Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/ptuGsHaN2BaUGvOHdbsg8eWeh0Y.roa
File: ptuGsHaN2BaUGvOHdbsg8eWeh0Y.roa (raw, json)
Hash identifier: PgsS8SgoKdpHOJMLNLLpnbdz7gpuyF59k7ZErxV0smw=
Subject key identifier: A6:DB:86:B0:76:8D:D8:16:94:1A:F3:87:75:BB:20:F1:E5:9E:87:46
Certificate issuer: /CN=03cde64f4168a3f399b77494d94aea77292c9bcf
Certificate serial: 01856D5D09B4B16217793E6983A53BA24F81
Authority key identifier: 03:CD:E6:4F:41:68:A3:F3:99:B7:74:94:D9:4A:EA:77:29:2C:9B:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A83mT0Foo_OZt3SU2Urqdyksm88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/ptuGsHaN2BaUGvOHdbsg8eWeh0Y.roa
Signing time: Sun 01 Jan 2023 12:44:51 +0000
ROA not before: Sun 01 Jan 2023 12:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211558
IP address blocks: 193.3.52.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:5d:09:b4:b1:62:17:79:3e:69:83:a5:3b:a2:4f:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03cde64f4168a3f399b77494d94aea77292c9bcf
Validity
Not Before: Jan 1 12:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6db86b0768dd816941af38775bb20f1e59e8746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:be:14:04:86:3d:0b:19:f2:b9:7f:52:5a:69:
ab:36:35:d7:cd:62:38:18:67:97:ae:65:fd:b3:ab:
05:5f:ea:80:09:47:88:63:f0:af:3f:0d:5e:b7:ef:
fe:42:0c:87:41:27:20:36:e6:b7:51:70:d0:75:22:
ba:93:14:a7:b5:82:58:9c:5d:17:e1:f2:4c:28:fd:
24:80:f2:0f:51:12:88:9b:f4:6c:85:ef:db:9c:e9:
73:03:c9:0c:c8:5a:8c:5e:c5:ee:1d:88:3c:48:01:
ba:c1:bb:7b:1b:b9:0c:a4:8a:3f:87:4c:04:2a:59:
14:b2:27:12:e0:d6:e9:d3:5c:6c:94:4a:57:1b:3c:
0f:dd:de:6b:e6:9c:1a:c0:1d:80:74:28:74:4f:52:
d4:ff:31:89:97:e5:76:96:ea:9c:f5:d3:a5:1d:79:
ee:1d:0a:56:34:72:06:4f:06:75:61:54:0b:bd:ad:
47:dc:c6:97:06:f4:17:a6:af:71:cd:17:25:70:85:
81:d4:4c:68:a4:d5:f3:c6:cd:9e:8f:49:29:cf:5d:
33:a6:d2:5d:1b:62:30:ed:cb:ab:88:19:a5:26:87:
f9:f0:81:0d:66:60:25:6d:16:8b:a5:05:df:7e:84:
f8:3a:7c:eb:8d:52:a6:56:12:22:84:1f:a6:b9:31:
1f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:DB:86:B0:76:8D:D8:16:94:1A:F3:87:75:BB:20:F1:E5:9E:87:46
X509v3 Authority Key Identifier:
keyid:03:CD:E6:4F:41:68:A3:F3:99:B7:74:94:D9:4A:EA:77:29:2C:9B:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A83mT0Foo_OZt3SU2Urqdyksm88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/ptuGsHaN2BaUGvOHdbsg8eWeh0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.52.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:f6:aa:00:20:32:ed:cf:90:c8:d3:eb:0f:16:dc:37:22:3f:
f5:16:83:e8:dd:f7:29:cf:95:9d:eb:ac:4b:20:af:ff:ca:26:
08:e2:1a:29:ad:29:a3:6c:e7:d0:cd:4c:e0:51:63:de:bb:49:
71:30:3e:f7:c6:9e:2d:f7:3a:2e:d6:6d:18:38:04:7d:c6:e3:
da:5f:da:cb:be:7c:99:78:cd:0e:d5:8b:78:49:47:12:4e:11:
94:a1:44:ea:32:38:19:29:fa:bc:3e:61:39:88:73:40:d8:ae:
d0:13:c8:53:96:60:ac:6e:6a:5e:ef:c1:4c:8b:08:4a:50:6a:
49:14:a7:46:ab:48:b5:de:e9:6a:f8:a1:f4:8b:9a:93:f4:f0:
99:6b:8a:4b:1c:ee:1a:65:f1:cf:47:68:30:2c:d7:18:ac:a6:
45:be:7d:fa:fb:e2:73:49:48:e8:cb:20:66:8e:6f:95:56:de:
88:85:94:0c:9b:12:7b:3c:f5:cc:34:f1:5e:aa:7f:16:c5:90:
6c:b7:8e:e7:f4:7b:65:7a:4b:5e:f8:48:71:c9:b6:5e:4d:32:
41:03:6b:1b:03:e9:2d:ef:cf:d6:eb:92:96:3f:96:74:cc:25:
71:8c:e1:d7:f0:3c:47:ce:57:3b:12:18:29:73:70:09:b0:8c:
90:86:18:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:30:36 2025 by rpki-client