Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/DA0CDTJuZ0rt5rI--l1Kaz8CoVo.roa
File: DA0CDTJuZ0rt5rI--l1Kaz8CoVo.roa (raw, json)
Hash identifier: V1Q1IWzdJ02OuJJE1vvyzFBQ4aU8j70ta2debAPg74A=
Subject key identifier: 0C:0D:02:0D:32:6E:67:4A:ED:E6:B2:3E:FA:5D:4A:6B:3F:02:A1:5A
Certificate issuer: /CN=08e7d7b3bc4c0791c0cffe3f1555ab773e3ed16e
Certificate serial: 0188B499451704DC97C0DF721D149CB572EE
Authority key identifier: 08:E7:D7:B3:BC:4C:07:91:C0:CF:FE:3F:15:55:AB:77:3E:3E:D1:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/COfXs7xMB5HAz_4_FVWrdz4-0W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/DA0CDTJuZ0rt5rI--l1Kaz8CoVo.roa
Signing time: Tue 13 Jun 2023 11:52:03 +0000
ROA not before: Tue 13 Jun 2023 11:52:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199102
IP address blocks: 93.189.224.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b4:99:45:17:04:dc:97:c0:df:72:1d:14:9c:b5:72:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08e7d7b3bc4c0791c0cffe3f1555ab773e3ed16e
Validity
Not Before: Jun 13 11:52:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c0d020d326e674aede6b23efa5d4a6b3f02a15a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:38:dc:98:01:83:e4:5c:27:3a:63:33:67:1d:
8e:48:c1:0a:3b:b8:55:1a:62:7d:67:e5:c3:b6:48:
98:11:9b:5c:a3:38:29:1b:23:bf:21:5c:06:b0:f3:
6d:2e:19:1a:71:d0:74:f3:e2:e5:84:d0:0b:fb:7c:
2a:86:fe:50:e8:8c:1f:ec:11:98:63:43:6d:98:90:
c5:bb:c5:fd:26:92:77:b0:78:cd:47:a2:91:e6:25:
37:c7:1f:aa:67:c9:f8:33:52:1b:c6:3a:d7:21:c6:
b1:d9:7c:6b:3f:58:93:d2:e6:17:7e:55:e5:bd:f7:
97:47:fb:13:f6:40:c3:83:83:5f:ff:d8:41:b4:80:
ad:53:d9:35:6c:2a:fd:ce:fd:4b:64:57:ba:57:b5:
50:cb:f6:a0:8f:cc:b6:07:9b:ad:88:42:a3:f9:85:
0e:56:15:bb:27:74:f1:3a:24:91:f6:7b:92:7e:fe:
30:ea:76:9e:f0:a3:fb:e6:00:00:93:ac:e0:eb:a0:
ac:93:7a:5d:d6:7c:c8:e2:fd:dc:bb:0f:27:a5:3e:
c6:cd:bb:35:71:81:13:ce:29:68:a3:9c:c1:1f:4d:
2c:59:0a:c2:f4:6e:6f:b0:c8:1a:df:b9:ae:e2:ee:
35:44:aa:c1:17:6b:bf:df:42:09:4d:af:86:a7:7b:
79:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:0D:02:0D:32:6E:67:4A:ED:E6:B2:3E:FA:5D:4A:6B:3F:02:A1:5A
X509v3 Authority Key Identifier:
keyid:08:E7:D7:B3:BC:4C:07:91:C0:CF:FE:3F:15:55:AB:77:3E:3E:D1:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/COfXs7xMB5HAz_4_FVWrdz4-0W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/DA0CDTJuZ0rt5rI--l1Kaz8CoVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.189.224.0/22
Signature Algorithm: sha256WithRSAEncryption
71:a1:78:31:38:77:7a:0a:b3:80:21:14:51:93:3a:37:1f:63:
4b:d7:2b:6a:9d:14:64:df:6e:50:79:2f:c5:18:33:e0:93:49:
74:b3:8c:48:81:70:ed:ab:b0:72:9e:f5:68:84:00:b6:2c:0b:
86:7b:e5:2b:1e:4f:45:13:91:05:42:92:cf:59:61:65:ee:e0:
28:c6:1d:f8:f4:75:db:18:e9:2c:97:94:22:b4:a9:53:e9:47:
38:cc:4a:d9:09:29:63:d6:d7:77:01:b4:8f:59:f5:41:c2:e9:
42:8d:f1:5f:e6:03:3d:60:27:1b:e3:fb:e9:fd:70:ec:0a:e5:
73:f7:6f:73:61:9c:eb:de:b7:63:07:7e:14:71:53:d8:3f:32:
bc:9a:d6:78:94:e0:c0:b6:a2:ea:76:7a:6c:5c:3c:3b:81:2b:
26:77:10:e6:d1:de:76:4f:08:f2:47:e2:af:e2:d7:dc:68:34:
43:5a:e7:e9:9b:85:36:8e:40:00:10:99:51:4f:a3:22:db:aa:
2e:62:32:42:13:55:2d:16:a5:e0:12:84:a7:f8:70:6b:2a:76:
cb:a8:d7:01:c5:89:92:5e:a5:d1:6c:5e:d6:53:24:09:73:76:
87:b4:07:d2:b9:c1:df:0b:cc:66:e5:89:1e:80:0d:5e:b0:98:
13:72:7b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:15:17 2025 by rpki-client