Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/K803htlvou845dh5nzSnGg4K2_Q.roa
File: K803htlvou845dh5nzSnGg4K2_Q.roa (raw, json)
Hash identifier: q8kc3UfrF3YTYAHkLI4//T3D/x+wjmVuBvPVyyMaC+I=
Subject key identifier: 2B:CD:37:86:D9:6F:A2:EF:38:E5:D8:79:9F:34:A7:1A:0E:0A:DB:F4
Certificate issuer: /CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Certificate serial: 01856CAF18264D4C8B9C73B12E1661B67A0F
Authority key identifier: 09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/K803htlvou845dh5nzSnGg4K2_Q.roa
Signing time: Sun 01 Jan 2023 09:34:52 +0000
ROA not before: Sun 01 Jan 2023 09:34:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203576
IP address blocks: 194.110.169.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:18:26:4d:4c:8b:9c:73:b1:2e:16:61:b6:7a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Validity
Not Before: Jan 1 09:34:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2bcd3786d96fa2ef38e5d8799f34a71a0e0adbf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:03:95:e2:41:5e:69:b4:e0:ed:4e:2b:7b:e2:
3b:c3:45:e3:ad:6f:d1:78:1f:4b:e6:39:86:3e:f1:
87:2f:87:38:b3:f3:40:9b:30:a5:c7:70:62:66:df:
4e:d6:83:fd:c8:b6:07:4c:fb:f6:88:e6:2b:ca:8e:
3f:8c:8c:7f:5b:96:f0:59:e8:74:da:58:7a:e1:ac:
29:96:74:7d:44:fe:61:f6:49:81:07:57:ec:32:75:
ae:fc:7f:a1:ab:c2:c9:ce:93:79:f8:01:82:c2:8c:
c9:3b:3c:ef:fa:6c:0b:e5:03:d6:eb:8a:f7:93:83:
97:28:7f:65:37:8b:83:d0:64:0d:cb:02:08:52:f9:
10:28:79:22:26:83:b9:b7:c9:3f:65:56:ae:8a:7d:
67:05:86:09:81:cb:8c:52:8f:47:67:73:95:a2:fc:
8e:13:54:4e:a8:cd:79:fd:cd:4b:98:39:8d:c7:49:
8b:87:35:0f:9f:46:3c:c2:77:80:76:98:23:9c:47:
e7:0c:2a:2a:47:21:63:e9:ad:a3:0b:e3:e5:bc:b5:
f7:5b:c8:5c:24:22:16:24:5f:82:cc:75:c4:50:21:
03:50:de:8c:dc:b8:48:b1:a1:fc:ff:5f:fb:96:ec:
75:1c:bf:4a:49:69:be:24:0d:7b:36:64:c5:86:aa:
f2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:CD:37:86:D9:6F:A2:EF:38:E5:D8:79:9F:34:A7:1A:0E:0A:DB:F4
X509v3 Authority Key Identifier:
keyid:09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/K803htlvou845dh5nzSnGg4K2_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.169.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:f7:ad:b8:78:5c:01:4b:73:2b:74:fd:06:2a:20:2d:99:7f:
b3:58:79:08:12:b8:18:67:b9:e2:3e:30:fc:f0:97:7b:18:67:
32:87:d5:ce:37:42:13:2f:c4:ca:c2:05:15:76:b8:6d:fc:b1:
9b:db:42:2c:6c:04:e3:96:a8:01:a4:a6:95:a7:a0:08:ac:3a:
39:42:52:f0:b6:dc:e7:40:7c:32:5f:e5:77:80:8a:15:96:e4:
3f:ab:f7:86:60:8a:ee:57:12:46:55:bc:45:b7:8d:3a:e0:94:
a6:98:e9:21:45:02:e0:7f:ef:f7:2a:49:b8:cb:36:f3:db:06:
3d:04:54:21:76:2f:a2:cf:ae:fe:c9:3f:bc:58:c2:15:87:b0:
1c:7f:d1:40:70:72:9f:2b:dc:09:b0:31:25:cc:aa:01:cb:bc:
d9:0d:52:48:8b:f3:21:98:76:32:09:a4:21:df:f3:ae:33:8c:
1b:bf:93:3c:0c:48:a5:88:db:b4:df:d9:d4:cf:ae:ca:16:29:
7e:56:b9:31:1a:8e:e7:d0:d6:35:19:ae:1f:c4:5b:b2:80:95:
98:cc:97:f0:70:bc:96:4e:77:e4:5c:d4:d7:29:6f:a9:f0:b6:
3b:a6:50:a2:4e:e3:84:aa:43:e6:74:54:12:bf:aa:cb:37:ba:
65:a7:88:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:02:41 2025 by rpki-client