Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/F_v0_g8sVrhBNkZek8aDaWnKypA.roa
File: F_v0_g8sVrhBNkZek8aDaWnKypA.roa (raw, json)
Hash identifier: 31gyJhtW/ZKWu7JKdLWUdfT9+gyQBJnOiD7FQEaC5K4=
Subject key identifier: 17:FB:F4:FE:0F:2C:56:B8:41:36:46:5E:93:C6:83:69:69:CA:CA:90
Certificate issuer: /CN=f7e5647cd0b7f722bed4569f37b8bf8f92538cf5
Certificate serial: 018570028458D6DFE8A82922903BA2F934D2
Authority key identifier: F7:E5:64:7C:D0:B7:F7:22:BE:D4:56:9F:37:B8:BF:8F:92:53:8C:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-VkfNC39yK-1FafN7i_j5JTjPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/F_v0_g8sVrhBNkZek8aDaWnKypA.roa
Signing time: Mon 02 Jan 2023 01:04:51 +0000
ROA not before: Mon 02 Jan 2023 01:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57033
IP address blocks: 193.106.65.0/24 maxlen: 24
193.106.66.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:84:58:d6:df:e8:a8:29:22:90:3b:a2:f9:34:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e5647cd0b7f722bed4569f37b8bf8f92538cf5
Validity
Not Before: Jan 2 01:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17fbf4fe0f2c56b84136465e93c6836969caca90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:64:aa:3b:c9:d8:7c:d5:97:86:3d:d0:b9:7d:
58:0b:18:8c:3e:8b:b5:07:a1:6f:a7:c0:f3:58:3f:
39:aa:4a:ff:20:dc:9d:66:81:eb:70:44:83:c6:aa:
f9:d5:06:b8:30:ab:c6:3a:f2:47:2d:21:e1:1d:a4:
c5:47:52:e6:b4:cf:a1:d1:19:dd:05:31:c0:04:db:
93:e3:18:53:07:46:33:e0:00:4a:2e:40:02:69:90:
5c:8b:a1:ce:f8:27:ee:52:09:79:ec:b3:fa:fb:70:
e3:86:31:f0:77:fb:45:f8:24:c2:82:6e:2b:a2:85:
b1:ed:9a:a7:51:f3:8a:af:2d:15:7a:3e:d5:94:38:
4c:24:d6:52:03:88:9a:da:76:0a:25:a7:5c:d9:97:
ef:83:53:65:35:2f:94:64:a8:73:5d:2e:2e:64:ba:
76:9d:24:b1:f3:be:0c:4f:e5:8c:a6:94:47:a0:33:
b5:b0:cb:e8:e5:5c:b0:5c:4d:82:87:c3:a9:3c:fe:
31:50:09:91:10:e2:a9:01:cf:f1:dd:2a:f3:38:69:
ec:7c:a7:bc:63:a1:f5:1d:84:60:d1:a5:6c:18:84:
ce:db:69:07:ba:d2:59:93:4e:4e:f5:5c:03:dc:4b:
e1:55:db:cf:58:03:00:65:82:7b:46:6a:ea:6e:56:
26:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:FB:F4:FE:0F:2C:56:B8:41:36:46:5E:93:C6:83:69:69:CA:CA:90
X509v3 Authority Key Identifier:
keyid:F7:E5:64:7C:D0:B7:F7:22:BE:D4:56:9F:37:B8:BF:8F:92:53:8C:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-VkfNC39yK-1FafN7i_j5JTjPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/F_v0_g8sVrhBNkZek8aDaWnKypA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.65.0-193.106.66.255
Signature Algorithm: sha256WithRSAEncryption
ab:7b:d0:74:52:d0:9c:c0:34:ba:80:d1:ff:72:7d:1a:23:5f:
5c:db:1a:64:b6:72:d0:89:54:16:2c:65:07:c7:f3:61:79:ea:
9e:4d:bd:ed:a9:ef:72:31:6c:d0:53:10:d6:81:bf:57:07:3a:
73:d5:e5:76:1d:66:19:ca:38:e8:72:a6:e3:c2:b6:b1:6f:a0:
dd:75:72:34:92:61:a8:15:cf:00:3b:d3:6e:08:11:b0:ba:9f:
24:e5:d5:69:ac:d3:af:be:be:c1:d1:c4:30:da:32:9a:fe:a9:
ac:6e:2e:cc:fc:98:e3:81:60:2c:2f:57:65:01:2e:de:c5:06:
6e:44:2a:72:eb:71:70:3e:77:6c:b6:45:80:8d:40:ab:94:6b:
dd:3a:62:4b:40:c7:d2:ae:fa:65:98:21:79:50:a8:fa:78:21:
fb:80:18:e1:bc:e1:c6:29:2b:7f:ce:30:18:5d:a0:24:43:ab:
b4:f4:53:f0:81:6e:a6:f7:41:9d:99:1e:10:9c:29:7c:aa:73:
85:65:3e:a5:d0:74:d2:74:c7:57:48:c7:15:b3:60:30:cf:6a:
5e:be:ee:45:0a:0f:d0:4f:e6:53:29:f0:19:56:86:a9:ef:67:
62:5b:7c:b5:c0:29:cb:33:4f:52:6d:ce:3b:4d:4a:1d:90:6f:
3a:1e:ba:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:18:12 2025 by rpki-client