Key Identifier:
keyid:87:85:15:44:A6:42:7D:2C:8E:27:9E:4B:94:B9:2A:AF:00:09:ED:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/2sc2zwRx1LfsigFL0Lu_T6ig8KA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.128.0/24
Signature Algorithm: sha256WithRSAEncryption
37:86:e7:9f:63:a1:35:18:a6:b2:86:46:36:83:e7:8f:f1:ec:
2c:15:48:5c:6b:c0:0f:f2:7e:5f:a1:15:3a:49:ec:a9:04:ac:
48:41:f8:46:de:9f:56:f5:28:1f:ab:68:a4:93:31:17:81:d7:
f2:84:b0:7f:2b:91:dd:3a:8a:f7:b1:1c:18:a4:b8:51:b6:d7:
3d:55:aa:33:87:cc:de:6f:aa:ed:b5:b5:fc:47:4a:72:a2:4b:
24:4f:15:a4:05:04:41:8c:e8:49:7e:61:61:a7:36:45:f8:15:
a1:51:ac:fa:c6:68:3f:bf:24:a0:cf:2b:04:24:8e:b5:16:95:
72:15:3f:49:b9:b9:9e:bc:d9:fc:bc:d1:c7:47:de:a2:9f:1b:
70:be:12:50:49:56:70:f3:8b:da:c1:c8:fb:f3:3a:d9:af:2a:
c2:f7:27:f9:fa:93:e9:33:2f:13:f8:ea:61:94:cd:5d:ee:a5:
d3:37:34:02:6f:ed:37:74:0a:27:d7:62:82:2b:31:7c:20:f2:
ac:c8:dd:eb:c2:94:4f:46:d7:2d:02:c1:13:66:86:9a:9a:94:
29:9d:34:c9:9a:88:2b:ae:da:52:04:0d:cd:88:f1:5a:01:99:
1b:c3:02:83:ae:b4:24:0e:4e:56:d0:a5:ab:ab:5d:0c:39:21:
0b:b5:a7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:28:09 2025 by rpki-client