Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/SO-__wBbbkmAPq5KXo3z7P1WRxM.roa
File: SO-__wBbbkmAPq5KXo3z7P1WRxM.roa (raw, json)
Hash identifier: JoOuJ1n+p248hiAmxclbrLp4P59bc6ya4ZwFad0qTVI=
Subject key identifier: 48:EF:BF:FF:00:5B:6E:49:80:3E:AE:4A:5E:8D:F3:EC:FD:56:47:13
Certificate issuer: /CN=87851544a6427d2c8e279e4b94b92aaf0009ed27
Certificate serial: 043881FF
Authority key identifier: 87:85:15:44:A6:42:7D:2C:8E:27:9E:4B:94:B9:2A:AF:00:09:ED:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/SO-__wBbbkmAPq5KXo3z7P1WRxM.roa
Signing time: Sat 01 Jan 2022 10:00:33 +0000
ROA not before: Sat 01 Jan 2022 10:00:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205209
IP address blocks: 193.163.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70812159 (0x43881ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87851544a6427d2c8e279e4b94b92aaf0009ed27
Validity
Not Before: Jan 1 10:00:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=48efbfff005b6e49803eae4a5e8df3ecfd564713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fe:53:d7:e9:be:54:48:d1:27:11:96:46:3f:
ec:2a:e0:8b:8f:ba:e9:6a:06:a0:f4:65:59:7a:47:
a1:3d:d2:a9:ec:8c:5e:fc:26:a3:82:73:6a:84:3c:
31:e1:e2:da:93:bf:83:4a:f8:da:ee:f0:40:10:d7:
c0:51:19:ef:5e:e8:92:40:ef:90:af:66:1f:62:37:
aa:6b:68:96:df:5f:1b:f3:26:e8:b0:dc:2b:ee:be:
2f:69:d1:da:03:d1:ae:d5:b9:57:61:d2:9d:2e:27:
95:d6:33:b2:75:5c:40:b0:15:56:cb:c7:38:c8:f0:
86:9a:47:b3:8a:cd:80:44:ea:3d:3e:34:d4:0c:1e:
94:2c:b8:0c:24:2f:4d:92:14:59:0d:31:ea:0e:6a:
a4:83:d7:0b:78:43:15:73:93:c0:d8:f9:10:64:3c:
a0:d0:3e:1a:c6:5a:16:75:7c:4b:7d:b4:4e:45:5c:
37:3f:6e:22:e8:2e:50:e0:0d:53:e9:78:bc:3c:5e:
d8:c1:ef:e2:92:cd:d4:b6:a0:5a:b9:c4:72:24:68:
e0:94:d5:e9:61:e7:4e:c9:8f:ad:6e:21:c3:eb:8a:
e5:bc:93:12:3e:31:95:92:8d:ee:f5:1f:c7:a0:b8:
ec:6c:12:55:a1:71:66:b6:77:00:3e:c9:aa:78:53:
9a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:EF:BF:FF:00:5B:6E:49:80:3E:AE:4A:5E:8D:F3:EC:FD:56:47:13
X509v3 Authority Key Identifier:
keyid:87:85:15:44:A6:42:7D:2C:8E:27:9E:4B:94:B9:2A:AF:00:09:ED:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/SO-__wBbbkmAPq5KXo3z7P1WRxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.128.0/24
Signature Algorithm: sha256WithRSAEncryption
20:4a:1c:5c:97:b0:79:49:f6:c7:17:7d:57:3c:24:65:24:da:
82:ee:64:28:b3:d0:4c:19:5d:6a:c7:e6:90:7c:46:4a:c5:78:
0e:da:fe:4a:6f:81:b4:c9:6e:9c:db:1e:7a:b0:18:7c:69:2d:
ce:a5:46:b7:d8:5b:41:a1:27:27:2c:c3:1a:f4:aa:67:5b:3f:
a9:a3:a6:3b:0a:af:f1:62:ec:3f:25:6a:51:90:b8:c1:b2:59:
ea:06:c9:06:93:10:42:18:da:0a:a8:3e:d7:1b:7f:c0:5d:c2:
f5:b5:45:9a:ed:b2:e5:ec:d6:f9:74:29:e2:02:05:a0:0f:8c:
fd:81:8d:bf:e4:03:9c:8a:38:79:9a:73:9f:a2:d6:75:24:1f:
1e:2d:d9:8a:92:6d:82:6a:4e:7c:87:52:57:7c:8d:25:55:6c:
5d:be:89:ad:e5:9a:d0:9c:2c:31:d3:0b:16:11:f6:a5:1f:c3:
12:db:b9:ff:ec:3e:14:e3:e5:92:3f:87:51:eb:fd:e5:54:1d:
f6:35:f1:33:b6:3d:8d:25:85:f9:57:7c:de:1f:cc:0d:e3:13:
38:f9:d8:33:71:62:25:ff:3b:90:df:ee:02:b8:ea:57:0b:98:
d6:ea:2f:4f:22:ce:2b:e5:12:27:8f:a2:2d:ec:5e:5b:2a:fd:
bd:44:7f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:35:41 2025 by rpki-client