Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/cPsvmO7Dx8cT9W3eYQTU-4L5kT4.roa
File: cPsvmO7Dx8cT9W3eYQTU-4L5kT4.roa (raw, json)
Hash identifier: z9eV8AAUtlipF8kmV94HGiIw5e1qJTwIas+fQvavfMI=
Subject key identifier: 70:FB:2F:98:EE:C3:C7:C7:13:F5:6D:DE:61:04:D4:FB:82:F9:91:3E
Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Certificate serial: 0185719E729E43753A0A39E817761471B3B3
Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/cPsvmO7Dx8cT9W3eYQTU-4L5kT4.roa
Signing time: Mon 02 Jan 2023 08:34:47 +0000
ROA not before: Mon 02 Jan 2023 08:34:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16015
IP address blocks: 213.253.194.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:72:9e:43:75:3a:0a:39:e8:17:76:14:71:b3:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Validity
Not Before: Jan 2 08:34:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=70fb2f98eec3c7c713f56dde6104d4fb82f9913e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:bd:27:b6:6d:4c:69:ec:b8:b5:75:84:df:f6:
9a:2a:7d:31:e5:82:14:da:0c:b6:e0:c2:21:1c:38:
a9:1d:5f:7b:1d:e7:d1:11:4c:c8:30:b0:c2:37:58:
eb:8e:e4:26:e0:4c:34:25:5d:53:f8:be:47:e4:0f:
52:9e:47:4b:8c:44:83:e9:e3:73:5e:a1:2c:dc:ff:
f3:b3:22:3b:94:8b:ff:ab:0e:e5:38:33:9d:2b:74:
bf:cc:47:11:ef:14:32:ac:6a:7f:ac:e8:80:eb:62:
92:69:61:41:57:a7:78:cd:ef:1f:f0:61:4b:39:fc:
84:d4:a7:5e:94:2a:1d:3a:92:a5:bf:c6:b2:23:14:
fb:82:43:c3:76:dc:ce:d7:86:54:ef:c7:92:35:23:
a9:5f:b6:c9:cd:e6:e7:de:a2:1d:62:6d:17:19:43:
8a:11:62:ab:0e:47:83:d3:a0:c0:11:4c:40:31:d8:
ec:d3:4b:91:67:4e:86:0a:6d:b7:8d:35:d2:b4:34:
58:9a:d1:c5:1d:45:75:6f:46:d1:cf:6d:8c:a4:f4:
fe:c8:0a:7b:1a:63:d2:e2:55:82:cc:b8:45:8d:11:
36:78:b6:f6:54:b0:59:63:33:d6:49:ab:dd:36:97:
0b:8f:e9:78:c3:22:3a:85:cd:b9:bc:cb:ea:52:4a:
f2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:FB:2F:98:EE:C3:C7:C7:13:F5:6D:DE:61:04:D4:FB:82:F9:91:3E
X509v3 Authority Key Identifier:
keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/cPsvmO7Dx8cT9W3eYQTU-4L5kT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.253.194.0/24
Signature Algorithm: sha256WithRSAEncryption
39:93:28:de:65:14:57:9a:20:81:32:a6:57:3b:46:21:f9:ad:
c6:8c:03:04:17:48:b8:58:00:71:46:3f:65:9a:26:f8:a9:f9:
ab:25:01:ab:e7:e4:95:a0:9c:c3:a5:bb:41:d3:90:31:8e:1a:
cf:2d:9f:81:2d:d6:cf:73:00:0e:78:d0:7b:74:b5:05:dc:d7:
b0:c1:00:90:b9:a0:63:3c:47:43:ef:2a:c6:93:52:1f:81:a6:
2c:64:0c:b5:e2:a4:92:58:da:58:a9:e7:28:da:47:1d:05:e6:
56:f0:c0:93:87:e7:72:3f:75:c6:2e:1a:6c:ef:27:8f:26:82:
9e:38:a7:3e:ac:1c:3d:5d:ac:96:fa:7a:9f:80:9a:c2:96:45:
c2:fe:b7:3f:5c:e0:6c:38:aa:9b:02:17:87:94:0c:a2:04:5b:
ce:76:14:45:09:83:f5:8f:69:ec:ce:8b:08:89:86:4e:b0:fb:
21:72:b9:7a:80:cf:6c:f0:15:f9:86:52:90:02:d6:ae:99:d0:
51:85:8d:7b:c9:36:04:49:6f:6c:c9:8c:05:ec:54:03:d6:0c:
df:ad:24:9c:9a:e3:16:53:f3:9c:e1:c5:f9:ea:e4:fb:51:93:
f4:41:e6:2f:aa:82:c6:8b:5a:38:82:97:bb:4f:c7:8c:d4:03:
a9:a3:ae:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:15:23 2025 by rpki-client