Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/TNHXnb7rwX6Du4vzKlOcT2p6FMs.roa
File: TNHXnb7rwX6Du4vzKlOcT2p6FMs.roa (raw, json)
Hash identifier: TuSrafVoekE0amtBS0Xz1C8rfUn7ZpiERPUlysQfqTU=
Subject key identifier: 4C:D1:D7:9D:BE:EB:C1:7E:83:BB:8B:F3:2A:53:9C:4F:6A:7A:14:CB
Certificate issuer: /CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d
Certificate serial: 01856C6EEA26EA82ECE39314C01BF7AD193B
Authority key identifier: 24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/TNHXnb7rwX6Du4vzKlOcT2p6FMs.roa
Signing time: Sun 01 Jan 2023 08:24:46 +0000
ROA not before: Sun 01 Jan 2023 08:24:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20922
IP address blocks: 193.188.192.0/23 maxlen: 23
193.188.193.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6e:ea:26:ea:82:ec:e3:93:14:c0:1b:f7:ad:19:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d
Validity
Not Before: Jan 1 08:24:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4cd1d79dbeebc17e83bb8bf32a539c4f6a7a14cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:35:dc:b1:a1:c5:40:98:32:ca:08:ad:1b:3d:
6e:a1:a1:aa:b6:c1:73:ff:a4:3d:61:30:e4:3c:72:
5e:87:45:e7:3b:8e:ee:1f:2a:c3:49:bb:21:46:7b:
60:bc:db:68:0c:70:af:f7:99:22:d1:e3:10:06:f1:
16:89:6e:73:8f:ae:75:34:a7:35:ef:af:64:c2:62:
3f:a7:17:8f:8c:be:25:3b:a6:e0:dc:0d:c1:53:42:
9f:bb:ae:9d:56:b8:72:23:37:7c:5c:c0:e5:c4:68:
19:78:01:e1:7a:a9:9f:f3:8a:79:61:23:b0:a3:e3:
b7:e4:45:7b:2a:46:ac:55:c6:2e:f8:72:1d:aa:9d:
c3:e6:d8:d3:90:5d:4e:78:d4:b3:59:64:a9:ce:87:
fb:32:b4:b4:ab:9d:40:08:b5:cd:f6:1a:d3:bf:c3:
c8:c4:ce:c3:64:a5:05:cb:2b:e2:6e:8e:dc:89:a8:
cf:6b:39:d4:a7:e5:16:26:06:3a:9d:41:8b:50:27:
77:4b:bd:7e:a6:d5:90:ed:24:ad:67:1f:35:c5:95:
00:9d:39:a8:60:0d:be:fd:af:e2:ab:4f:56:eb:5d:
3e:04:2e:2f:54:36:e6:37:52:57:ac:0a:f7:42:45:
4b:c8:b6:08:26:4d:fe:9e:1e:3c:ae:f9:4b:b5:a1:
98:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D1:D7:9D:BE:EB:C1:7E:83:BB:8B:F3:2A:53:9C:4F:6A:7A:14:CB
X509v3 Authority Key Identifier:
keyid:24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/TNHXnb7rwX6Du4vzKlOcT2p6FMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.188.192.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:5d:e8:ba:6c:0e:39:08:e7:6a:62:df:99:1d:e6:c7:d7:a4:
57:88:f8:f5:c5:81:38:c6:f0:49:32:fd:78:47:17:a6:86:d3:
8e:7a:43:8e:18:08:1b:a8:f6:06:ba:8b:91:b6:dd:73:0d:8d:
20:a1:91:2e:40:42:e8:34:54:f6:38:05:59:00:f0:a6:03:c9:
a0:b0:35:a2:c9:cd:5b:71:99:80:17:f5:88:6c:9d:38:c8:99:
59:a3:37:ab:2d:3e:c4:10:b1:4e:49:3d:e1:1d:96:4e:d1:1e:
ca:87:1f:22:b0:49:6b:f1:67:c4:31:bb:ad:50:b8:b5:ce:b7:
6a:27:43:2f:f4:fb:91:56:37:99:6b:f6:f7:d6:52:2d:ba:57:
39:cd:0f:2a:67:71:ab:d1:35:33:0b:5a:83:97:5f:b4:51:9c:
49:13:1c:dc:7e:71:07:06:95:13:f4:f4:94:0f:16:c9:c1:c1:
26:0b:a0:48:17:9c:47:a8:8e:a3:a9:36:63:de:7d:a6:39:de:
55:3f:0d:48:b6:a4:09:72:ae:6e:5d:22:7d:2c:00:c2:4f:17:
c3:fa:23:56:91:4e:07:25:a0:e6:c9:37:c0:a5:79:e1:28:8c:
22:70:bb:7c:74:e9:00:95:d9:f7:e3:a2:58:33:bd:fc:05:ef:
b4:d6:46:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:50:56 2025 by rpki-client