Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/T8kwiMxdsPj5WVrHlLTs3yrXUIs.roa
File: T8kwiMxdsPj5WVrHlLTs3yrXUIs.roa (raw, json)
Hash identifier: p4P/DLvoVxHphcaC/4K6Jyv9rDztj8/+xCTMYcnRh1E=
Subject key identifier: 4F:C9:30:88:CC:5D:B0:F8:F9:59:5A:C7:94:B4:EC:DF:2A:D7:50:8B
Certificate issuer: /CN=52d661a948f2bf3490e89d8252f2ccc8747ce5c7
Certificate serial: 043CB9AA
Authority key identifier: 52:D6:61:A9:48:F2:BF:34:90:E8:9D:82:52:F2:CC:C8:74:7C:E5:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtZhqUjyvzSQ6J2CUvLMyHR85cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/T8kwiMxdsPj5WVrHlLTs3yrXUIs.roa
Signing time: Sat 01 Jan 2022 06:52:26 +0000
ROA not before: Sat 01 Jan 2022 06:52:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57630
IP address blocks: 193.201.16.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71088554 (0x43cb9aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52d661a948f2bf3490e89d8252f2ccc8747ce5c7
Validity
Not Before: Jan 1 06:52:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4fc93088cc5db0f8f9595ac794b4ecdf2ad7508b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:65:77:1f:ca:89:ff:ba:43:bf:79:51:f1:94:
f6:22:0a:7d:2c:89:44:4b:ed:ba:61:9f:11:92:aa:
c8:18:71:64:10:f4:2b:72:8f:0a:02:05:28:91:dd:
05:3c:4b:89:07:6b:fe:e2:49:a9:14:65:02:51:34:
11:ce:5d:29:1f:3a:8e:31:c6:01:07:bf:97:de:5b:
78:03:97:ff:a0:9e:9c:65:10:44:95:6b:63:3d:38:
a9:c7:22:b6:f1:ac:97:61:ae:18:b2:c9:7e:af:12:
dd:0a:ae:4e:42:75:e0:62:bb:ea:f5:9d:df:c7:d5:
b1:13:e4:3d:2a:ba:6d:52:d7:61:9e:19:aa:84:79:
fb:b0:b7:cc:ac:d2:88:69:0e:28:42:7d:3a:fc:3c:
fd:db:70:fd:5d:c2:71:8a:ff:3f:88:33:88:9c:c7:
d5:67:88:29:c5:be:08:a4:a1:d9:3e:20:78:62:66:
8d:d1:79:15:2d:8e:d5:c3:49:9c:c7:56:da:21:1c:
79:36:e5:77:df:59:a5:63:bd:4c:4e:35:db:8f:8f:
6d:db:d3:fa:99:98:63:22:e7:76:24:39:8b:c6:76:
0f:1b:cc:82:f3:1d:ee:45:a6:85:9b:f0:f1:b9:4c:
0e:1a:2f:ea:4d:55:e6:b9:00:dc:9c:37:89:46:bb:
1b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C9:30:88:CC:5D:B0:F8:F9:59:5A:C7:94:B4:EC:DF:2A:D7:50:8B
X509v3 Authority Key Identifier:
keyid:52:D6:61:A9:48:F2:BF:34:90:E8:9D:82:52:F2:CC:C8:74:7C:E5:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtZhqUjyvzSQ6J2CUvLMyHR85cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/T8kwiMxdsPj5WVrHlLTs3yrXUIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.16.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:0c:c5:88:f2:8d:75:42:5a:f3:cb:3d:88:9b:ed:6c:a7:79:
11:89:0a:44:77:96:56:93:ab:69:1e:6d:37:3e:28:7e:31:89:
34:ad:42:46:f1:b5:d1:d8:aa:b5:3e:06:d4:d9:59:73:ae:16:
2a:01:e3:f3:56:ae:ff:10:6f:6b:c3:1d:8b:e7:a2:ca:af:2c:
1d:63:1e:85:7a:ec:49:4d:6d:c1:81:ae:fc:e0:ab:09:34:b8:
3f:a3:dd:43:d4:9e:72:c3:11:9c:d7:38:b2:d2:7c:49:74:e1:
a5:9a:6c:fc:cb:0d:cb:1d:7b:4c:76:f0:22:31:24:7d:7d:af:
44:0e:29:d9:a1:c4:92:92:3c:ef:27:fc:7c:6b:1e:81:69:2d:
2f:ab:66:ce:79:9d:12:61:3b:ae:92:9f:25:11:86:f8:0a:2f:
96:a0:7e:de:c0:7e:b5:2f:50:89:f0:ae:b4:9f:da:03:f3:0f:
dd:ab:64:86:19:19:05:7f:3f:22:4d:38:0f:fb:05:e3:62:53:
b5:a7:5f:d4:68:e9:ae:c7:5a:a5:eb:cb:ec:05:e0:67:56:ee:
30:f6:5c:d5:c6:8c:8b:dd:aa:da:16:d4:86:bf:34:1c:f6:61:
eb:8e:fa:7f:18:1f:24:de:25:f9:1d:9a:c7:06:02:f0:f2:ab:
c1:98:25:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:24 2025 by rpki-client