Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/4E3xaPJ7xd91tJgAKpN1WqKbdH0.roa
File: 4E3xaPJ7xd91tJgAKpN1WqKbdH0.roa (raw, json)
Hash identifier: XXfPN8fAPHXWzHL79W2FVt2Vnv2jtqEUrUF95LZlC/4=
Subject key identifier: E0:4D:F1:68:F2:7B:C5:DF:75:B4:98:00:2A:93:75:5A:A2:9B:74:7D
Certificate issuer: /CN=3ead19096b0ee080fe43810500b718a947fed229
Certificate serial: 01856F42C126B22978BB38F2FEFF1375EFEA
Authority key identifier: 3E:AD:19:09:6B:0E:E0:80:FE:43:81:05:00:B7:18:A9:47:FE:D2:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/4E3xaPJ7xd91tJgAKpN1WqKbdH0.roa
Signing time: Sun 01 Jan 2023 21:35:23 +0000
ROA not before: Sun 01 Jan 2023 21:35:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42346
IP address blocks: 193.108.136.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:c1:26:b2:29:78:bb:38:f2:fe:ff:13:75:ef:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ead19096b0ee080fe43810500b718a947fed229
Validity
Not Before: Jan 1 21:35:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e04df168f27bc5df75b498002a93755aa29b747d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ff:ad:c0:3d:20:56:79:72:23:a5:0a:54:54:
9e:7f:97:d8:73:3f:f1:52:df:7a:ac:54:d0:38:f4:
97:6b:b5:49:1b:72:85:cf:60:0e:08:17:30:24:72:
9a:2a:16:e7:23:2f:d5:c5:7a:7d:3c:6b:2b:9f:37:
89:bf:be:5e:4d:f0:ce:56:82:f2:0f:11:c9:1d:8a:
8f:26:fc:8d:7a:36:8f:68:eb:59:14:6d:9e:27:1d:
33:35:0d:77:d7:90:b2:ad:c9:6a:2f:68:d7:87:1e:
43:4f:a9:d2:b5:34:4a:52:38:42:89:67:1e:6b:0c:
4b:c0:5c:ba:67:11:eb:d5:0d:d8:cd:e9:24:60:b6:
cd:61:46:06:35:04:b4:09:38:39:ef:ba:ad:57:75:
14:d7:bf:8f:62:91:e1:2f:e8:ca:cd:ef:d7:c7:e9:
00:b0:ac:55:53:fe:11:53:7f:99:03:aa:ff:00:16:
17:3a:64:cb:30:59:86:54:d9:2d:0e:f8:a1:ce:07:
42:f6:76:80:7e:7e:2c:d0:e7:01:83:74:d7:8f:c3:
e7:62:bc:f8:bc:b2:8f:62:9d:66:86:74:f1:3b:fe:
ae:3e:ee:c9:b4:ae:00:3c:82:ea:a6:3f:b1:27:c3:
eb:01:d7:14:a9:cd:2e:f8:21:8d:09:d9:bb:45:11:
96:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:4D:F1:68:F2:7B:C5:DF:75:B4:98:00:2A:93:75:5A:A2:9B:74:7D
X509v3 Authority Key Identifier:
keyid:3E:AD:19:09:6B:0E:E0:80:FE:43:81:05:00:B7:18:A9:47:FE:D2:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/4E3xaPJ7xd91tJgAKpN1WqKbdH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.136.0/23
Signature Algorithm: sha256WithRSAEncryption
02:c6:b4:84:84:97:88:5d:78:91:1c:7e:2e:a3:ff:4b:ad:ad:
a7:ff:14:5c:50:54:10:62:4d:72:8c:f7:9d:8c:c7:56:b9:18:
4b:5b:0d:db:ad:c7:22:4b:bf:92:01:f3:02:24:37:6b:62:d5:
97:05:0f:bb:d5:56:58:da:81:5f:b8:5b:ce:5d:9b:9f:de:d0:
71:6f:2f:ee:34:75:25:7d:70:dd:b7:4c:69:91:5e:68:26:3c:
4b:be:91:55:d3:1a:da:84:57:fb:92:50:75:2b:8a:0c:04:a0:
ba:e4:e0:31:57:67:cc:62:f0:7c:17:3d:a0:3f:65:aa:59:33:
28:15:27:2d:67:f3:c3:bb:a4:fb:eb:b4:80:3b:dd:55:d1:26:
20:46:97:2d:09:49:ef:35:56:3f:67:ea:e0:34:d1:00:46:81:
2c:04:88:04:f1:02:d1:75:f5:4e:08:34:dc:73:14:85:d9:2b:
10:fd:5e:c9:3d:39:f3:99:f1:26:29:c3:fb:28:13:ce:ee:1d:
0a:7a:fd:15:cc:b2:02:71:63:e6:1e:8e:65:df:cb:1a:60:56:
78:c7:1e:66:9f:bd:6f:5d:0d:17:91:17:dc:f1:e8:d1:55:bf:
0e:1f:90:16:9b:75:22:11:9d:39:cb:03:e1:86:32:6f:2a:4a:
01:4d:02:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:00 2025 by rpki-client