Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Y0ma5G1HBgD2dp7KaQ0dKIxggIY.roa
File: Y0ma5G1HBgD2dp7KaQ0dKIxggIY.roa (raw, json)
Hash identifier: pcYWqkhqAUCHCtbYy27jIN07gYORZMlv59LKujReV+8=
Subject key identifier: 63:49:9A:E4:6D:47:06:00:F6:76:9E:CA:69:0D:1D:28:8C:60:80:86
Certificate issuer: /CN=3e67ba8207b81c1b47263b1fde8f79b99597037d
Certificate serial: 01856E0AF679F4222006445E56296CFA237C
Authority key identifier: 3E:67:BA:82:07:B8:1C:1B:47:26:3B:1F:DE:8F:79:B9:95:97:03:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pme6gge4HBtHJjsf3o95uZWXA30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Y0ma5G1HBgD2dp7KaQ0dKIxggIY.roa
Signing time: Sun 01 Jan 2023 15:54:50 +0000
ROA not before: Sun 01 Jan 2023 15:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2119
IP address blocks: 193.160.2.0/23 maxlen: 23
193.160.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:0a:f6:79:f4:22:20:06:44:5e:56:29:6c:fa:23:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e67ba8207b81c1b47263b1fde8f79b99597037d
Validity
Not Before: Jan 1 15:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63499ae46d470600f6769eca690d1d288c608086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fe:05:50:e8:2e:57:b2:cf:29:de:0d:bf:82:
36:27:15:98:40:19:60:51:bb:bc:40:71:7a:ec:7c:
9f:a5:db:80:8a:69:8c:42:9a:ce:76:85:46:13:52:
1f:28:e6:d3:7e:61:6c:93:0a:0d:88:23:0a:a8:23:
77:8f:8f:52:27:59:a7:cd:01:07:bd:20:1e:fc:de:
6d:90:22:76:c4:2b:a8:1a:f0:09:97:95:99:5e:38:
0b:e1:dd:40:26:09:b8:71:3f:d5:e0:06:10:07:75:
80:4b:3d:72:7b:7d:1c:de:61:d7:98:4f:61:0c:f5:
05:70:69:a1:85:38:72:a7:8d:18:7b:98:4e:59:f0:
b5:6f:d1:cd:98:6d:6f:18:85:55:24:57:d6:84:0f:
e2:15:0f:39:21:55:e2:62:c8:80:5a:8f:51:e1:ba:
fd:a8:0e:33:0e:c0:e5:90:c1:ac:c8:43:88:77:10:
1b:8e:0e:08:da:32:e9:47:c8:c7:d8:f9:89:6b:e1:
38:88:c0:91:29:df:2d:e9:9a:d1:39:91:99:14:f0:
73:b2:06:bf:ce:d0:6e:17:f6:ee:7e:f2:25:03:d7:
fe:64:69:02:52:6c:80:ca:7f:9b:5d:0d:e6:26:8f:
b8:7b:22:48:e8:ce:bd:04:b8:37:ce:65:c4:f5:a2:
d7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:49:9A:E4:6D:47:06:00:F6:76:9E:CA:69:0D:1D:28:8C:60:80:86
X509v3 Authority Key Identifier:
keyid:3E:67:BA:82:07:B8:1C:1B:47:26:3B:1F:DE:8F:79:B9:95:97:03:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pme6gge4HBtHJjsf3o95uZWXA30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Y0ma5G1HBgD2dp7KaQ0dKIxggIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.1.0-193.160.3.255
Signature Algorithm: sha256WithRSAEncryption
93:ec:0c:f2:7f:af:34:b5:6f:ff:ee:0c:70:e4:93:d2:61:46:
47:f6:e2:9d:54:54:a4:7c:10:01:6b:ef:7a:7f:f1:5f:53:e6:
68:56:bb:2a:35:97:00:c6:bd:b5:30:2d:f3:96:de:e6:5e:bf:
36:63:6a:0d:3c:4d:69:d9:aa:8b:0c:1f:76:f3:6d:01:f0:d9:
ba:c4:09:b3:c3:7b:01:35:0b:c0:7a:60:a6:95:1b:0b:fc:df:
85:be:25:27:49:53:1f:13:2f:55:ab:01:f1:76:9a:65:2a:29:
41:8c:13:37:98:00:c8:9a:58:72:0e:34:b3:7a:fc:93:6f:4b:
11:a7:3b:27:74:48:dd:68:c4:e8:23:14:65:59:63:a5:17:f2:
15:22:c8:23:5b:7f:68:af:16:ae:98:b0:23:4e:a6:07:49:58:
81:bb:d6:4f:a5:b4:81:b0:c6:7c:43:b7:5d:dd:8f:6e:97:d7:
0b:fd:28:45:9b:c5:7b:f1:b1:84:14:2f:13:f2:d9:19:0e:6b:
07:08:20:ae:bc:42:41:74:90:96:16:ab:1d:3b:d2:4a:63:d1:
0c:74:ea:1a:c7:3d:d4:54:1f:40:be:e1:fd:c8:fc:16:98:28:
40:ef:fd:0e:f7:e4:31:fe:02:f4:fa:3a:b7:37:c1:e0:8a:c9:
ab:00:2f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:06:57 2025 by rpki-client