Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/tNtfY7xhwaooYwUnvG705eHn_GU.roa
File: tNtfY7xhwaooYwUnvG705eHn_GU.roa (raw, json)
Hash identifier: FXWbTDVe4kKfCT3w1JInShHuLj40f3XFR6n2k/ceao4=
Subject key identifier: B4:DB:5F:63:BC:61:C1:AA:28:63:05:27:BC:6E:F4:E5:E1:E7:FC:65
Certificate issuer: /CN=216462c8c0065a0a6ceaf243985b697cf1357bfb
Certificate serial: 01856CE60770050D03E3CAA7608D1DF61386
Authority key identifier: 21:64:62:C8:C0:06:5A:0A:6C:EA:F2:43:98:5B:69:7C:F1:35:7B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWRiyMAGWgps6vJDmFtpfPE1e_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/tNtfY7xhwaooYwUnvG705eHn_GU.roa
Signing time: Sun 01 Jan 2023 10:34:52 +0000
ROA not before: Sun 01 Jan 2023 10:34:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34720
IP address blocks: 193.178.162.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:07:70:05:0d:03:e3:ca:a7:60:8d:1d:f6:13:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=216462c8c0065a0a6ceaf243985b697cf1357bfb
Validity
Not Before: Jan 1 10:34:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b4db5f63bc61c1aa28630527bc6ef4e5e1e7fc65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1f:3c:35:ae:db:21:e7:ac:dd:c2:a3:6c:98:
97:ef:02:b8:e4:2f:da:0e:4f:74:f7:76:82:1a:e8:
c3:0b:43:85:b2:43:43:8d:58:4c:37:2f:b0:37:94:
10:84:11:89:93:93:69:27:b3:d3:c8:1e:2f:4a:e6:
83:97:98:98:92:a5:94:67:d7:94:03:d0:a0:83:a4:
24:00:28:aa:61:71:38:36:8f:e9:b5:4e:35:bc:51:
55:81:65:99:7d:e2:a3:56:e9:53:3a:09:d6:d1:e7:
9a:a5:fc:4d:4f:e2:02:7b:a4:56:4b:08:28:35:ad:
54:31:ef:f4:3a:8e:43:3e:8e:bf:d3:6b:9f:1c:25:
9d:99:60:32:8a:a0:17:a1:74:e4:20:14:e1:29:e7:
ff:b2:82:3f:e3:b1:6c:8f:d8:25:01:5e:41:a2:80:
e1:c4:73:25:9a:97:43:dc:90:6b:1e:ec:3f:2f:03:
5a:89:4d:80:5a:75:51:4d:42:29:7a:04:5f:72:00:
23:b1:34:78:8f:4f:06:f1:44:15:d3:46:2b:35:81:
c4:3b:72:70:7b:74:48:6d:d0:59:22:65:4d:42:7c:
3e:f1:50:bf:dc:c7:de:47:ad:6f:5b:f6:a8:46:00:
73:ef:ad:fa:03:03:89:4e:ec:fe:6f:3a:3b:2f:c5:
b7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:DB:5F:63:BC:61:C1:AA:28:63:05:27:BC:6E:F4:E5:E1:E7:FC:65
X509v3 Authority Key Identifier:
keyid:21:64:62:C8:C0:06:5A:0A:6C:EA:F2:43:98:5B:69:7C:F1:35:7B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWRiyMAGWgps6vJDmFtpfPE1e_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/tNtfY7xhwaooYwUnvG705eHn_GU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.162.0/24
Signature Algorithm: sha256WithRSAEncryption
39:f6:2b:63:0b:ec:24:bc:60:de:bb:86:d7:0a:d3:a3:36:ef:
e7:49:ba:7b:8f:9d:30:c4:fc:16:e7:84:d2:fa:5c:13:0d:2d:
34:a3:41:c4:34:fa:93:bd:98:c8:0a:1c:18:97:7f:d8:c5:b9:
e4:fe:ea:89:b4:d0:72:b5:3d:11:3f:13:bf:46:a4:4b:29:dc:
d0:17:cf:80:4c:e1:ea:16:b5:63:28:df:01:b4:5c:d2:cc:dd:
4b:a5:a3:96:97:f7:6d:10:52:80:94:99:d8:9c:4b:2b:6b:c7:
c5:20:1f:4a:08:c2:30:ec:91:f5:30:0b:4b:06:72:60:a2:c3:
ea:06:ad:18:15:30:49:42:ba:aa:25:ee:0e:5e:34:6b:cf:a5:
6f:36:e4:56:95:70:27:53:24:5b:20:90:d2:7f:a5:6e:75:37:
cc:0e:b6:df:5e:66:c0:5a:38:f8:7d:a7:19:85:be:ed:44:81:
e0:02:ab:f4:d2:e3:7a:89:a4:6c:56:71:8a:c9:02:01:e1:88:
59:4b:ee:e3:48:d9:a0:91:eb:bc:a5:0e:ca:4a:ee:bc:d2:f1:
aa:87:be:18:48:0f:12:e1:f1:e2:ff:b7:94:53:fa:41:29:50:
5a:31:d9:bb:a9:a7:40:52:0f:59:0d:4b:f3:e5:53:71:45:c4:
1c:91:be:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:58:52 2025 by rpki-client